diff --git a/bin/Tiltfile b/bin/Tiltfile index 30045e9d..1086116d 100644 --- a/bin/Tiltfile +++ b/bin/Tiltfile @@ -58,10 +58,10 @@ docker_build( 'localhost:5001/meet-summary:latest', context='../src/summary', dockerfile='../src/summary/Dockerfile', - only=['.', '../../docker', '../../.dockerignore'], + only=['.'], target = 'production', live_update=[ - sync('../src/summary', '/home/summary'), + sync('../src/summary', '/app'), ] ) clean_old_images('localhost:5001/meet-summary') diff --git a/src/summary/Dockerfile b/src/summary/Dockerfile index 93e4a99f..0d05c159 100644 --- a/src/summary/Dockerfile +++ b/src/summary/Dockerfile @@ -12,11 +12,11 @@ FROM base AS production WORKDIR /app +# Un-privileged user running the application +ARG DOCKER_USER +USER ${DOCKER_USER} + COPY --from=builder /usr/local /usr/local COPY ./summary /app/summary -# Un-privileged user running the application -ARG DOCKER_USER=1000:1000 -USER ${DOCKER_USER} - CMD ["uvicorn", "summary.main:app", "--proxy-headers", "--host", "0.0.0.0", "--port", "8000"]