From 31ac4cd767127289774a9a3782181864a2932bb3 Mon Sep 17 00:00:00 2001 From: lebaudantoine Date: Sat, 23 Aug 2025 01:09:00 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B(summary)=20fix=20hot=20reloading?= =?UTF-8?q?=20in=20tilt=20stack=20for=20summary=20image/pod?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Remove default unprivileged Docker user that was incompatible with hot reloading in tilt stack. Update tilt config to resolve path issues. CI builds still use unprivileged user, making this change safe while enabling proper development workflow with hot reloading functionality. --- bin/Tiltfile | 4 ++-- src/summary/Dockerfile | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/bin/Tiltfile b/bin/Tiltfile index 30045e9d..1086116d 100644 --- a/bin/Tiltfile +++ b/bin/Tiltfile @@ -58,10 +58,10 @@ docker_build( 'localhost:5001/meet-summary:latest', context='../src/summary', dockerfile='../src/summary/Dockerfile', - only=['.', '../../docker', '../../.dockerignore'], + only=['.'], target = 'production', live_update=[ - sync('../src/summary', '/home/summary'), + sync('../src/summary', '/app'), ] ) clean_old_images('localhost:5001/meet-summary') diff --git a/src/summary/Dockerfile b/src/summary/Dockerfile index 93e4a99f..0d05c159 100644 --- a/src/summary/Dockerfile +++ b/src/summary/Dockerfile @@ -12,11 +12,11 @@ FROM base AS production WORKDIR /app +# Un-privileged user running the application +ARG DOCKER_USER +USER ${DOCKER_USER} + COPY --from=builder /usr/local /usr/local COPY ./summary /app/summary -# Un-privileged user running the application -ARG DOCKER_USER=1000:1000 -USER ${DOCKER_USER} - CMD ["uvicorn", "summary.main:app", "--proxy-headers", "--host", "0.0.0.0", "--port", "8000"]