Dockerfile

FROM python:3.10-slim-bookworm

# 设置全局环境变量
ENV TRANSFORMERS_CACHE=/model-cache \
    PYTHONUNBUFFERED=1 \
    PATH="/home/appuser/.local/bin:${PATH}"

# 系统级依赖安装（保持root权限）
RUN apt-get update && \
    apt-get install -y --no-install-recommends gcc python3-dev && \
    rm -rf /var/lib/apt/lists/*

# 创建应用用户及缓存目录
RUN adduser --disabled-password --gecos "" appuser && \
    mkdir -p /model-cache && \
    chown -R appuser:appuser /model-cache

# 切换用户
USER appuser
WORKDIR /app

# 安装Python依赖（全局可见）
COPY requirements.txt .
RUN pip install --no-cache-dir --upgrade pip && \
    pip install --no-cache-dir gunicorn==21.2.0 && \  # 显式安装gunicorn
    pip install --no-cache-dir -r requirements.txt

# 复制应用代码
COPY app.py .

EXPOSE 8080
CMD ["gunicorn", "--bind", "0.0.0.0:8080", "--timeout", "120", "app:app"]