Spaces: switch to user 1000, port 7860, Gradio metadata; uv cache in HOME; run python -m vlm_playground.app

Dockerfile

@@ -1,25 +1,38 @@
 FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim
 
-WORKDIR /app
+ARG USERNAME=user
+ARG USER_UID=1000
+ARG USER_GID=1000
+
+RUN groupadd --gid ${USER_GID} ${USERNAME} \
+    && useradd --uid ${USER_UID} --gid ${USER_GID} --create-home ${USERNAME}
+
+ENV HOME=/home/${USERNAME}
+WORKDIR ${HOME}/app
 
 # Enable bytecode compilation and copy mode for mounted volumes
 ENV UV_COMPILE_BYTECODE=1
 ENV UV_LINK_MODE=copy
 
+USER ${USERNAME}
+
+# Writable UV cache for non-root user
+ENV UV_CACHE_DIR=${HOME}/.cache/uv
+
 # Install dependencies from lockfile using cache/bind mounts
-RUN --mount=type=cache,target=/root/.cache/uv \
-    --mount=type=bind,source=uv.lock,target=uv.lock \
-    --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
+RUN --mount=type=cache,target=${HOME}/.cache/uv \
+    --mount=type=bind,source=uv.lock,target=uv.lock,readonly \
+    --mount=type=bind,source=pyproject.toml,target=pyproject.toml,readonly \
     uv sync --locked --no-install-project --no-dev
 
 # Then, add the rest of the project source code and install it
 # Installing separately from its dependencies allows optimal layer caching
-COPY . /app
-RUN --mount=type=cache,target=/root/.cache/uv \
+COPY --chown=${USERNAME}:${USERNAME} . ${HOME}/app
+RUN --mount=type=cache,target=${HOME}/.cache/uv \
     uv sync --locked --no-dev
 
 # Place executables in the environment at the front of the path
-ENV PATH="/app/.venv/bin:$PATH"
+ENV PATH="${HOME}/app/.venv/bin:$PATH"
 
 # Reset entrypoint; don't invoke uv directly
 ENTRYPOINT []

README.md

@@ -4,16 +4,15 @@ emoji: 🚀
 colorFrom: red
 colorTo: red
 sdk: docker
-app_port: 8501
+app_port: 7860
 tags:
-- streamlit
+- gradio
 pinned: false
-short_description: Streamlit template space
+short_description: Gradio docker space
 ---
 
-# Welcome to Streamlit!
+# VLM Playground (Gradio)
 
-Edit `/src/streamlit_app.py` to customize this app to your heart's desire. :heart:
+This Space runs a minimal Gradio app served on port 7860 via Docker.
 
-If you have any questions, checkout our [documentation](https://docs.streamlit.io) and [community
-forums](https://discuss.streamlit.io).
+Local dev: `./run.sh` (exposes `http://localhost:7860`).