avoiding container to create root owned files in mapped volumes. also adding a helper run.sh

Author: akitaonrails

.gitignore

@@ -1,2 +1,3 @@
 hf_download
 outputs
+.aider*

Dockerfile

@@ -27,7 +27,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     libxrender1 \
     libxext6 \
     ninja-build \
-    && rm -rf /var/lib/apt/lists/*
+    sudo \
+    && rm -rf /var/lib/apt/lists/* \
+    && echo "appuser ALL=(ALL) NOPASSWD: /bin/chown" >> /etc/sudoers
 
 # Create and configure directories before switching user
 RUN mkdir -p /app && \
@@ -63,19 +65,20 @@ RUN pip install --no-cache-dir \
 RUN mkdir -p /app/outputs && \
     chown -R $UID:$GID /app/outputs && \
     mkdir -p $VIRTUAL_ENV && \
-    chown -R $UID:$GID $VIRTUAL_ENV
+    chown -R $UID:$GID $VIRTUAL_ENV && \
+    mkdir -p /app/hf_download && \
+    chown -R $UID:$GID /app/hf_download
 
-# Model directory setup
-RUN mkdir -p /app/hf_download && \
-    chmod -R 777 /app/hf_download
+# Copy entrypoint script
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh && \
+    chown $UID:$GID /entrypoint.sh
 
-# Expose output directory
-RUN mkdir -p /app/outputs && \
-    chmod -R 777 /app/outputs
+EXPOSE 7860
 
-# Configure directories
+# Configure volumes
 VOLUME /app/hf_download
 VOLUME /app/outputs
 
-EXPOSE 7860
-CMD ["python", "demo_gradio.py", "--share"]
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["python", "demo_gradio.py", "--share", "--server-name", "0.0.0.0"]

entrypoint.sh

@@ -1,6 +1,17 @@
 #!/bin/bash
 set -e
 
+# Ensure directories have correct ownership
+if [ "$(stat -c '%u' /app/outputs)" != "$UID" ]; then
+    echo "Fixing permissions for /app/outputs"
+    sudo chown -R $UID:$GID /app/outputs
+fi
+
+if [ "$(stat -c '%u' /app/hf_download)" != "$UID" ]; then
+    echo "Fixing permissions for /app/hf_download"
+    sudo chown -R $UID:$GID /app/hf_download
+fi
+
 # Check for required models
 MODEL_CHECKLIST=(
   "/app/models/checkpoints/sd_xl_base_1.0.safetensors"
@@ -15,4 +26,4 @@ for model in "${MODEL_CHECKLIST[@]}"; do
   fi
 done
 
-exec python demo_gradio.py --share --server-name 0.0.0.0
+exec "$@"

run.sh

@@ -0,0 +1,4 @@
+docker run -it --rm --gpus all -p 7860:7860 \
+  -v ./outputs:/app/outputs \
+  -v ./hf_download:/app/hf_download \
+  framepack-torch26-cu124:latest