cesnimda
a8bf505ce5
Upgrade and hash-lock upload-facing parser dependencies, reject resource-heavy or mismatched inputs, remove unsafe backend binary fallbacks, and prevent internal parser failures from leaking to users.
17 lines
639 B
Docker
17 lines
639 B
Docker
FROM python:3.12.10-slim-bookworm
|
|
ENV PIP_NO_CACHE_DIR=1 \
|
|
PIP_DISABLE_PIP_VERSION_CHECK=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
TRANSFORMERS_NO_TF=1 \
|
|
HF_HUB_DISABLE_TELEMETRY=1
|
|
WORKDIR /app
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends tesseract-ocr tesseract-ocr-eng \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
COPY requirements-linux.lock ./
|
|
RUN python -m pip install --upgrade pip setuptools wheel \
|
|
&& python -m pip install --require-hashes --extra-index-url https://download.pytorch.org/whl/cpu -r requirements-linux.lock
|
|
COPY . .
|
|
EXPOSE 8001
|
|
CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "8001"]
|