refactor(Dockerfile): optimize Dockerfile structure and layers

Dockerfile

@@ -1,50 +1,53 @@
+# Stage 1: Browser and build tools installation
 FROM python:3.11.4-slim-bullseye AS install-browser
 
-RUN apt-get update \
-    && apt-get satisfy -y \
-    "chromium, chromium-driver (>= 115.0)" \
-    && chromium --version && chromedriver --version
-
-RUN apt-get update \
-    && apt-get install -y --fix-missing firefox-esr wget \
-    && wget https://github.com/mozilla/geckodriver/releases/download/v0.33.0/geckodriver-v0.33.0-linux64.tar.gz \
-    && tar -xvzf geckodriver* \
-    && chmod +x geckodriver \
-    && mv geckodriver /usr/local/bin/
-
-# Install build tools
-RUN apt-get update \
-    && apt-get install -y --no-install-recommends \
-    build-essential \
-    && rm -rf /var/lib/apt/lists/*
-
+# Install Chromium, Chromedriver, Firefox, Geckodriver, and build tools in one layer
+RUN apt-get update && \
+    apt-get satisfy -y "chromium, chromium-driver (>= 115.0)" && \
+    apt-get install -y --no-install-recommends firefox-esr wget build-essential && \
+    wget https://github.com/mozilla/geckodriver/releases/download/v0.33.0/geckodriver-v0.33.0-linux64.tar.gz && \
+    tar -xvzf geckodriver-v0.33.0-linux64.tar.gz && \
+    chmod +x geckodriver && \
+    mv geckodriver /usr/local/bin/ && \
+    rm geckodriver-v0.33.0-linux64.tar.gz && \
+    chromium --version && chromedriver --version && \
+    rm -rf /var/lib/apt/lists/*  # Clean up apt lists to reduce image size
+
+# Stage 2: Python dependencies installation
 FROM install-browser AS gpt-researcher-install
 
 ENV PIP_ROOT_USER_ACTION=ignore
-
-RUN mkdir /usr/src/app
 WORKDIR /usr/src/app
 
+# Copy and install Python dependencies in a single layer to optimize cache usage
 COPY ./requirements.txt ./requirements.txt
-RUN pip install -r requirements.txt
-
 COPY ./multi_agents/requirements.txt ./multi_agents/requirements.txt
-RUN pip install -r multi_agents/requirements.txt
 
+RUN pip install --no-cache-dir -r requirements.txt && \
+    pip install --no-cache-dir -r multi_agents/requirements.txt
+
+# Stage 3: Final stage with non-root user and app
 FROM gpt-researcher-install AS gpt-researcher
 
+# Use environment variables for API keys (defaults can be overridden at runtime)
 ARG OPENAI_API_KEY
 ARG TAVILY_API_KEY
 
 ENV OPENAI_API_KEY=${OPENAI_API_KEY}
 ENV TAVILY_API_KEY=${TAVILY_API_KEY}
 
-RUN useradd -ms /bin/bash gpt-researcher \
-    && chown -R gpt-researcher:gpt-researcher /usr/src/app
+# Create a non-root user for security
+RUN useradd -ms /bin/bash gpt-researcher && \
+    chown -R gpt-researcher:gpt-researcher /usr/src/app
 
 USER gpt-researcher
+WORKDIR /usr/src/app
 
+# Copy the rest of the application files with proper ownership
 COPY --chown=gpt-researcher:gpt-researcher ./ ./
 
+# Expose the application's port
 EXPOSE 8000
+
+# Define the default command to run the application
 CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8000"]