FROM python:3.11-slim WORKDIR /app COPY . RUN pip install -r requirements.txt RUN useradd -m appuser USER appuser EXPOSE 8000 CMD ["python", "main.py"]

This Dockerfile describes the creation of an image for a Python application based on the lightweight python:3.11-slim image.

Main steps:

• WORKDIR /app — setting the working directory inside the container.
• COPY . — copying all files from the current directory to the container.
• RUN pip install -r requirements.txt — installing dependencies from the requirements.txt file.
• RUN useradd -m appuser — creating a new user appuser with a home directory.
• USER appuser — switching to the appuser for security.
• EXPOSE 8000 — declaring port 8000 for interaction.
• CMD ["python", "main.py"] — running the application with the command python main.py.

This approach improves security (running as non-root), reduces image size (slim), and provides application isolation.

To improve further, you can add:

• Copying only necessary files (e.g., COPY requirements.txt .) and installing dependencies before copying all code to cache layers.
• Using a virtual environment or pipenv/poetry for dependency management.
• Docker layer optimization to reduce image size.