From b34afd61b976a9bbb156d51854ceec66dd37ab14 Mon Sep 17 00:00:00 2001 From: surya Date: Mon, 6 Jul 2026 18:01:04 +0530 Subject: [PATCH] [refactor]: relocate backend entrypoint outside bind mount MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Moved entrypoint.sh copy target from /app/entrypoint.sh to /entrypoint.sh in the dev Dockerfile. The dev compose bind mount ./backend:/app overlays /app entirely; placing the entrypoint above that boundary ensures the image-baked script is never shadowed by host directory contents. No startup failure was reproduced — this is a preventive hardening change. --- .../advanced/ai-threat-detection/infra/docker/fastapi.dev | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/PROJECTS/advanced/ai-threat-detection/infra/docker/fastapi.dev b/PROJECTS/advanced/ai-threat-detection/infra/docker/fastapi.dev index fac6fb6c..375a40ec 100644 --- a/PROJECTS/advanced/ai-threat-detection/infra/docker/fastapi.dev +++ b/PROJECTS/advanced/ai-threat-detection/infra/docker/fastapi.dev @@ -31,11 +31,11 @@ COPY backend/pyproject.toml ./ RUN uv pip install --system -e ".[dev,ml]" COPY backend/ . -COPY infra/docker/entrypoint.sh /app/entrypoint.sh -RUN chmod +x /app/entrypoint.sh && \ +COPY infra/docker/entrypoint.sh /entrypoint.sh +RUN chmod +x /entrypoint.sh && \ mkdir -p /app/data/models EXPOSE 8000 -ENTRYPOINT ["/app/entrypoint.sh"] +ENTRYPOINT ["/entrypoint.sh"] CMD ["uvicorn", "app.factory:create_app", "--factory", "--host", "0.0.0.0", "--port", "8000", "--reload"]