From 23ca5b9bf1cf1e2a5dc916660885623326ec72f9 Mon Sep 17 00:00:00 2001 From: Shayne Parmelee Date: Mon, 16 Mar 2026 10:47:55 -0400 Subject: [PATCH] fix: add missing WORKDIR /app in production stage The multi-stage build conversion in #56 moved WORKDIR /app into the build stage, but each FROM resets the working directory. Without WORKDIR in the production stage, CMD runs from / and fails with "Failed to spawn: src/agent.py - No such file or directory". This matches the CLI's embedded template (livekit-cli PR #789). --- Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dockerfile b/Dockerfile index 1b77cae..8f6fa30 100644 --- a/Dockerfile +++ b/Dockerfile @@ -68,6 +68,8 @@ RUN adduser \ # This avoids expensive recursive chown and excludes build tools from the final image COPY --from=build --chown=appuser:appuser /app /app +WORKDIR /app + # Switch to the non-privileged user for all subsequent operations # This improves security by not running as root USER appuser