fix: correct Docker configuration for Rye best practices

- Remove incorrect 'rye install' usage in containers

- Use requirements.lock + pip install approach (Rye recommended)

- Add comprehensive .dockerignore file

- Simplify Dockerfiles for faster, smaller builds

- Update migration guide with correct Docker usage

The previous Docker setup was using 'rye install' which is incorrect for containers.

Now following official Rye documentation for containerization.

Author: mldangelo

.dockerignore

@@ -0,0 +1,41 @@
+# Rye
+.venv/
+.python-version
+.rye/
+
+# Development files
+*.egg-info/
+build/
+dist/
+__pycache__/
+*.pyc
+*.pyo
+
+# IDE
+.vscode/
+.idea/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Git
+.git/
+.gitignore
+
+# Documentation
+*.md
+docs/
+
+# Testing
+.coverage
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Scratch/development
+scratch/
+llm_context.txt
+
+# CI/CD
+.github/ 

Dockerfile

@@ -2,27 +2,27 @@ FROM python:3.11-slim
 
 WORKDIR /app
 
-# Install Rye
-RUN pip install rye
+# Copy requirements lock file and install dependencies
+COPY requirements.lock ./
+RUN pip install --no-cache-dir -r requirements.lock
 
-# Copy project configuration files
-COPY pyproject.toml ./
-
-# Configure Rye to not create a virtual environment inside the container
-ENV RYE_NO_AUTO_INSTALL=1
-ENV RYE_USE_UV=1
-
-# Install dependencies
-RUN rye sync --no-dev
-
-# Copy the rest of the application
+# Copy source code
 COPY . .
 
-# Install the application
-RUN rye install
+# Install the application using pip
+RUN pip install --no-cache-dir .
 
 # Create a non-root user
-RUN useradd -m appuser
+ARG UID=10001
+RUN adduser \
+    --disabled-password \
+    --gecos "" \
+    --home "/nonexistent" \
+    --shell "/sbin/nologin" \
+    --no-create-home \
+    --uid "${UID}" \
+    appuser
+
 USER appuser
 
 # Set the entrypoint

Dockerfile.full

@@ -2,27 +2,27 @@ FROM python:3.11-slim
 
 WORKDIR /app
 
-# Install Rye
-RUN pip install rye
+# Copy requirements lock file and install all dependencies
+COPY requirements.lock ./
+RUN pip install --no-cache-dir -r requirements.lock
 
-# Copy project configuration files
-COPY pyproject.toml ./
-
-# Configure Rye to not create a virtual environment inside the container
-ENV RYE_NO_AUTO_INSTALL=1
-ENV RYE_USE_UV=1
-
-# Install dependencies with all extras
-RUN rye sync --no-dev --features all
-
-# Copy the rest of the application
+# Copy source code
 COPY . .
 
-# Install the application
-RUN rye install
+# Install the application with all extras using pip
+RUN pip install --no-cache-dir .[all]
 
 # Create a non-root user
-RUN useradd -m appuser
+ARG UID=10001
+RUN adduser \
+    --disabled-password \
+    --gecos "" \
+    --home "/nonexistent" \
+    --shell "/sbin/nologin" \
+    --no-create-home \
+    --uid "${UID}" \
+    appuser
+
 USER appuser
 
 # Set the entrypoint

Dockerfile.tensorflow

@@ -2,27 +2,27 @@ FROM python:3.11-slim
 
 WORKDIR /app
 
-# Install Rye
-RUN pip install rye
+# Copy requirements lock file and install dependencies
+COPY requirements.lock ./
+RUN pip install --no-cache-dir -r requirements.lock
 
-# Copy project configuration files
-COPY pyproject.toml ./
-
-# Configure Rye to not create a virtual environment inside the container
-ENV RYE_NO_AUTO_INSTALL=1
-ENV RYE_USE_UV=1
-
-# Install dependencies with TensorFlow extras
-RUN rye sync --no-dev --features tensorflow
-
-# Copy the rest of the application
+# Copy source code
 COPY . .
 
-# Install the application
-RUN rye install
+# Install the application with TensorFlow extras using pip
+RUN pip install --no-cache-dir .[tensorflow]
 
 # Create a non-root user
-RUN useradd -m appuser
+ARG UID=10001
+RUN adduser \
+    --disabled-password \
+    --gecos "" \
+    --home "/nonexistent" \
+    --shell "/sbin/nologin" \
+    --no-create-home \
+    --uid "${UID}" \
+    appuser
+
 USER appuser
 
 # Set the entrypoint

MIGRATION_GUIDE.md

@@ -141,20 +141,24 @@ The GitHub Actions workflow has been updated to use Rye:
 
 ### Docker
 
-All Dockerfiles have been updated:
+All Dockerfiles have been updated to follow **Rye best practices**:
 
 ```dockerfile
-# Install Rye
-RUN pip install rye
-
-# Configure Rye for containers
-ENV RYE_NO_AUTO_INSTALL=1
-ENV RYE_USE_UV=1
+# Copy requirements lock file and install dependencies
+COPY requirements.lock ./
+RUN pip install --no-cache-dir -r requirements.lock
 
-# Install dependencies
-RUN rye sync --no-dev --features all
+# Copy source code and install application
+COPY . .
+RUN pip install --no-cache-dir .[all]
 ```
 
+**Key changes:**
+- **No Rye installation** in containers (following official recommendations)
+- Use `requirements.lock` + `pip install` for faster, smaller builds  
+- Added comprehensive `.dockerignore` file
+- Simpler, more reliable container builds
+
 ## Compatibility
 
 ### What Stays the Same