Merge pull request #3 from raphink/webapp

Poisoning/Webapp/LLM improvements

Author: nvibert

base/Dockerfile

@@ -0,0 +1,11 @@
+FROM python:3.9-slim
+
+WORKDIR /app
+
+COPY requirements.txt .
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gcc \
+    g++ \
+    && pip install --no-cache-dir -r requirements.txt --index-url https://download.pytorch.org/whl/cpu \
+    && apt-get purge -y gcc g++ && apt-get autoremove -y \
+    && rm -rf /var/lib/apt/lists/*

base/requirements.txt

@@ -0,0 +1,2 @@
+torch
+torchvision

inference/Dockerfile

@@ -1,9 +1,24 @@
-FROM python:3.9-slim
+# ../base/Dockerfile is the base image with Python and PyTorch installed
+FROM mnist:base
 
 WORKDIR /app
 
-COPY . .
+# Copy requirements first for better Docker layer caching
+COPY requirements.txt .
 
-RUN pip3 install --no-cache-dir -r requirements.txt
+# Install requirements
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Copy application code
+COPY app/ ./app/
+COPY main.py .
+
+# Create non-root user for security
+RUN groupadd -r appgroup && useradd -r -g appgroup appuser
+RUN chown -R appuser:appgroup /app
+USER appuser
 
 EXPOSE 5000
+
+# Use exec form for better signal handling
+CMD ["python", "main.py"]

inference/Dockerfile.slim

@@ -3,16 +3,16 @@ kind: Deployment
 metadata:
   name: mnist-inference
   labels:
-    app: mnist
+    app: mnist-inference
 spec:
   replicas: 1
   selector:
     matchLabels:
-      app: mnist
+      app: mnist-inference
   template:
     metadata:
       labels:
-        app: mnist
+        app: mnist-inference
     spec:
       containers:
       - name: mnist
@@ -31,12 +31,12 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
-  name: mnist-inference-service
+  name: mnist-inference
   labels:
-    app: mnist
+    app: mnist-inference
 spec:
   selector:
-    app: mnist
+    app: mnist-inference
   ports:
     - protocol: TCP
       port: 5000

inference/app/mnist_cnn.poisoned.pt

@@ -23,7 +23,7 @@ def predict():
     except Exception as e:
         return jsonify({'error': str(e)})
 
-@app.route('/refresh')
+@app.route('/refresh', methods=['PUT'])
 def refresh():
     refresh_model()
     return 'Model refreshed successfully\n'

inference/app/mnist_cnn.pt

@@ -1,3 +1,3 @@
-torch
-torchvision
-flask
+flask
+pillow
+numpy

inference/inference.yaml

@@ -0,0 +1,10 @@
+FROM python:3.11-slim
+
+WORKDIR /app
+COPY requirements.txt .
+RUN pip install -r requirements.txt
+
+COPY agent-server.py .
+
+EXPOSE 8080
+CMD ["python", "agent-server.py"]