fix: use official HuggingFace JupyterLab Docker template

- Complete rewrite using HF official template configuration
- Uses nvidia/cuda base image with miniconda
- Proper iframe embedding with CSP and cookie settings
- Starts notebooks from /data directory
- Password: huggingface (default)

Dockerfile

@@ -1,34 +1,91 @@
-# Official Jupyter PyTorch notebook with CUDA 12 (HF Spaces recommended)
-FROM quay.io/jupyter/pytorch-notebook:cuda12-latest
+FROM nvidia/cuda:12.5.1-cudnn-devel-ubuntu20.04
+
+ENV DEBIAN_FRONTEND=noninteractive \
+    TZ=Europe/Paris
+
+# Remove any third-party apt sources to avoid issues with expiring keys.
+# Install some basic utilities
+RUN rm -f /etc/apt/sources.list.d/*.list && \
+    apt-get update && apt-get install -y --no-install-recommends \
+    curl \
+    ca-certificates \
+    sudo \
+    git \
+    wget \
+    procps \
+    git-lfs \
+    zip \
+    unzip \
+    htop \
+    vim \
+    nano \
+    bzip2 \
+    libx11-6 \
+    build-essential \
+    libsndfile-dev \
+    software-properties-common \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN add-apt-repository ppa:flexiondotorg/nvtop && \
+    apt-get upgrade -y && \
+    apt-get install -y --no-install-recommends nvtop
+
+RUN curl -sL https://deb.nodesource.com/setup_21.x | bash - && \
+    apt-get install -y nodejs && \
+    npm install -g configurable-http-proxy
+
+WORKDIR /app
+
+RUN adduser --disabled-password --gecos '' --shell /bin/bash user \
+    && chown -R user:user /app
+
+RUN echo "user ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/90-user
+
+USER user
+
+ENV HOME=/home/user
+
+RUN mkdir $HOME/.cache $HOME/.config \
+    && chmod -R 777 $HOME
+
+ENV CONDA_AUTO_UPDATE_CONDA=false \
+    PATH=$HOME/miniconda/bin:$PATH
+
+RUN curl -sLo ~/miniconda.sh https://repo.continuum.io/miniconda/Miniconda3-py39_4.10.3-Linux-x86_64.sh \
+    && chmod +x ~/miniconda.sh \
+    && ~/miniconda.sh -b -p ~/miniconda \
+    && rm ~/miniconda.sh \
+    && conda clean -ya
+
+WORKDIR $HOME/app
 
-# Switch to root for system packages
 USER root
-RUN apt-get update && apt-get install -y git curl wget && \
-    rm -rf /var/lib/apt/lists/*
-
-# Switch back to jovyan user (uid 1000)
-USER jovyan
-WORKDIR /home/jovyan
-
-# Install Python dependencies
-COPY --chown=jovyan:users requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
-
-# Copy notebooks and source code
-COPY --chown=jovyan:users *.ipynb ./
-COPY --chown=jovyan:users src/ ./src/
-
-# Expose JupyterLab port
-EXPOSE 7860
-
-# Start JupyterLab with HF Spaces configuration
-CMD ["jupyter", "lab", \
-     "--ip=0.0.0.0", \
-     "--port=7860", \
-     "--no-browser", \
-     "--ServerApp.token=''", \
-     "--ServerApp.password=''", \
-     "--ServerApp.base_url=/", \
-     "--ServerApp.allow_origin='*'", \
-     "--ServerApp.allow_remote_access=True", \
-     "--ServerApp.disable_check_xsrf=True"]
+
+RUN --mount=target=/root/packages.txt,source=packages.txt \
+    apt-get update && \
+    xargs -r -a /root/packages.txt apt-get install -y --no-install-recommends \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN --mount=target=/root/on_startup.sh,source=on_startup.sh,readwrite \
+    bash /root/on_startup.sh
+
+RUN mkdir /data && chown user:user /data
+
+USER user
+
+RUN --mount=target=requirements.txt,source=requirements.txt \
+    pip install --no-cache-dir --upgrade -r requirements.txt
+
+COPY --chown=user . $HOME/app
+
+RUN chmod +x start_server.sh
+
+ENV PYTHONUNBUFFERED=1 \
+    GRADIO_ALLOW_FLAGGING=never \
+    GRADIO_NUM_PORTS=1 \
+    GRADIO_SERVER_NAME=0.0.0.0 \
+    GRADIO_THEME=huggingface \
+    SYSTEM=spaces \
+    SHELL=/bin/bash
+
+CMD ["./start_server.sh"]

README.md

@@ -1,12 +1,13 @@
 ---
-title: FBMC Chronos-2 Zero-Shot Forecasting
+title: FBMC Chronos-2 Forecasting
 emoji: ⚡
 colorFrom: blue
 colorTo: green
 sdk: docker
-app_port: 7860
 pinned: false
-license: mit
+tags:
+  - jupyterlab
+suggested_storage: small
 ---
 
 # FBMC Flow-Based Market Coupling Forecasting

on_startup.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+# Startup script - runs as root before container starts

requirements.txt

@@ -1,5 +1,7 @@
-# HuggingFace Space Requirements for FBMC Chronos-2 Forecasting
-# GPU-optimized dependencies for JupyterLab SDK
+# JupyterLab (from HF template)
+jupyterlab==4.2.5
+tornado==6.2
+ipywidgets
 
 # Core ML/Data
 torch>=2.0.0
@@ -16,11 +18,6 @@ huggingface-hub>=0.19.0
 altair>=5.0.0
 vega-datasets
 
-# Jupyter
-ipykernel
-jupyter
-jupyterlab
-
 # Utilities
 python-dotenv
 tqdm

start_server.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+JUPYTER_TOKEN="${JUPYTER_TOKEN:=huggingface}"
+
+NOTEBOOK_DIR="/data"
+
+jupyter labextension disable "@jupyterlab/apputils-extension:announcements"
+
+jupyter-lab \
+--ip 0.0.0.0 \
+--port 7860 \
+--no-browser \
+--allow-root \
+--ServerApp.token="$JUPYTER_TOKEN" \
+--ServerApp.tornado_settings="{'headers': {'Content-Security-Policy': 'frame-ancestors *'}}" \
+--ServerApp.cookie_options="{'SameSite': 'None', 'Secure': True}" \
+--ServerApp.disable_check_xsrf=True \
+--LabApp.news_url=None \
+--LabApp.check_for_updates_class="jupyterlab.NeverCheckForUpdate" \
+--notebook-dir=$NOTEBOOK_DIR