From 0dd3aae2f06f88f97403c6160b16d97c9ade40a0 Mon Sep 17 00:00:00 2001
From: vratins <vratins@andrew.cmu.edu>
Date: Fri, 27 Mar 2026 16:25:59 +0000
Subject: [PATCH 1/2] fixing huggingface bug

---
 Dockerfile | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 1089911..c447e9a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,6 +14,8 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     curl \
     git \
     build-essential \
+    libgl1 \
+    libglib2.0-0 \
     && add-apt-repository ppa:deadsnakes/ppa \
     && apt-get update \
     && apt-get install -y --no-install-recommends \
@@ -48,9 +50,15 @@ COPY scripts/ ./scripts/
 RUN uv sync --frozen
 
 # Pre-download ESM3 model to bake it into the image.
-# The generate script loads esm3-open without authentication, so no HF token is needed.
+# The repo is gated — pass your HuggingFace token at build time via:
+#   docker build --secret id=hf_token,env=HF_TOKEN .
 ENV HF_HOME=/app/.cache/huggingface
-RUN . .venv/bin/activate && python -c "\
+RUN --mount=type=secret,id=hf_token \
+    export HF_TOKEN=$(cat /run/secrets/hf_token) && \
+    export HUGGING_FACE_HUB_TOKEN=$HF_TOKEN && \
+    echo "Token length: ${#HF_TOKEN}" && \
+    . .venv/bin/activate && \
+    python -c "\
 from esm.models.esm3 import ESM3; \
 ESM3.from_pretrained('esm3-open'); \
 print('ESM3 model downloaded successfully')"

From 4c01e2c8ba26533519eb795c31d759678d350f71 Mon Sep 17 00:00:00 2001
From: vratins <vratins@andrew.cmu.edu>
Date: Fri, 27 Mar 2026 16:33:27 +0000
Subject: [PATCH 2/2] removing debugging from dockerfile + error message for HF
 token

---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index c447e9a..4180906 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -54,9 +54,9 @@ RUN uv sync --frozen
 #   docker build --secret id=hf_token,env=HF_TOKEN .
 ENV HF_HOME=/app/.cache/huggingface
 RUN --mount=type=secret,id=hf_token \
-    export HF_TOKEN=$(cat /run/secrets/hf_token) && \
+    export HF_TOKEN=$(cat /run/secrets/hf_token 2>/dev/null || true) && \
+    [ -n "$HF_TOKEN" ] || { echo "ERROR: hf_token secret is empty or not provided. Pass --secret id=hf_token,env=HF_TOKEN at build time." >&2; exit 1; } && \
     export HUGGING_FACE_HUB_TOKEN=$HF_TOKEN && \
-    echo "Token length: ${#HF_TOKEN}" && \
     . .venv/bin/activate && \
     python -c "\
 from esm.models.esm3 import ESM3; \