containers / ai-lab-recipes

Examples for building and running LLM services and applications locally with Podman
Apache License 2.0
111 stars 110 forks source link

Set group permissions on whispercpp app folder #681

Closed johnmcollier closed 3 months ago

johnmcollier commented 4 months ago

This PR updates the whispercpp dockerfile to mark the /app folder as owned by the GID 0, which is the group OpenShift uses.

For some context, our team has been looking at consuming some of the Podman Desktop AI lab recipes via RHDH software templates, which will include OpenShift as a deployment target for the recipes. While trying to run the whispercpp model server, we found it was running into permissions issues when using the UID that OpenShift assigns to it (on the default, restricted SCC). Setting the user ID to 1001 and the group owner on the folder to 0 resolved these issues.

We've verified both locally and on OpenShift, let me know if this change is okay to go in. We also have an image built from this branch up at quay.io/redhat-ai-dev/whispercpp:latest