llama-stack-mirror/llama_stack/distribution
Jamie Land 840fae2259
fix: Updating images so that they are able to run without root access (#1208)
# What does this PR do?
Addresses issues where the container is unable to run as root. Gives
write access to required folders.

[//]: # (If resolving an issue, uncomment and update the line below)
(Closes #[1207])

## Test Plan
I built locally and ran `llama stack build --template remote-vllm
--image-type container` and validated I could see my changes in the
output:

```
#11 1.186 Installed 11 packages in 61ms
#11 1.186  + llama-models==0.1.3
#11 1.186  + llama-stack==0.1.3
#11 1.186  + llama-stack-client==0.1.3
#11 1.186  + markdown-it-py==3.0.0
#11 1.186  + mdurl==0.1.2
#11 1.186  + prompt-toolkit==3.0.50
#11 1.186  + pyaml==25.1.0
#11 1.186  + pygments==2.19.1
#11 1.186  + rich==13.9.4
#11 1.186  + tiktoken==0.9.0
#11 1.186  + wcwidth==0.2.13
#11 DONE 1.6s

#12 [ 9/10] RUN mkdir -p /.llama /.cache
#12 DONE 0.3s

#13 [10/10] RUN chmod -R g+rw /app /.llama /.cache
#13 DONE 0.3s

#14 exporting to image
#14 exporting layers
#14 exporting layers 3.7s done
#14 writing image sha256:11cc8bd954db6d036037bcaf471b173ddd5261ac4b1e72074cccf85d18aefb96 done
#14 naming to docker.io/library/distribution-remote-vllm:0.1.3 done
#14 DONE 3.7s
+ set +x
Success!
```
This is what the resulting image looks like:


![image](https://github.com/user-attachments/assets/070b9c05-b40f-4e7e-aa24-fef260c395e3)

Also tagged the image as `0.1.3-test` and [pushed to
quay](https://quay.io/repository/jland/distribution-remote-vllm?tab=tags)
(note there are a bunch of critical vulnerabilities we may want to look
into)

And for good measure I deployed the resulting image on my Openshift
environment using the default Security Context and validated that there
were no issue with it coming up.

My validation was all done with the `vllm-remote` distribution, but if I
am understanding everything correctly the other distributions are just
different run.yaml configs.


[//]: # (## Documentation)


Please let me know if there is anything else I need to do.

Co-authored-by: Jamie Land <hokie10@gmail.com>
2025-02-21 11:32:56 -05:00
..
routers feat(api): Add options for supporting various embedding models (#1192) 2025-02-20 22:27:12 -08:00
server fix: some telemetry APIs don't currently work (#1188) 2025-02-20 14:09:25 -08:00
store build: format codebase imports using ruff linter (#1028) 2025-02-13 10:06:21 -08:00
ui fix!: update eval-tasks -> benchmarks (#1032) 2025-02-13 16:40:58 -08:00
utils fix: Fixing some small issues with the build scripts (#1132) 2025-02-19 22:20:49 -08:00
__init__.py API Updates (#73) 2024-09-17 19:51:35 -07:00
build.py fix: improve stack build on venv (#980) 2025-02-14 09:22:03 -08:00
build_conda_env.sh feat: Add a new template for dell (#978) 2025-02-06 14:14:39 -08:00
build_container.sh fix: Updating images so that they are able to run without root access (#1208) 2025-02-21 11:32:56 -05:00
build_venv.sh style: env var in build_venv 2025-02-19 22:32:59 -08:00
client.py chore: move all Llama Stack types from llama-models to llama-stack (#1098) 2025-02-14 09:10:59 -08:00
common.sh fix: Fixing some small issues with the build scripts (#1132) 2025-02-19 22:20:49 -08:00
configure.py build: format codebase imports using ruff linter (#1028) 2025-02-13 10:06:21 -08:00
configure_container.sh More generic image type for OCI-compliant container technologies (#802) 2025-01-17 16:37:42 -08:00
datatypes.py fix!: update eval-tasks -> benchmarks (#1032) 2025-02-13 16:40:58 -08:00
distribution.py fix!: update eval-tasks -> benchmarks (#1032) 2025-02-13 16:40:58 -08:00
inspect.py fix: improve signal handling and update dependencies (#1044) 2025-02-13 08:07:59 -08:00
library_client.py style: remove prints in codebase (#1146) 2025-02-18 19:41:37 -08:00
request_headers.py Add X-LlamaStack-Client-Version, rename ProviderData -> Provider-Data (#735) 2025-01-09 11:51:36 -08:00
resolver.py fix!: update eval-tasks -> benchmarks (#1032) 2025-02-13 16:40:58 -08:00
stack.py feat: adding endpoints for files and uploads (#1070) 2025-02-20 13:09:00 -08:00
start_conda_env.sh feat: Add HTTPS serving option (#1000) 2025-02-07 09:39:08 -08:00
start_container.sh feat: Add HTTPS serving option (#1000) 2025-02-07 09:39:08 -08:00
start_venv.sh feat: add support for running in a venv (#1018) 2025-02-12 11:13:04 -05:00