guixsd-config

commit 28dda2bec4b6c0ed475d99ce1cb71c2152179cc5
parent 6e2829d166b6e99b291284f6129376b2257b1b4c
Author: Vineet Kumar <git@vineetk.net>
Date:   Sun,  1 Mar 2026 15:56:32 -0500

demiurge: podman-llm doesn't need root

Diffstat:
M
epistemia/systems/demiurge.scm
 | 
6
++----

1 file changed, 2 insertions(+), 4 deletions(-)
diff --git a/epistemia/systems/demiurge.scm b/epistemia/systems/demiurge.scm
@@ -336,18 +336,16 @@ rpz:
 						      (list
 						       (oci-container-configuration
 							(image "llm")
-							(user "root")
+							(user "vin")
 							(ports '(("8080" . "8080")))
 							(volumes '("/data/models:/app/models"))
 							(extra-arguments
-							 '("--ipc=host"
-							   "--privileged"
+							 '("--privileged"
 							   "--cap-add=CAP_SYS_ADMIN"
 							   "--cap-add=SYS_PTRACE"
 							   "--device=/dev/kfd"
 							   "--device=/dev/dri"
 							   "--device=/dev/mem"
-							   "--group-add" "render"
 							   "--security-opt" "seccomp=unconfined")))
 						       (oci-container-configuration
 							(image "deluan/navidrome:latest")