mirror of
https://github.com/snapotter-hq/SnapOtter.git
synced 2026-08-03 07:46:42 +02:00
ashim-hq
b259f765de
Remove all ML pip installs (onnxruntime, rembg, realesrgan, paddlepaddle, mediapipe, codeformer), model downloads, and post-install fixups from the Dockerfile. The base image now ships only Node.js + Sharp + Python with numpy/Pillow/opencv. AI features are installed on-demand at runtime via the feature manifest and install_feature.py script. Key changes: - Remove SKIP_MODEL_DOWNLOADS build arg (no longer needed) - Remove apt-get purge of build-essential (needed for runtime pip installs) - Remove PaddleX symlinks and facexlib weight directory setup - Add COPY of feature-manifest.json and install_feature.py - Update PYTHON_VENV_PATH to /data/ai/venv, add MODELS_PATH and DATA_DIR - Entrypoint bootstraps AI venv from /opt/venv on first container start with crash-safe temp directory pattern
38 lines
1.3 KiB
Bash
Executable File
38 lines
1.3 KiB
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
|
|
# Apply auth defaults at runtime so they are never baked into image layers.
|
|
# Users can override any of these via -e flags at docker run time.
|
|
export AUTH_ENABLED="${AUTH_ENABLED:-true}"
|
|
export DEFAULT_USERNAME="${DEFAULT_USERNAME:-admin}"
|
|
export DEFAULT_PASSWORD="${DEFAULT_PASSWORD:-admin}"
|
|
|
|
# Clean up any interrupted bootstrap from a previous start
|
|
AI_VENV="/data/ai/venv"
|
|
AI_VENV_TMP="/data/ai/venv.bootstrapping"
|
|
|
|
if [ -d "$AI_VENV_TMP" ]; then
|
|
echo "Cleaning up interrupted venv bootstrap..."
|
|
rm -rf "$AI_VENV_TMP"
|
|
fi
|
|
|
|
# Bootstrap AI venv from base image on first run
|
|
if [ ! -d "$AI_VENV" ] && [ -d "/opt/venv" ]; then
|
|
echo "Bootstrapping AI venv from base image..."
|
|
mkdir -p /data/ai/models /data/ai/pip-cache
|
|
cp -r /opt/venv "$AI_VENV_TMP"
|
|
mv "$AI_VENV_TMP" "$AI_VENV"
|
|
echo "AI venv ready at $AI_VENV"
|
|
fi
|
|
|
|
# Fix ownership of mounted volumes so the non-root ashim user can write.
|
|
# This runs as root, fixes permissions, then drops to ashim via gosu.
|
|
if [ "$(id -u)" = "0" ]; then
|
|
chown -R ashim:ashim /data /tmp/workspace 2>&1 || \
|
|
echo "WARNING: Could not fix volume permissions. Use named volumes (not Windows bind mounts) to avoid this. See docs for details." >&2
|
|
exec gosu ashim "$@"
|
|
fi
|
|
|
|
# Already running as ashim (e.g. Kubernetes runAsUser)
|
|
exec "$@"
|