| 22 Jul 2024 |
 hexa (UTC+1) | hah! | 00:07:47 |
| hexa (UTC+1) | diff --git a/nixos/modules/services/misc/ollama.nix b/nixos/modules/services/misc/ollama.nix
index 63ee6798a6dd..d7cabb9af497 100644
--- a/nixos/modules/services/misc/ollama.nix
+++ b/nixos/modules/services/misc/ollama.nix
@@ -183,16 +183,12 @@ in
DeviceAllow = [
# CUDA
# https://docs.nvidia.com/dgx/pdf/dgx-os-5-user-guide.pdf
- "/dev/nvidia?"
- "/dev/nvidia-caps/nvidia-cap?"
- "/dev/nvidiactl"
- "/dev/nvidia-modeset"
- "/dev/nvidia-uvm"
- "/dev/nvidia-uvm-tools"
+ "char-nvidiactl"
+ "char-nvidia-caps"
+ "char-nvidia-uvm"
# ROCm
- "/dev/dri/card*"
- "/dev/dri/renderD*"
- "/dev/kfd"
+ "char-drm"
+ "char-kfd"
];
DevicePolicy = "closed";
LockPersonality = true;
| 00:08:01 |
| hexa (UTC+1) | device node type matching works better for me | 00:08:27 |
| hexa (UTC+1) | also more concise, less pattern matching | 00:08:34 |
| hexa (UTC+1) | updated the PR, please retest, if it works for both of us now | 00:09:33 |
 adamcstephens | yeah i have the rocmOverrideGfx = "10.3.0"; since the 6700 xt is outside the supported cards | 00:10:09 |
| hexa (UTC+1) | yeah, few if any consumer cards have official rocm support | 00:10:32 |
| hexa (UTC+1) | and the rx 5000 series is just broken with rocm | 00:10:56 |
| adamcstephens | updated DeviceAllow still works | 00:12:31 |
| hexa (UTC+1) | Thanks! | 00:15:30 |
| adamcstephens | you motivated me to fix my ollama setup :) | 00:23:24 |
| adamcstephens | apparently you need to listen on all interfaces if you want to put it behind a proxy? | 00:24:24 |
| hexa (UTC+1) | I just hope they get tool support going and then I can have local voice control with freeform conversations and stuff 😄 | 00:24:39 |
| hexa (UTC+1) | no, that sounds wrong | 00:24:52 |
| hexa (UTC+1) | reverse proxy implies the opposite, that the services shouldn't need to expose it self beyond localhost and to the reverse proxy | 00:25:27 |
| hexa (UTC+1) | that's why best case is unix sockets 🙂 | 00:25:37 |
| adamcstephens | actually i didn't try this on the unstable version, but on 24.05 version listening on localhost would return a 403 but on 0.0.0.0 would succeed | 00:26:52 |
| hexa (UTC+1) | odd, did you enable recommendedProxySettings in nginx, or something similar in whatever you're using? | 00:28:29 |
| adamcstephens | yeah, confirmed on usntable version as well | 00:28:30 |
| hexa (UTC+1) | X-Forwarded-For is what I'm hinting at | 00:28:38 |
| hexa (UTC+1) | Also, you would probably expose a frontend like open-webui instead, no? | 00:41:46 |
| adamcstephens | that was what i'm working on next | 00:43:17 |
| adamcstephens | open-webui works pretty well. only had to disable pkce to connect it to kanidm :/ | 01:47:59 |
| hexa (UTC+1) | it is always pkce | 02:08:28 |
| adamcstephens | Yep | 02:13:45 |
| 23 Jul 2024 |
|  sbc64 joined the room. | 03:49:16 |
|  kaya changed their profile picture. | 05:30:28 |
|  Ezzobir Bezziou joined the room. | 08:22:21 |
|  sellout joined the room. | 13:32:24 |
 SomeoneSerge (utc+3) | In reply to @ss:someonex.net
Sounds like "why aren't we doing this yet?" Speaking of which, we need to stop copy-pasting this stuff because why aren't these default: https://github.com/NixOS/nixpkgs/pull/328713/files#diff-2d862bf9684df6fdface7aabf2af2b1767eb17ba2f9ab8b2e7db03d22c3c0660R196-R216 | 13:49:06 |
