| 22 Jul 2024 |
 adamcstephens | ❯ sudo systemctl cat ollama | rg Device
DeviceAllow=/dev/nvidia?
DeviceAllow=/dev/nvidia-caps/nvidia-cap?
DeviceAllow=/dev/nvidiactl
DeviceAllow=/dev/nvidia-modeset
DeviceAllow=/dev/nvidia-uvm
DeviceAllow=/dev/nvidia-uvm-tools
DeviceAllow=/dev/dri/card*
DeviceAllow=/dev/dri/renderD*
DeviceAllow=/dev/kfd
DevicePolicy=closed
| 00:02:54 |
 hexa (UTC+1) | ok, that is wild | 00:03:56 |
| hexa (UTC+1) | did you set up anything specific for rocm? | 00:05:03 |
| hexa (UTC+1) | level=INFO source=payload.go:44 msg="Dynamic LLM libraries [cpu cpu_avx cpu_avx2 rocm]"
level=WARN source=amd_linux.go:58 msg="ollama recommends running the https://www.amd.com/en/support/linux-drivers" error="amdgpu version file missing: /sys/module/amdgpu/version stat /sys/module/amdgpu/version: no such file or directory"
level=INFO source=amd_linux.go:333 msg="skipping rocm gfx compatibility check" HSA_OVERRIDE_GFX_VERSION=10.3.0
level=INFO source=types.go:98 msg="inference compute" id=0 library=rocm compute=gfx1010 driver=0.0 name=1002:731f total="8.0 GiB" available="6.5 GiB"
| 00:07:46 |
| hexa (UTC+1) | hah! | 00:07:47 |
| hexa (UTC+1) | diff --git a/nixos/modules/services/misc/ollama.nix b/nixos/modules/services/misc/ollama.nix
index 63ee6798a6dd..d7cabb9af497 100644
--- a/nixos/modules/services/misc/ollama.nix
+++ b/nixos/modules/services/misc/ollama.nix
@@ -183,16 +183,12 @@ in
DeviceAllow = [
# CUDA
# https://docs.nvidia.com/dgx/pdf/dgx-os-5-user-guide.pdf
- "/dev/nvidia?"
- "/dev/nvidia-caps/nvidia-cap?"
- "/dev/nvidiactl"
- "/dev/nvidia-modeset"
- "/dev/nvidia-uvm"
- "/dev/nvidia-uvm-tools"
+ "char-nvidiactl"
+ "char-nvidia-caps"
+ "char-nvidia-uvm"
# ROCm
- "/dev/dri/card*"
- "/dev/dri/renderD*"
- "/dev/kfd"
+ "char-drm"
+ "char-kfd"
];
DevicePolicy = "closed";
LockPersonality = true;
| 00:08:01 |
| hexa (UTC+1) | device node type matching works better for me | 00:08:27 |
| hexa (UTC+1) | also more concise, less pattern matching | 00:08:34 |
| hexa (UTC+1) | updated the PR, please retest, if it works for both of us now | 00:09:33 |
| adamcstephens | yeah i have the rocmOverrideGfx = "10.3.0"; since the 6700 xt is outside the supported cards | 00:10:09 |
| hexa (UTC+1) | yeah, few if any consumer cards have official rocm support | 00:10:32 |
| hexa (UTC+1) | and the rx 5000 series is just broken with rocm | 00:10:56 |
| adamcstephens | updated DeviceAllow still works | 00:12:31 |
| hexa (UTC+1) | Thanks! | 00:15:30 |
| adamcstephens | you motivated me to fix my ollama setup :) | 00:23:24 |
| adamcstephens | apparently you need to listen on all interfaces if you want to put it behind a proxy? | 00:24:24 |
| hexa (UTC+1) | I just hope they get tool support going and then I can have local voice control with freeform conversations and stuff 😄 | 00:24:39 |
| hexa (UTC+1) | no, that sounds wrong | 00:24:52 |
| hexa (UTC+1) | reverse proxy implies the opposite, that the services shouldn't need to expose it self beyond localhost and to the reverse proxy | 00:25:27 |
| hexa (UTC+1) | that's why best case is unix sockets 🙂 | 00:25:37 |
| adamcstephens | actually i didn't try this on the unstable version, but on 24.05 version listening on localhost would return a 403 but on 0.0.0.0 would succeed | 00:26:52 |
| hexa (UTC+1) | odd, did you enable recommendedProxySettings in nginx, or something similar in whatever you're using? | 00:28:29 |
| adamcstephens | yeah, confirmed on usntable version as well | 00:28:30 |
| hexa (UTC+1) | X-Forwarded-For is what I'm hinting at | 00:28:38 |
| hexa (UTC+1) | Also, you would probably expose a frontend like open-webui instead, no? | 00:41:46 |
| adamcstephens | that was what i'm working on next | 00:43:17 |
| adamcstephens | open-webui works pretty well. only had to disable pkce to connect it to kanidm :/ | 01:47:59 |
| hexa (UTC+1) | it is always pkce | 02:08:28 |
| adamcstephens | Yep | 02:13:45 |
| 23 Jul 2024 |
|  sbc64 joined the room. | 03:49:16 |
