Initial Commit

2026-09-15 15:24:03 -04:00
commit 4dc7086e7e
605 changed files with 101380 additions and 0 deletions
@@ -0,0 +1,68 @@
+# =====================================================================
+# Host-side settings for vm/host/install.sh.
+#
+#   cp configs/host.env.example configs/host.env
+#
+# EVERYTHING HERE IS OPTIONAL. install.sh works out a value for each one
+# from the machine it finds, and this file is only for when its guess is
+# wrong. Copy it, set the lines you care about, delete the rest. It is
+# gitignored, because it describes your machine rather than the project.
+#
+# These are read at INSTALL time and baked into the units and scripts
+# that are written out, so re-run install.sh after changing anything.
+# =====================================================================
+
+# --- who and where ----------------------------------------------------
+
+# The person who operates the VMs: who gets the desktop shortcut, and who
+# polkit lets unfreeze a base image. Detected from `sudo`, so you only
+# need this if you install as someone other than yourself.
+#OWUIVM_OPERATOR=yourname
+
+# The ZFS pool that holds overlays and project folders, by MOUNTPOINT.
+# install.sh creates <pool>/vmrun and <pool>/vmprojects if they are
+# missing, and puts a quota on the first.
+#
+# It must be ZFS: the per-project quota and the overlay ceiling are ZFS
+# quotas, and they are what stops a runaway guest filling the root
+# filesystem and taking Docker, Ollama and Open WebUI down with it.
+# `zfs list` shows what you have.
+#OWUIVM_POOL_ROOT=/Pool
+
+# How much room the throwaway overlays get between them.
+#OWUIVM_OVERLAY_QUOTA=40G
+
+# --- how much of the machine one VM may take --------------------------
+# Derived from nproc and installed RAM, leaving headroom for Ollama -
+# which needs cores for sampling while a session runs, so taking every
+# core makes both slower.
+
+#OWUIVM_VM_MEM_MB=8192
+#OWUIVM_VM_CPUS=8
+
+# The cgroup ceilings. They sit above the guest's own figures because
+# qemu's overhead is outside the guest's RAM, and a unit that hits its
+# own MemoryMax is killed rather than slowed.
+#OWUIVM_MEMORY_MAX=11G
+#OWUIVM_CPU_QUOTA=700%
+#OWUIVM_MAINT_CPU_QUOTA=800%
+
+# Pin the VM to particular cores. EMPTY MEANS NO PINNING, which is right
+# unless something else on this machine owns specific cores.
+#OWUIVM_ALLOWED_CPUS=20-27
+
+# --- what the daemon may reach ----------------------------------------
+# vmd runs with IPAddressDeny=any and an allowlist. Gitea is NOT on it by
+# default: a fresh install has no Gitea, publishing is optional, and the
+# daemon should not be given reach it does not need.
+#
+# BOTH the LAN address and the container's own Docker network are needed,
+# and the second is not redundant - systemd's filter is a BPF program on
+# the cgroup's packets, and Docker's DNAT has already rewritten the
+# destination by the time it sees them. Measured: with only the /32 the
+# connection times out. See docs/setup/gitea.md.
+#OWUIVM_GITEA_ALLOW="192.168.1.10/32 172.28.0.0/16"
+
+# The tool server's own subnet, for the sub-agent's lookup tools. Pinned
+# in docker-compose.yml, so change both together or neither.
+#OWUIVM_TOOLS_SUBNET=172.22.0.0/24