69 lines
3.0 KiB
Bash
69 lines
3.0 KiB
Bash
# =====================================================================
|
|
# Host-side settings for vm/host/install.sh.
|
|
#
|
|
# cp configs/host.env.example configs/host.env
|
|
#
|
|
# EVERYTHING HERE IS OPTIONAL. install.sh works out a value for each one
|
|
# from the machine it finds, and this file is only for when its guess is
|
|
# wrong. Copy it, set the lines you care about, delete the rest. It is
|
|
# gitignored, because it describes your machine rather than the project.
|
|
#
|
|
# These are read at INSTALL time and baked into the units and scripts
|
|
# that are written out, so re-run install.sh after changing anything.
|
|
# =====================================================================
|
|
|
|
# --- who and where ----------------------------------------------------
|
|
|
|
# The person who operates the VMs: who gets the desktop shortcut, and who
|
|
# polkit lets unfreeze a base image. Detected from `sudo`, so you only
|
|
# need this if you install as someone other than yourself.
|
|
#OWUIVM_OPERATOR=yourname
|
|
|
|
# The ZFS pool that holds overlays and project folders, by MOUNTPOINT.
|
|
# install.sh creates <pool>/vmrun and <pool>/vmprojects if they are
|
|
# missing, and puts a quota on the first.
|
|
#
|
|
# It must be ZFS: the per-project quota and the overlay ceiling are ZFS
|
|
# quotas, and they are what stops a runaway guest filling the root
|
|
# filesystem and taking Docker, Ollama and Open WebUI down with it.
|
|
# `zfs list` shows what you have.
|
|
#OWUIVM_POOL_ROOT=/Pool
|
|
|
|
# How much room the throwaway overlays get between them.
|
|
#OWUIVM_OVERLAY_QUOTA=40G
|
|
|
|
# --- how much of the machine one VM may take --------------------------
|
|
# Derived from nproc and installed RAM, leaving headroom for Ollama -
|
|
# which needs cores for sampling while a session runs, so taking every
|
|
# core makes both slower.
|
|
|
|
#OWUIVM_VM_MEM_MB=8192
|
|
#OWUIVM_VM_CPUS=8
|
|
|
|
# The cgroup ceilings. They sit above the guest's own figures because
|
|
# qemu's overhead is outside the guest's RAM, and a unit that hits its
|
|
# own MemoryMax is killed rather than slowed.
|
|
#OWUIVM_MEMORY_MAX=11G
|
|
#OWUIVM_CPU_QUOTA=700%
|
|
#OWUIVM_MAINT_CPU_QUOTA=800%
|
|
|
|
# Pin the VM to particular cores. EMPTY MEANS NO PINNING, which is right
|
|
# unless something else on this machine owns specific cores.
|
|
#OWUIVM_ALLOWED_CPUS=20-27
|
|
|
|
# --- what the daemon may reach ----------------------------------------
|
|
# vmd runs with IPAddressDeny=any and an allowlist. Gitea is NOT on it by
|
|
# default: a fresh install has no Gitea, publishing is optional, and the
|
|
# daemon should not be given reach it does not need.
|
|
#
|
|
# BOTH the LAN address and the container's own Docker network are needed,
|
|
# and the second is not redundant - systemd's filter is a BPF program on
|
|
# the cgroup's packets, and Docker's DNAT has already rewritten the
|
|
# destination by the time it sees them. Measured: with only the /32 the
|
|
# connection times out. See docs/setup/gitea.md.
|
|
#OWUIVM_GITEA_ALLOW="192.168.1.10/32 172.28.0.0/16"
|
|
|
|
# The tool server's own subnet, for the sub-agent's lookup tools. Pinned
|
|
# in docker-compose.yml, so change both together or neither.
|
|
#OWUIVM_TOOLS_SUBNET=172.22.0.0/24
|