f4e378e8b5
entrypoint.sh: a container started without a GPU request has no
nvidia-smi at all (the toolkit injects it), so the old check 1 reported
'CUDA runtime in this image is broken, re-pull' for the most common user
error. Fold the missing-binary case into the actionable 'No GPU visible'
message and document the CPU-only option (UNSLOTH_ALLOW_CPU=1).
run.sh / test_locally.sh: guard empty-array expansions with the
${arr[@]+...} form; bash 3.2 (macOS /bin/bash) treats "${empty[@]}"
as unbound under set -u, which broke the documented macOS CPU path.
studio_launch.sh: exclude *_TOKEN, *_API_KEY, *_PASSWORD, *_SECRET,
*_LICENSE from the env snapshot written for SSH sessions; secrets stay
in process env only, never on disk.
supervisord.conf / Dockerfile.studio: pin HOME=/root for the studio and
jupyter programs (jupyter would silently fall back to token auth if HOME
were unset), default JUPYTER_PORT and UNSLOTH_ENABLE_SSHD at the image
level so a direct supervisord invocation cannot hit a bad %(ENV_*)s
expansion, and document the root-services decision (non-root parity with
the previous production image is a tracked follow-up).
docker_confirm.ps1: mirror the bash script's GPU selector translation so
GPUS=0 / 0,1 select devices instead of silently using all GPUs.
docker-publish.yml: studio cache scope moves to mode=min; a mode=max
cache of a ~24GB image would evict everything else in the 10GB GHA
quota for no hit-rate gain.
63 lines
1.8 KiB
Text
63 lines
1.8 KiB
Text
# Service manager for the full Unsloth image (Dockerfile.studio).
|
|
#
|
|
# Mirrors the service set of the production docker.io/unsloth/unsloth image:
|
|
# studio Unsloth Studio web UI port 8000
|
|
# jupyter JupyterLab for the notebooks port $JUPYTER_PORT (default 8888)
|
|
# sshd key-only SSH for cloud hosts port 22
|
|
#
|
|
# All three log to the container's stdout/stderr (the Docker-native pattern)
|
|
# so `docker logs` shows everything, including Studio's first-boot password
|
|
# and Jupyter's startup line.
|
|
|
|
[unix_http_server]
|
|
file=/run/supervisor.sock
|
|
chmod=0700
|
|
|
|
[supervisorctl]
|
|
serverurl=unix:///run/supervisor.sock
|
|
|
|
[rpcinterface:supervisor]
|
|
supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
|
|
|
|
[supervisord]
|
|
nodaemon=true
|
|
pidfile=/run/supervisord.pid
|
|
logfile=/dev/null
|
|
logfile_maxbytes=0
|
|
loglevel=info
|
|
|
|
[program:studio]
|
|
command=%(ENV_UNSLOTH_STUDIO_HOME)s/bin/unsloth studio -H 0.0.0.0 -p 8000
|
|
directory=/workspace
|
|
autostart=true
|
|
autorestart=true
|
|
startretries=3
|
|
startsecs=5
|
|
environment=HOME="/root",USER="root"
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
|
|
[program:jupyter]
|
|
command=jupyter lab --no-browser --ip=0.0.0.0 --port=%(ENV_JUPYTER_PORT)s --allow-root --notebook-dir=/workspace
|
|
directory=/workspace
|
|
autostart=true
|
|
autorestart=true
|
|
; HOME pins the config lookup to /root/.jupyter, where the launcher wrote
|
|
; the password config; without it an unset HOME would silently fall back
|
|
; to token auth.
|
|
environment=HOME="/root",USER="root"
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
|
|
[program:sshd]
|
|
command=/usr/sbin/sshd -D -e
|
|
autostart=%(ENV_UNSLOTH_ENABLE_SSHD)s
|
|
autorestart=true
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|