- Introduced `PENTAGI_OLLAMA_DIR` in `.env.example` and updated `docker-compose.yml` to include a new volume for Ollama.
- Modified the `Dockerfile` to create the necessary directory for Ollama and adjusted permissions.
- Updated various provider files to utilize pointers for model options, improving memory efficiency.
- Added `min_p` parameter to `AgentConfig` and updated related methods to support this new configuration.
- Enhanced entrypoint script to generate an SSH key for Ollama if it does not exist.
- Updated documentation and example configurations to reflect the new Ollama integration and parameters.
After the server certificate is signed, the CA private key
(service_ca.key), the CSR (service.csr), and the serial file
(service_ca.srl) are no longer needed at runtime. Leaving the CA
private key on disk increases the attack surface: if the container
filesystem is compromised, an attacker could use the CA key to issue
arbitrary certificates trusted by the server's certificate chain.
Remove these intermediate files immediately after signing and drop
the now-unnecessary chmod on the CA key.
Signed-off-by: mason5052 <ehehwnwjs5052@gmail.com>
- Added build arguments for version information in the Dockerfile, allowing the embedding of package version and revision during the build.
- Updated the build commands for backend utilities to include versioning flags, improving traceability of builds.
- Introduced a new entrypoint script to manage SSL certificate generation, enhancing security setup for the service.
- Updated README with instructions for using the new versioning scripts for Docker builds, improving user guidance.
- Added versioning scripts for Linux/macOS and Windows to streamline the build process and ensure consistent versioning across environments.
These changes improve the build process by integrating version control and enhancing the security setup for the application.
Dmitry Ng