adlee-was-taken 65dd3138ed fix(deploy): redirect HF_HOME into the repo, same crash on a fresh install ...

The live incident this branch is already fixing (#48's gated model
default) had a second layer once that was fixed: HuggingFace's default
cache (~/.cache/huggingface) falls outside ProtectHome=read-only's
ReadWritePaths exception, so the service crash-looped with
"OSError: Read-only file system" the moment local_encoder tried to
download a model -- even with a working model id.

Redirect HF_HOME into the already-writable repo path instead of
widening the sandbox to a new home-directory location, keeping the
"only the repo is writable" invariant intact. Applied live already;
this backports it to the tracked deploy template so a fresh install
doesn't hit the same crash.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VRQXz5SYZYVWscxS1QqF6U

2026-09-06 21:26:49 -04:00

1.9 KiB

Raw Permalink Blame History

View Raw