Ilker ManapandClaude Opus 5.5 2d47427cdc Run engines as llmgw-engine rather than root, and make the user when a node is added ...

The supervisor drops to the run_as user (default llmgw-engine) when the
agent is root: its credential and groups, a 0700 home under the work
directory as the working directory, HOME and XDG_CACHE_HOME there. A node
without the user keeps engines as root and logs why. node add creates the
user in the video and render groups.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-04 09:57:41 +02:00

..

account

Close what a second security review found still open

2026-09-30 02:25:07 +02:00

accounting

Show each team's first-token and latency percentiles, errors and refusals

2026-10-03 19:50:16 +02:00

agent

Run engines as llmgw-engine rather than root, and make the user when a node is added

2026-10-04 09:57:41 +02:00

auth

Let a person belong to many places, or to none

2026-09-28 19:03:46 +02:00

bench

Give every engine a key only the router holds

2026-09-30 00:38:29 +02:00

cli

Refuse to open the agent port without TLS unless agent_insecure says so

2026-10-04 09:51:37 +02:00

config

Refuse to open the agent port without TLS unless agent_insecure says so

2026-10-04 09:51:37 +02:00

control

Refuse profile env and args that would run code or touch files on the nodes

2026-10-04 09:54:45 +02:00

docgen

Run engines as llmgw-engine rather than root, and make the user when a node is added

2026-10-04 09:57:41 +02:00

doctor

Choose each engine's build from the node's hardware, for every GPU generation

2026-10-01 14:35:58 +02:00

gguf

Format kind_live_test.go

2026-10-01 07:20:35 +02:00

hf

Plan a repository's files against the fleet, and serve the one that suits it the way it fits

2026-10-04 01:03:48 +02:00

join

Let a machine join a setup by code, dialling out, with nothing logging in

2026-10-03 21:49:15 +02:00

mirror

Trace weights fetched before origins were kept, and let an origin be given by hand

2026-10-04 00:24:41 +02:00

modelplan

Busy is not unfit: rank files by the hardware the cluster has, and let a model wait for its cards

2026-10-04 01:17:32 +02:00

obs

Release v0.10.4: CPU threads, tracing, and the rest of the review

2026-09-30 04:00:35 +02:00

onboard

Run engines as llmgw-engine rather than root, and make the user when a node is added

2026-10-04 09:57:41 +02:00

pgha

Add a standby control plane with server add, and draw the screens as windows

2026-10-03 22:29:12 +02:00

preflight

Open setup screens or a console when llmgw runs bare in a terminal

2026-10-03 21:33:59 +02:00

promq

Show usage over time, per organization, team, project and person

2026-09-28 08:11:31 +02:00

release

Install only releases signed with the key built in; fetch a node's release on the control plane

2026-10-04 09:48:03 +02:00

router

Merge ha: replicated store, second control plane, join codes, setup and console screens

2026-10-03 22:59:49 +02:00

settings

Watch the cluster and edit every setting from the console

2026-10-03 22:54:09 +02:00

sim

Onboard a node with a script, and find two examples that never worked

2026-09-16 12:28:36 +02:00

sourcecheck

Say when a replica is running an edited profile, and check a source from the web too

2026-09-27 22:42:26 +02:00

store

Merge ha: replicated store, second control plane, join codes, setup and console screens

2026-10-03 22:59:49 +02:00

tlsconf

Park a model that fails every time it starts, and say so everywhere

2026-09-30 01:21:57 +02:00

version

Switch the project language to English

2026-09-16 01:15:21 +02:00

web

Show each team's first-token and latency percentiles, errors and refusals

2026-10-03 19:50:16 +02:00