From f6baab6be838b6ee3628a913ec9b5a23c6c139a6 Mon Sep 17 00:00:00 2001 From: Aaron Teo Date: Tue, 9 Sep 2025 16:59:53 +0800 Subject: [PATCH] devops: finalise hardened server stage Signed-off-by: Aaron Teo --- .devops/s390x.Dockerfile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.devops/s390x.Dockerfile b/.devops/s390x.Dockerfile index f444981e0d..4c4bdb0753 100644 --- a/.devops/s390x.Dockerfile +++ b/.devops/s390x.Dockerfile @@ -40,12 +40,14 @@ COPY --from=build /opt/llama.cpp/lib /lib/llama.cpp # Copy all shared libraries from distro COPY --from=build /usr/lib/s390x-linux-gnu /lib/distro + +### Hardened Server FROM --platform=linux/s390x gcr.io/distroless/cc-debian12:nonroot AS server ENV LLAMA_ARG_HOST=0.0.0.0 # Copy llama.cpp binaries and libraries -COPY --from=collector /bin/llama.cpp / +COPY --from=collector /bin/llama.cpp/llama-server / COPY --from=collector /lib/llama.cpp /usr/lib/s390x-linux-gnu # Fixes model loading errors