nixos/open-webui: allow service to access gpu (#410579)

2025-05-27 20:30:22 +00:00
parent 8753210c68 528e669ff3
commit 79cec564b6
1 changed files with 15 additions and 0 deletions
@@ -132,6 +132,21 @@ in
          "@system-service"
          "~@privileged"
        ];
+        SupplementaryGroups = [ "render" ]; # for rocm to access /dev/dri/renderD* devices
+        DeviceAllow = [
+          # CUDA
+          # https://docs.nvidia.com/dgx/pdf/dgx-os-5-user-guide.pdf
+          "char-nvidiactl"
+          "char-nvidia-caps"
+          "char-nvidia-frontend"
+          "char-nvidia-uvm"
+          # ROCm
+          "char-drm"
+          "char-fb"
+          "char-kfd"
+          # WSL (Windows Subsystem for Linux)
+          "/dev/dxg"
+        ];
      };
    };