423A35C7/LLaMA-Factory
1
0
Fork 0
mirror of https://github.com/hiyouga/LLaMA-Factory.git synced 2026-10-27 01:00:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

[docs] add security notes to NPU Docker overviews (#10883)

Browse Source
This commit is contained in:
xvxuopop
2026-10-10 15:29:22 +08:00
committed by GitHub
parent ce9dc9e072
commit 1fded918ac
3 changed files with 21 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docker/docker-npu/OVERVIEW.md
View File

@@ -184,6 +184,15 @@ To build an image with Docker Compose without starting a container, use `docker
- Legacy NPU tags are replaced by the `latest-<910b|a3|950>-<ubuntu|openeuler>` format.
- Validate the exact driver, firmware, CANN, and SoC combination before production deployment.
## Security Risks
When running containers with these images, be aware of the following security risks:
- Running as the `root` user: Containers run as the `root` user by default, which can introduce security risks. In production environments, it is recommended to create a non-privileged user to run the application.
- Lack of CPU and memory resource limits: Not setting resource limits may cause a container to consume excessive system resources and affect host performance. It is recommended to use the `--cpus` and `--memory` parameters to limit resource usage.
- Device use with `rwm` permissions: The NPU device is assigned read, write, and `mknod` permissions. Although these are required for functionality, the scope of permissions should be carefully evaluated in security-sensitive environments.
## License and Disclaimer
LlamaFactory is distributed under the [Apache License 2.0](../../LICENSE).