strip nginx user directive when not running as root (#24925)

* Request FP16 TensorRT engine for ONNX detector with device Tensorrt

get_ort_providers only enables trt_fp16_enable when requires_fp16 is
passed, and the ONNX detector never passed it, so device: Tensorrt
always built an FP32 engine. USE_FP16=False still disables FP16.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Make TensorRT FP16 opt-in via USE_FP16 only

Drop the unused requires_fp16 parameter from get_ort_providers and decide
trt_fp16_enable from the USE_FP16 environment variable alone, defaulting
to false. Revert the ONNX detector change and document USE_FP16=true for
device: Tensorrt.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Drop the TensorRT docs line

The stock image ships only the TensorRT runtime, not the builder
libraries needed to create engines, so the instructions were misleading.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

docker/main/requirements-dev.txt

@@ -1,4 +1,4 @@
-ruff == 0.17.3
+ruff == 0.17.4
 
 # types
 types-peewee == 4.0.*

docker/main/requirements-wheels.txt

@@ -47,7 +47,7 @@ onnxruntime == 1.31.*
 # Embeddings
 transformers == 5.22.*
 # Generative AI
-google-genai == 2.34.*
+google-genai == 3.0.*
 ollama == 0.6.*
 openai == 3.46.*
 # push notifications

docker/main/rootfs/etc/s6-overlay/s6-rc.d/nginx/run

@@ -80,6 +80,11 @@ cp -r /usr/local/nginx/conf/. /tmp/nginx/conf/
 
 set_worker_processes
 
+# A non-root master ignores `user` and warns on every start
+if [[ "$runs_as_root" -eq 0 ]]; then
+    sed -i '/^user root;$/d' /tmp/nginx/conf/nginx.conf
+fi
+
 # TLS certs: user-mounted certs at /etc/letsencrypt/live/frigate (documented
 # contract) always win; otherwise fall back to a self-signed cert persisted in
 # /config/tls, which stays writable under a read-only root filesystem.

docker/main/rootfs/usr/local/nginx/conf/nginx.conf

@@ -2,7 +2,7 @@
 # file, all other path directives follow --prefix and must stay absolute.
 
 daemon off;
-# ignored by a non-root master; keeps workers root under FRIGATE_RUN_AS_ROOT
+# keeps workers root under FRIGATE_RUN_AS_ROOT; the run script strips it otherwise
 user root;
 worker_processes auto;
 

frigate/test/test_runner_devices.py

@@ -321,6 +321,36 @@ class TestLighterANE(unittest.TestCase):
         ane.assert_not_called()
 
 
+class TestTensorRTProvider(unittest.TestCase):
+    def _trt_options(self, env):
+        with (
+            patch.object(
+                model_util.ort,
+                "get_available_providers",
+                return_value=["TensorrtExecutionProvider", "CPUExecutionProvider"],
+            ),
+            patch.object(model_util.os, "makedirs"),
+            patch.dict(os.environ, env, clear=False),
+        ):
+            if "USE_FP16" not in env:
+                os.environ.pop("USE_FP16", None)
+            providers, options = model_util.get_ort_providers(device="Tensorrt")
+
+        return options[providers.index("TensorrtExecutionProvider")]
+
+    def test_fp16_is_disabled_by_default(self):
+        self.assertFalse(self._trt_options({})["trt_fp16_enable"])
+
+    def test_use_fp16_enables_fp16(self):
+        for value in ("true", "True", "TRUE"):
+            with self.subTest(value=value):
+                options = self._trt_options({"USE_FP16": value})
+                self.assertTrue(options["trt_fp16_enable"])
+
+    def test_use_fp16_false_keeps_fp16_disabled(self):
+        self.assertFalse(self._trt_options({"USE_FP16": "False"})["trt_fp16_enable"])
+
+
 class TestMIGraphX(unittest.TestCase):
     """AMD's MIGraphX plugin provider, selected through its devices in the ROCm image."""
 

frigate/util/model.py

@@ -318,7 +318,6 @@ def post_process_yolox(
 def get_ort_providers(
     force_cpu: bool = False,
     device: str | None = "AUTO",
-    requires_fp16: bool = False,
 ) -> tuple[list[str], list[dict[str, Any]]]:
     if force_cpu:
         return (
@@ -357,8 +356,8 @@ def get_ort_providers(
                 options.append(
                     {
                         "device_id": device_id,
-                        "trt_fp16_enable": requires_fp16
-                        and os.environ.get("USE_FP16", "True") != "False",
+                        "trt_fp16_enable": os.environ.get("USE_FP16", "False").lower()
+                        == "true",
                         "trt_timing_cache_enable": True,
                         "trt_engine_cache_enable": True,
                         "trt_timing_cache_path": os.path.join(

web/package-lock.json

@@ -45,15 +45,15 @@
         "copy-to-clipboard": "^4.0.2",
         "date-fns": "^4.4.0",
         "date-fns-tz": "^3.2.0",
-        "framer-motion": "^14.9.1",
+        "framer-motion": "^14.10.0",
         "hls.js": "^1.7.4",
-        "i18next": "^26.7.1",
+        "i18next": "^26.7.2",
         "i18next-http-backend": "^4.0.10",
         "idb-keyval": "^6.3.0",
         "js-yaml": "^5.5.0",
         "konva": "^10.9.1",
         "lodash": "^4.18.1",
-        "lucide-react": "^1.69.0",
+        "lucide-react": "^1.70.0",
         "monaco-yaml": "^5.5.1",
         "next-themes": "^0.4.6",
         "nosleep.js": "^0.12.0",
@@ -65,7 +65,7 @@
         "react-dropzone": "^20.1.4",
         "react-grid-layout": "^2.3.0",
         "react-hook-form": "^7.91.0",
-        "react-i18next": "^17.1.12",
+        "react-i18next": "^17.1.13",
         "react-icons": "^5.7.0",
         "react-konva": "^19.3.2",
         "react-markdown": "^10.1.0",
@@ -87,7 +87,7 @@
       },
       "devDependencies": {
         "@eslint/js": "^10.0.1",
-        "@playwright/test": "^1.64.1",
+        "@playwright/test": "^1.65.0",
         "@types/js-yaml": "^4.0.9",
         "@types/lodash": "^4.17.27",
         "@types/node": "^26.6.6",
@@ -1714,13 +1714,13 @@
       }
     },
     "node_modules/@playwright/test": {
-      "version": "1.64.1",
-      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.64.1.tgz",
-      "integrity": "sha512-IaYGml/nSOiZWROfPtuIL7neuu9qDOZ3TNvNljUIrhDMxiGTgPjzj/g9p9RxpS2tSepPDRY+UwAaEeiKtUvIAg==",
+      "version": "1.65.0",
+      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.65.0.tgz",
+      "integrity": "sha512-iGURLGuKDLakSEl7Pgfv8h7f+XLT+V861Wfhz0zlEl5nyFuKUopdkFBPKqTllTUp06aOwPuH8iuUEb3yp3MpbQ==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "playwright": "1.64.1"
+        "playwright": "1.65.0"
       },
       "bin": {
         "playwright": "cli.js"
@@ -5596,12 +5596,12 @@
       }
     },
     "node_modules/framer-motion": {
-      "version": "14.9.1",
-      "resolved": "https://registry.npmjs.org/framer-motion/-/framer-motion-14.9.1.tgz",
-      "integrity": "sha512-WDWNT2ixHdmpvGg02BZWI/SWwRYzPiMUf4aIkTBgrxxD8RYFdZO3fCM4pnLMo6j8mUpj0+BuJRHQBChI4v3Anw==",
+      "version": "14.10.0",
+      "resolved": "https://registry.npmjs.org/framer-motion/-/framer-motion-14.10.0.tgz",
+      "integrity": "sha512-e8MjIet+IJKohYxBj8TAk9Mg5cD0HiOX87qde1YTPL67gI2ao074O6yBtQnIcWCk+bTX7XX4litepufLiYPrLg==",
       "license": "MIT",
       "dependencies": {
-        "motion-dom": "14.9.1",
+        "motion-dom": "14.10.0",
         "motion-utils": "14.7.0",
         "tslib": "^2.4.0"
       },
@@ -6009,9 +6009,9 @@
       }
     },
     "node_modules/i18next": {
-      "version": "26.7.1",
-      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.7.1.tgz",
-      "integrity": "sha512-cX+3RRVczel/V2kCMTACckSGSpqgtWYEA6beXNYVms7dOQiHojdPYHD26lT4IKimNeoGWrLvtPgjftbRvmZJVw==",
+      "version": "26.7.2",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.7.2.tgz",
+      "integrity": "sha512-RsOY3BeaCDdkk52NeJSFAXELQ2rQXBO/tOub6L8ue2ICPfR/FRDWDOfEDg4xMPd1SqO5goVYQ6i72qWEUB/PPw==",
       "funding": [
         {
           "type": "individual",
@@ -6996,9 +6996,9 @@
       }
     },
     "node_modules/lucide-react": {
-      "version": "1.69.0",
-      "resolved": "https://registry.npmjs.org/lucide-react/-/lucide-react-1.69.0.tgz",
-      "integrity": "sha512-UTFECm4yEgkgMN0kfLuxWcmlk+4u02Jrqehgk3ZXRx/Ud68OpP7hjkp67bvkBHmIpMaZCIveF1QDYeupO7XmYQ==",
+      "version": "1.70.0",
+      "resolved": "https://registry.npmjs.org/lucide-react/-/lucide-react-1.70.0.tgz",
+      "integrity": "sha512-gCTPPN1MlQUBtUgdsUv+0CAUj+X8hifRUiRBw4E5v7lvDIOIpx0EZezdGQMSimS8pKA6esvullJub4GYr0mCHA==",
       "license": "ISC",
       "peerDependencies": {
         "@types/react": "*",
@@ -8073,9 +8073,9 @@
       }
     },
     "node_modules/motion-dom": {
-      "version": "14.9.1",
-      "resolved": "https://registry.npmjs.org/motion-dom/-/motion-dom-14.9.1.tgz",
-      "integrity": "sha512-2eCCGXH2Yv09lM8GHK3TdfChrcvHxzVY19LD9VraoHEaQl5+PuGnTNnmJaBAR+5MdxUVdsLFXygFJjR9RwRSxw==",
+      "version": "14.10.0",
+      "resolved": "https://registry.npmjs.org/motion-dom/-/motion-dom-14.10.0.tgz",
+      "integrity": "sha512-k0LwJZ1R5xCvqrScszO4ywuZP52lRcT3QO0IUovgczom9ZHb0BaRLOX6M2O40q7TrSLvzX/fIHHmDm8TUMt3fg==",
       "license": "MIT",
       "dependencies": {
         "motion-utils": "14.7.0"
@@ -8537,13 +8537,13 @@
       }
     },
     "node_modules/playwright": {
-      "version": "1.64.1",
-      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.1.tgz",
-      "integrity": "sha512-HCrVhHr5QQuwYoswEUGTb7gGp522yflbv/ST8nF4sFWGuLjQCt17Q/EubpGGSNKYn1tsTCPZxqHhHCfVURu7UA==",
+      "version": "1.65.0",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.65.0.tgz",
+      "integrity": "sha512-F3AMWcR44qMBt4kq+6Kb6mX7bjGXshktKFOPULd7reED6ZJWevjbNRqysP7q+AATE9kdPEZBibex1BYsvpVoeA==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "playwright-core": "1.64.1"
+        "playwright-core": "1.65.0"
       },
       "bin": {
         "playwright": "cli.js"
@@ -8553,9 +8553,9 @@
       }
     },
     "node_modules/playwright-core": {
-      "version": "1.64.1",
-      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.64.1.tgz",
-      "integrity": "sha512-BC4s8y6SEVA6Q1rSxZTto8hI1KUI3xXlHGZgvGqP4IqPdI/a6FX9H29IDNz7vKo9l21b6LfYosScPL6M3xxyDQ==",
+      "version": "1.65.0",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.65.0.tgz",
+      "integrity": "sha512-vNSKgH6YqtN7cdT/L334zo0a+YwkrpicyrHJlWWPIm/Q+Nn2SWInil01oT0mbu96U4GgoRtCYQD9CzJQgju+lA==",
       "dev": true,
       "license": "Apache-2.0",
       "bin": {
@@ -9077,9 +9077,9 @@
       }
     },
     "node_modules/react-i18next": {
-      "version": "17.1.12",
-      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.1.12.tgz",
-      "integrity": "sha512-Gf8riCKF/EmqQ8I1g0N5pJOLvJCkAXGAEkzOuRNHc/sBGL3dfE3WZ7+sDLrUo/kw/xdug3g48jo7M+s/SKf0HQ==",
+      "version": "17.1.13",
+      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.1.13.tgz",
+      "integrity": "sha512-ZxhOSlyKSKPtbUNPLwYMmE3w3bhoc0jaZJZ6bc7wGOT6cLbrbs//6m01HxCLtFdSjHvFpwFwoPhxxzIlHSs9cw==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.7",

web/package.json

@@ -57,15 +57,15 @@
     "copy-to-clipboard": "^4.0.2",
     "date-fns": "^4.4.0",
     "date-fns-tz": "^3.2.0",
-    "framer-motion": "^14.9.1",
+    "framer-motion": "^14.10.0",
     "hls.js": "^1.7.4",
-    "i18next": "^26.7.1",
+    "i18next": "^26.7.2",
     "i18next-http-backend": "^4.0.10",
     "idb-keyval": "^6.3.0",
     "js-yaml": "^5.5.0",
     "konva": "^10.9.1",
     "lodash": "^4.18.1",
-    "lucide-react": "^1.69.0",
+    "lucide-react": "^1.70.0",
     "monaco-yaml": "^5.5.1",
     "next-themes": "^0.4.6",
     "nosleep.js": "^0.12.0",
@@ -77,7 +77,7 @@
     "react-dropzone": "^20.1.4",
     "react-grid-layout": "^2.3.0",
     "react-hook-form": "^7.91.0",
-    "react-i18next": "^17.1.12",
+    "react-i18next": "^17.1.13",
     "react-icons": "^5.7.0",
     "react-konva": "^19.3.2",
     "react-markdown": "^10.1.0",
@@ -99,7 +99,7 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@playwright/test": "^1.64.1",
+    "@playwright/test": "^1.65.0",
     "@types/js-yaml": "^4.0.9",
     "@types/lodash": "^4.17.27",
     "@types/node": "^26.6.6",