Josh Hawkins 72183983b0 keep /config out of the root environment in the frigate run script ...

The script exported HOME=/config and prepended /config/.local/lib to LD_LIBRARY_PATH while still root, then ran python3, ffmpeg, grep, and opt_in_out as root. The runtime user owns /config, so it could plant a .pth file in the user site-packages or a library on the loader path and get code run as root on the next start. Root helpers now run with root's environment (and python3 -I), and HOME, LD_LIBRARY_PATH, and PATH reach only the dropped process through env on the s6-setuidgid line. opt_in_out runs as the runtime user, so the openvino marker no longer gets written into /config by root.

2026-10-18 12:06:35 -05:00

..

deepx

Feat/deepx npu detector (#24336)

2026-09-21 07:50:44 -05:00

hailo8l

Update hailo installation instructions and script (#21882)

2026-02-05 06:38:34 -07:00

main

keep /config out of the root environment in the frigate run script

2026-10-18 12:06:35 -05:00

memryx

update installation code to hold SDK 2.1 version (#20781)

2025-11-03 13:23:51 -07:00

migration

Container security hardening (phase 3, breaking) (#24081)

2026-09-12 07:30:04 -06:00

rockchip

Increase ruff coverage (#23644)

2026-07-06 12:28:02 -05:00

rocm

ROCm Optimizations (#23118)

2026-05-05 16:33:43 -05:00

rpi

Improve ffmpeg versions handling (#16712)

2025-02-20 18:07:41 -07:00

synaptics

[Init] Initial commit for Synaptics SL1680 NPU (#19680)

2025-09-26 07:07:12 -05:00

tensorrt

Update deps (#24623)

2026-10-10 15:01:33 -05:00