Josh Hawkins 72183983b0 keep /config out of the root environment in the frigate run script ...

The script exported HOME=/config and prepended /config/.local/lib to LD_LIBRARY_PATH while still root, then ran python3, ffmpeg, grep, and opt_in_out as root. The runtime user owns /config, so it could plant a .pth file in the user site-packages or a library on the loader path and get code run as root on the next start. Root helpers now run with root's environment (and python3 -I), and HOME, LD_LIBRARY_PATH, and PATH reach only the dropped process through env on the s6-setuidgid line. opt_in_out runs as the runtime user, so the openvino marker no longer gets written into /config by root.

2026-10-18 12:06:35 -05:00

..

etc/s6-overlay/s6-rc.d

keep /config out of the root environment in the frigate run script

2026-10-18 12:06:35 -05:00

labelmap

Adds support for YOLO-NAS in OpenVino (#11645)

2024-06-07 05:52:08 -06:00

usr/local

Merge remote-tracking branch 'origin/master' into dev

2026-10-14 14:30:11 -05:00