This commit is contained in:
DrMelone
2026-02-19 22:20:14 +01:00
parent a23497346c
commit a15906db85
3 changed files with 4 additions and 4 deletions

View File

@@ -1521,7 +1521,7 @@ We strongly recommend using an [OpenAPI tool server](/features/extensibility/plu
**Do not rely on runtime pip installation in production environments.** When running with `UVICORN_WORKERS > 1` or multiple replicas, each worker/replica attempts to install packages independently on startup. This causes **race conditions** where concurrent pip processes crash with `AssertionError` because pip's internal locking detects the simultaneous installs.
**Set [`ENABLE_AUTO_DEPENDENCY_INSTALL=False`](/reference/env-configuration#enable_auto_dependency_install) in production** to disable runtime pip installs entirely. Then pre-install all required packages at image build time using a custom Dockerfile:
**Set [`ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS=False`](/reference/env-configuration#enable_pip_install_frontmatter_requirements) in production** to disable runtime pip installs entirely. Then pre-install all required packages at image build time using a custom Dockerfile:
```dockerfile
FROM ghcr.io/open-webui/open-webui:main

View File

@@ -6366,7 +6366,7 @@ bypassed when accessing documents from MIT.
Open WebUI provides environment variables to customize the pip installation process. Below are the environment variables used by Open WebUI for adjusting package installation behavior:
#### `ENABLE_AUTO_DEPENDENCY_INSTALL`
#### `ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS`
- Type: `bool`
- Default: `True`
@@ -6374,7 +6374,7 @@ Open WebUI provides environment variables to customize the pip installation proc
:::warning Security Hardening for Production
**Strongly recommended: set `ENABLE_AUTO_DEPENDENCY_INSTALL=False` in production.** Runtime pip installs allow any admin-uploaded function or tool to install arbitrary Python packages into the running process. Disabling this:
**Strongly recommended: set `ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS=False` in production.** Runtime pip installs allow any admin-uploaded function or tool to install arbitrary Python packages into the running process. Disabling this:
- **Prevents arbitrary package installation** from user-uploaded code
- **Eliminates race conditions** that crash workers when `UVICORN_WORKERS > 1` or multiple replicas attempt concurrent pip installs

View File

@@ -226,7 +226,7 @@ See [DATABASE_POOL_SIZE](/reference/env-configuration#database_pool_size) for de
When a function or tool specifies `requirements` in its frontmatter, Open WebUI runs `pip install` at runtime. With multiple workers or replicas, each process attempts the installation independently, causing pip's internal lock to detect the conflict and crash.
**Solution:**
**Set [`ENABLE_AUTO_DEPENDENCY_INSTALL=False`](/reference/env-configuration#enable_auto_dependency_install)** to disable runtime pip installs entirely. Then pre-install all required packages at image build time:
**Set [`ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS=False`](/reference/env-configuration#enable_pip_install_frontmatter_requirements)** to disable runtime pip installs entirely. Then pre-install all required packages at image build time:
```dockerfile
FROM ghcr.io/open-webui/open-webui:main