mirror of
https://github.com/open-webui/docs.git
synced 2026-03-26 13:18:42 +07:00
upd
This commit is contained in:
@@ -1521,7 +1521,7 @@ We strongly recommend using an [OpenAPI tool server](/features/extensibility/plu
|
||||
|
||||
**Do not rely on runtime pip installation in production environments.** When running with `UVICORN_WORKERS > 1` or multiple replicas, each worker/replica attempts to install packages independently on startup. This causes **race conditions** where concurrent pip processes crash with `AssertionError` because pip's internal locking detects the simultaneous installs.
|
||||
|
||||
**Set [`ENABLE_AUTO_DEPENDENCY_INSTALL=False`](/reference/env-configuration#enable_auto_dependency_install) in production** to disable runtime pip installs entirely. Then pre-install all required packages at image build time using a custom Dockerfile:
|
||||
**Set [`ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS=False`](/reference/env-configuration#enable_pip_install_frontmatter_requirements) in production** to disable runtime pip installs entirely. Then pre-install all required packages at image build time using a custom Dockerfile:
|
||||
|
||||
```dockerfile
|
||||
FROM ghcr.io/open-webui/open-webui:main
|
||||
|
||||
@@ -6366,7 +6366,7 @@ bypassed when accessing documents from MIT.
|
||||
|
||||
Open WebUI provides environment variables to customize the pip installation process. Below are the environment variables used by Open WebUI for adjusting package installation behavior:
|
||||
|
||||
#### `ENABLE_AUTO_DEPENDENCY_INSTALL`
|
||||
#### `ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS`
|
||||
|
||||
- Type: `bool`
|
||||
- Default: `True`
|
||||
@@ -6374,7 +6374,7 @@ Open WebUI provides environment variables to customize the pip installation proc
|
||||
|
||||
:::warning Security Hardening for Production
|
||||
|
||||
**Strongly recommended: set `ENABLE_AUTO_DEPENDENCY_INSTALL=False` in production.** Runtime pip installs allow any admin-uploaded function or tool to install arbitrary Python packages into the running process. Disabling this:
|
||||
**Strongly recommended: set `ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS=False` in production.** Runtime pip installs allow any admin-uploaded function or tool to install arbitrary Python packages into the running process. Disabling this:
|
||||
|
||||
- **Prevents arbitrary package installation** from user-uploaded code
|
||||
- **Eliminates race conditions** that crash workers when `UVICORN_WORKERS > 1` or multiple replicas attempt concurrent pip installs
|
||||
|
||||
@@ -226,7 +226,7 @@ See [DATABASE_POOL_SIZE](/reference/env-configuration#database_pool_size) for de
|
||||
When a function or tool specifies `requirements` in its frontmatter, Open WebUI runs `pip install` at runtime. With multiple workers or replicas, each process attempts the installation independently, causing pip's internal lock to detect the conflict and crash.
|
||||
|
||||
**Solution:**
|
||||
**Set [`ENABLE_AUTO_DEPENDENCY_INSTALL=False`](/reference/env-configuration#enable_auto_dependency_install)** to disable runtime pip installs entirely. Then pre-install all required packages at image build time:
|
||||
**Set [`ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS=False`](/reference/env-configuration#enable_pip_install_frontmatter_requirements)** to disable runtime pip installs entirely. Then pre-install all required packages at image build time:
|
||||
|
||||
```dockerfile
|
||||
FROM ghcr.io/open-webui/open-webui:main
|
||||
|
||||
Reference in New Issue
Block a user