Plamen K. Kosseff 7b9ef6a0f8 feat(backends): --disable-backend-install disables backend downloads. (#12754) ...

feat(backends): --disable-backend-install refuses every backend acquisition

A hardening switch for deployments that must run exactly the backend set they
were tested with (production, air-gapped, immutable images, package-managed
hosts). With LOCALAI_DISABLE_BACKEND_INSTALL=1 every install and upgrade path
refuses — gallery, OCI/URL/path, node-scoped, auto-upgrade, boot-time external
backends — HTTP routes answer 403 up front, and a model whose backend is
missing is refused before any download: 409 on the API, an error on preload
and import. Whether a backend is present is asked of the execution target:
the local backend directory on a single node, the workers' listings on a
distributed frontend, which installs nothing itself. Backends already
present, including system-path ones, keep working.

Assisted-by: Claude Code:claude-fable-5

Signed-off-by: Plamen K. Kosseff <p.kosseff@gmail.com>

2026-10-22 17:58:53 +02:00

..

model_preload_test.go

feat(backends): --disable-backend-install disables backend downloads. (#12754)

2026-10-22 17:58:53 +02:00

model_preload.go

feat(backends): --disable-backend-install disables backend downloads. (#12754)

2026-10-22 17:58:53 +02:00

startup_suite_test.go

fix: untangle pkg and core (#5896)

2025-07-24 15:03:41 +02:00