LocalAI

0 Fork 0

mirror of https://github.com/mudler/LocalAI.git synced 2026-10-28 09:08:54 -04:00

Files

T

Plamen K. Kosseff 7b9ef6a0f8 feat(backends): --disable-backend-install disables backend downloads. (#12754 )

feat(backends): --disable-backend-install refuses every backend acquisition

A hardening switch for deployments that must run exactly the backend set they
were tested with (production, air-gapped, immutable images, package-managed
hosts). With LOCALAI_DISABLE_BACKEND_INSTALL=1 every install and upgrade path
refuses — gallery, OCI/URL/path, node-scoped, auto-upgrade, boot-time external
backends — HTTP routes answer 403 up front, and a model whose backend is
missing is refused before any download: 409 on the API, an error on preload
and import. Whether a backend is present is asked of the execution target:
the local backend directory on a single node, the workers' listings on a
distributed frontend, which installs nothing itself. Backends already
present, including system-path ones, keep working.

Assisted-by: Claude Code:claude-fable-5

Signed-off-by: Plamen K. Kosseff <p.kosseff@gmail.com>

2026-10-22 17:58:53 +02:00

application

feat(backends): --disable-backend-install disables backend downloads. (#12754 )

2026-10-22 17:58:53 +02:00

backend

fix(sound): enumerate expansion keys (#12787 )

2026-10-20 13:14:49 +02:00

cli

feat(backends): --disable-backend-install disables backend downloads. (#12754 )

2026-10-22 17:58:53 +02:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087 )