Squashed 'compose/' content from commit f70202c

git-subtree-dir: compose git-subtree-split: f70202c7f66a6d0c39d678bb3258c9b4e410d583
2025-09-01 08:43:15 -04:00
commit 56382a92b7
12 changed files with 1655 additions and 0 deletions
@@ -0,0 +1,279 @@
+---
+x-podman: &podman
+  userns_mode: keep-id
+  security_opt:
+    - "label=disable"
+
+x-logging: &default-logging
+  driver: json-file
+  options:
+    mode: non-blocking
+    max-buffer-size: 4m
+    max-size: "200m"
+    max-file: "1"
+
+x-common-environment: &common-environment
+  TZ: ${TZ:-UTC}
+
+x-audio-environment: &audio-environment
+  <<: *common-environment
+  PULSE_SERVER: unix:${XDG_RUNTIME_DIR}/pulse/native
+  PULSE_COOKIE: /home/${OVOS_USER}/.config/pulse/cookie
+  XDG_RUNTIME_DIR: ${XDG_RUNTIME_DIR}
+
+x-resource-limits: &resource-limits
+  deploy:
+    resources:
+      limits:
+        memory: 512M
+      reservations:
+        memory: 128M
+
+x-core-resource-limits: &core-resource-limits
+  deploy:
+    resources:
+      limits:
+        memory: 1G
+        cpus: "1.0"
+      reservations:
+        memory: 256M
+        cpus: "0.25"
+
+x-skill-resource-limits: &skill-resource-limits
+  deploy:
+    resources:
+      limits:
+        memory: 256M
+      reservations:
+        memory: 64M
+
+volumes:
+  ovos_models:
+    name: ovos_models
+    driver: local
+  ovos_vosk:
+    name: ovos_vosk
+    driver: local
+  ovos_listener_records:
+    name: ovos_listener_records
+    driver: local
+  ovos_tts_cache:
+    name: ovos_tts_cache
+    driver: local
+  ovos_nltk:
+    name: ovos_nltk
+    driver: local
+  ovos_local_state:
+    name: ovos_local_state
+    driver: local
+
+services:
+  ovos_messagebus:
+    <<: [*podman, *resource-limits]
+    container_name: ovos_messagebus
+    hostname: ovos_messagebus
+    restart: unless-stopped
+    image: docker.io/smartgic/ovos-messagebus:${VERSION}
+    logging: *default-logging
+    pull_policy: ${PULL_POLICY:-always}
+    environment:
+      <<: *common-environment
+    network_mode: host
+    volumes:
+      - ${OVOS_CONFIG_FOLDER}:/home/${OVOS_USER}/.config/mycroft:ro
+      - ovos_local_state:/home/${OVOS_USER}/.local/state/mycroft
+      - ${TMP_FOLDER}:/tmp/mycroft
+
+  ovos_phal:
+    <<: [*podman, *resource-limits]
+    container_name: ovos_phal
+    hostname: ovos_phal
+    restart: unless-stopped
+    image: docker.io/smartgic/ovos-phal:${VERSION}
+    logging: *default-logging
+    pull_policy: ${PULL_POLICY:-always}
+    environment:
+      <<: *audio-environment
+    network_mode: host
+    # Use specific capabilities instead of privileged mode where possible
+    cap_add:
+      - SYS_ADMIN
+      - DAC_OVERRIDE
+    # Only use privileged if absolutely necessary for hardware access
+    privileged: true
+    volumes:
+      - ~/.config/pulse/cookie:/home/${OVOS_USER}/.config/pulse/cookie:ro
+      - ${OVOS_CONFIG_FOLDER}:/home/${OVOS_USER}/.config/mycroft
+      - ${OVOS_CONFIG_PHAL_FOLDER}:/home/${OVOS_USER}/.config/OpenVoiceOS
+      - ovos_local_state:/home/${OVOS_USER}/.local/state/mycroft
+      - ${TMP_FOLDER}:/tmp/mycroft
+      - ${XDG_RUNTIME_DIR}/pipewire-0:${XDG_RUNTIME_DIR}/pipewire-0:ro
+      - ${XDG_RUNTIME_DIR}/pulse:${XDG_RUNTIME_DIR}/pulse:ro
+    depends_on:
+      ovos_messagebus:
+        condition: service_started
+
+  ovos_phal_admin:
+    <<: [*podman, *resource-limits]
+    container_name: ovos_phal_admin
+    hostname: ovos_phal_admin
+    restart: unless-stopped
+    image: docker.io/smartgic/ovos-phal-admin:${VERSION}
+    logging: *default-logging
+    pull_policy: ${PULL_POLICY:-always}
+    environment:
+      <<: *common-environment
+    network_mode: host
+    # Use specific capabilities instead of privileged mode where possible
+    cap_add:
+      - SYS_ADMIN
+      - DAC_OVERRIDE
+    # Only use privileged if absolutely necessary for hardware access
+    privileged: true
+    volumes:
+      - ${OVOS_CONFIG_FOLDER}:/home/${OVOS_USER}/.config/mycroft
+      - ${OVOS_CONFIG_PHAL_FOLDER}:/home/${OVOS_USER}/.config/OpenVoiceOS
+      - ovos_local_state:/home/${OVOS_USER}/.local/state/mycroft
+      - ${TMP_FOLDER}:/tmp/mycroft
+      - /sys:/sys:ro
+      - /dev:/dev:ro
+    depends_on:
+      ovos_messagebus:
+        condition: service_started
+
+  ovos_listener:
+    <<: [*podman, *resource-limits]
+    container_name: ovos_listener
+    hostname: ovos_listener
+    restart: unless-stopped
+    image: docker.io/smartgic/ovos-listener:${VERSION}
+    logging: *default-logging
+    pull_policy: ${PULL_POLICY:-always}
+    environment:
+      <<: *audio-environment
+    network_mode: host
+    devices:
+      - /dev/snd
+    volumes:
+      - ~/.config/pulse/cookie:/home/${OVOS_USER}/.config/pulse/cookie:ro
+      - ${OVOS_CONFIG_FOLDER}:/home/${OVOS_USER}/.config/mycroft:ro
+      - ovos_listener_records:/home/${OVOS_USER}/.local/share/mycroft/listener
+      - ovos_local_state:/home/${OVOS_USER}/.local/state/mycroft
+      - ovos_models:/home/${OVOS_USER}/.local/share/precise-lite
+      - ovos_vosk:/home/${OVOS_USER}/.local/share/vosk
+      - ${TMP_FOLDER}:/tmp/mycroft
+      - ${XDG_RUNTIME_DIR}/pipewire-0:${XDG_RUNTIME_DIR}/pipewire-0:ro
+      - ${XDG_RUNTIME_DIR}/pulse:${XDG_RUNTIME_DIR}/pulse:ro
+    depends_on:
+      ovos_messagebus:
+        condition: service_started
+      ovos_phal:
+        condition: service_started
+
+  ovos_plugin_ggwave:
+    <<: [*podman, *resource-limits]
+    container_name: ovos_plugin_ggwave
+    hostname: ovos_plugin_ggwave
+    restart: unless-stopped
+    image: docker.io/smartgic/ovos-plugin-ggwave:${VERSION}
+    logging: *default-logging
+    pull_policy: ${PULL_POLICY:-always}
+    environment:
+      <<: *audio-environment
+    network_mode: host
+    devices:
+      - /dev/snd
+    volumes:
+      - ~/.config/pulse/cookie:/home/${OVOS_USER}/.config/pulse/cookie:ro
+      - ${OVOS_CONFIG_FOLDER}:/home/${OVOS_USER}/.config/mycroft:ro
+      - ${TMP_FOLDER}:/tmp/mycroft
+      - ${XDG_RUNTIME_DIR}/pipewire-0:${XDG_RUNTIME_DIR}/pipewire-0:ro
+      - ${XDG_RUNTIME_DIR}/pulse:${XDG_RUNTIME_DIR}/pulse:ro
+    depends_on:
+      ovos_messagebus:
+        condition: service_started
+      ovos_phal:
+        condition: service_started
+    healthcheck:
+      test: ["CMD", "pgrep", "-f", "ggwave"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 15s
+
+  ovos_audio:
+    <<: [*podman, *resource-limits]
+    container_name: ovos_audio
+    hostname: ovos_audio
+    restart: unless-stopped
+    image: docker.io/smartgic/ovos-audio:${VERSION}
+    logging: *default-logging
+    pull_policy: ${PULL_POLICY:-always}
+    environment:
+      <<: *audio-environment
+      DBUS_SESSION_BUS_ADDRESS: unix:path=${XDG_RUNTIME_DIR}/bus
+    network_mode: host
+    devices:
+      - /dev/snd
+    volumes:
+      - ~/.config/pulse/cookie:/home/${OVOS_USER}/.config/pulse/cookie:ro
+      - ${OVOS_CONFIG_FOLDER}:/home/${OVOS_USER}/.config/mycroft
+      - ovos_local_state:/home/${OVOS_USER}/.local/state/mycroft
+      - ovos_tts_cache:/home/${OVOS_USER}/.cache/mycroft
+      - ${TMP_FOLDER}:/tmp/mycroft
+      - ${XDG_RUNTIME_DIR}/bus:${XDG_RUNTIME_DIR}/bus:ro
+      - ${XDG_RUNTIME_DIR}/pipewire-0:${XDG_RUNTIME_DIR}/pipewire-0:ro
+      - ${XDG_RUNTIME_DIR}/pulse:${XDG_RUNTIME_DIR}/pulse:ro
+    depends_on:
+      ovos_messagebus:
+        condition: service_started
+      ovos_phal:
+        condition: service_started
+
+  ovos_core:
+    <<: [*podman, *core-resource-limits]
+    container_name: ovos_core
+    hostname: ovos_core
+    restart: unless-stopped
+    image: docker.io/smartgic/ovos-core:${VERSION}
+    logging: *default-logging
+    pull_policy: ${PULL_POLICY:-always}
+    environment:
+      <<: *audio-environment
+    network_mode: host
+    devices:
+      - /dev/snd
+    volumes:
+      - ~/.config/pulse/cookie:/home/${OVOS_USER}/.config/pulse/cookie:ro
+      - ${OVOS_CONFIG_FOLDER}:/home/${OVOS_USER}/.config/mycroft
+      - ${OVOS_PERSONA_FOLDER}:/home/${OVOS_USER}/.config/ovos_persona
+      - ovos_local_state:/home/${OVOS_USER}/.local/state/mycroft
+      - ovos_nltk:/home/${OVOS_USER}/nltk_data
+      - ${OVOS_SHARE_FOLDER}:/home/${OVOS_USER}/.local/share/mycroft
+      - ${TMP_FOLDER}:/tmp/mycroft
+      - ${XDG_RUNTIME_DIR}/pipewire-0:${XDG_RUNTIME_DIR}/pipewire-0:ro
+      - ${XDG_RUNTIME_DIR}/pulse:${XDG_RUNTIME_DIR}/pulse:ro
+    depends_on:
+      ovos_messagebus:
+        condition: service_started
+      ovos_phal:
+        condition: service_started
+
+  ovos_cli:
+    <<: [*podman, *resource-limits]
+    container_name: ovos_cli
+    hostname: ovos_cli
+    restart: unless-stopped
+    image: docker.io/smartgic/ovos-cli:${VERSION}
+    logging: *default-logging
+    pull_policy: ${PULL_POLICY:-always}
+    environment:
+      <<: *common-environment
+    network_mode: host
+    volumes:
+      - ${OVOS_CONFIG_FOLDER}:/home/${OVOS_USER}/.config/mycroft
+      - ovos_local_state:/home/${OVOS_USER}/.local/state/mycroft
+      - ${TMP_FOLDER}:/tmp/mycroft
+    depends_on:
+      ovos_messagebus:
+        condition: service_started