1.2 KiB
Rootless podman container with Systemd Socket activation
Idea
By passing in the socket from systemd we minimize resource use when not in use. Since no other network access is required for operation, we can configure the container with network=none and minimize the risk of the AI escaping.
Set up
Optional, if you want to run this as a separate user
sudo useradd comfy
sudo machinectl shell comfy@
Check out this repository, navigate to its root directory and build the comfy container with
podman build -t localhost/comfy:latest .
Place comfy.socket in ~/.config/systemd/user, adjust ports and interfaces if needed.
Place comfy.container in ~/.config/containers/systemd. Adjust paths for models and config if desired.
The files are in utils/socket_activation, next to this readme.
Put model files into the models directory (~/models).
Start the socket:
systemctl --user daemon-reload
systemctl --user enable --now comfy.socket
If you want to run the service also when the user is not logged in, enable lingering:
sudo loginctl enable-linger <user>
Check that you can access comfy in browser. For troubleshooting, use, e. g., journalctl -xe.