From b3b34fa543cac89e0c2ea62bd1fd838d21e7814c Mon Sep 17 00:00:00 2001
From: l-nmch <leo@nonnenmacher-logel.fr>
Date: Tue, 11 Nov 2025 00:22:25 +0100
Subject: [PATCH] fix(build&compose): Added dependencies & resource access

---
 Dockerfile         | 20 +++++++++++++++-----
 docker-compose.yml | 16 ++++++++++++----
 2 files changed, 27 insertions(+), 9 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index ed7ca5d..2730f92 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,14 +8,24 @@ ENV APP_HOME=/app \
     PIP_NO_CACHE_DIR=1 \
     PORT=8000
 
+RUN sed -i 's/^\(Components:.*\)$/\1 contrib non-free/' /etc/apt/sources.list.d/debian.sources
+
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
-       build-essential \
-       gcc \
-       libffi-dev \
-       libssl-dev \
-       ca-certificates \
+       gnupg2 \
        curl \
+       ca-certificates \
+       lsb-release \
+       wget \
+       apt-transport-https \
+       nvidia-smi \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN wget https://repo.radeon.com/rocm/rocm.gpg.key -O - | gpg --dearmor | tee /etc/apt/keyrings/rocm.gpg > /dev/null \
+    && echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/rocm.gpg] https://repo.radeon.com/rocm/apt/7.1 noble main" | tee /etc/apt/sources.list.d/rocm.list \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends \
+       rocm-smi \
     && rm -rf /var/lib/apt/lists/*
 
 RUN useradd --create-home --uid ${UID} ${USER}
diff --git a/docker-compose.yml b/docker-compose.yml
index 8d617d6..8ea403b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,7 +5,15 @@ services:
     restart: unless-stopped
     ports:
       - "8000:8000"
-    volumes:
-      - /sys/class/drm/:/sys/class/drm/:ro
-      - /usr/bin/nvidia-smi:/usr/bin/nvidia-smi:ro
-      - /usr/bin/rocm-smi:/usr/bin/rocm-smi:ro
\ No newline at end of file
+    devices:
+      - /dev/kfd
+      - /dev/dri
+    security_opt:
+      - seccomp:unconfined
+    deploy:
+      resources:
+        reservations:
+          devices:
+            - capabilities: [gpu]
+    environment:
+      - NVIDIA_VISIBLE_DEVICES=all
\ No newline at end of file