add cloudflared tunnel

CFTOKEN.enc

@@ -0,0 +1,5 @@
+U2FsdGVkX1/zLPdWdz9pp2O89Fd2qiGq6MAStpezbFJ/5d/XE2RNNA2N2CnVc7BQ
+9qUWzG1EvonXk9GSGYAc5Sev2VnOjGh5eDQsjOGHUlGPEvxX1D4UE5+WmU9+S5DK
+tZxAetVkyIDQga/ZosPi6vDezEreOjMOtjkfG3UeJclAVM0ywAnfzeB/wJfXy2Yu
+lWOzFnRrv/2OoS71C25cXjsflUbmm97SXNMUokjFwIyxdzK4T8uEj5rFHHMVhpyK
+BApA5U9ydF6swFx7QNiIjg==

Dockerfile

@@ -1,13 +1,13 @@
-# build with: docker build . --tag sctg/roco-idefics3:0.0.13 --tag sctg/roco-idefics3:latest --push
+# build with: docker build . --tag sctg/roco-idefics3:0.0.14 --tag sctg/roco-idefics3:latest --push
 # run with 
-# docker run --gpus all --user=42420:42420 -p 7000-8000:7000-8000 -p 8080:8080 -e HF_TOKEN=hf_TOKEN -it sctg/roco-idefics3:0.0.13 bash -i /start.sh sleep infinity
-# docker run --gpus all --user=42420:42420 -p 7000-8000:7000-8000 -p 8080:8080 -it sctg/roco-idefics3:0.0.13 bash -i /start.sh python /learn.py hf_...
+# docker run --gpus all --user=42420:42420 -p 7000-8000:7000-8000 -p 8080:8080 -e HF_TOKEN=hf_TOKEN -it sctg/roco-idefics3:0.0.14 bash -i /start.sh sleep infinity
+# docker run --gpus all --user=42420:42420 -p 7000-8000:7000-8000 -p 8080:8080 -it sctg/roco-idefics3:0.0.14 bash -i /start.sh python /learn.py hf_...
 FROM cloudflare/cloudflared:latest as cloudflared
 FROM nvidia/cuda:11.6.1-devel-ubuntu20.04
 ARG NODE_MAJOR="20"
 RUN /usr/sbin/addgroup --gid 42420 ovh
 RUN /usr/sbin/useradd -u 42420 --gid 42420 -m -d /workspace -s /bin/bash ovh
-RUN apt update -y && apt-get install -y curl git git-lfs screen \
+RUN apt update -y && apt-get install -y curl git git-lfs screen sudo \
       && mkdir -p /etc/apt/keyrings \
       && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
       && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list \
@@ -18,6 +18,7 @@ COPY learn.py /learn.py
 # Mandatory to run the jobs in rootless mode
 USER root
 RUN chown -R 42420:42420 /workspace
+RUN echo "ovh ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
 COPY --from=cloudflared /usr/local/bin/cloudflared /usr/local/bin/cloudflared
 USER 42420
 RUN curl -L https://repo.anaconda.com/miniconda/Miniconda3-latest-Linux-x86_64.sh > /workspace/miniconda.sh
@@ -40,11 +41,11 @@ RUN . /workspace/.miniconda3/bin/activate \
     && pip uninstall unsloth -y \
     && pip install --upgrade --no-cache-dir --no-deps git+https://github.com/unslothai/unsloth.git
 
-
 RUN . /workspace/.miniconda3/bin/activate && conda install -y jupyter
 RUN rm -f /workspace/miniconda.sh
 RUN mkdir -p /workspace/.config/github-copilot/
 COPY apps.json.enc /workspace/.config/github-copilot/apps.json.enc
+COPY CFTOKEN.enc /workspace/.config/CFTOKEN.enc
 # Mandatory to run the jobs in rootless mode
 # USER root
 # RUN chown -R 42420:42420 /workspace

start.sh

@@ -24,6 +24,17 @@ if [ -f /workspace/.config/github-copilot/apps.json.enc ]; then
   openssl aes-256-cbc -a -d -md sha256 -pass pass:"$HF_TOKEN" -in /workspace/.config/github-copilot/apps.json.enc -out /workspace/.config/github-copilot/apps.json
 fi
 
+# Launch cloudflared tunnel
+# CFTOKEN.enc is the Cloudflared encrypted token
+# CFTOKEN.enc contained an encrypted string encrypted with the HF_TOKEN
+if [ -f /workspace/.config/CFTOKEN.enc ]; then
+  echo "Decrypting CFTOKEN"
+  CFTOKEN_ENC=$(cat /workspace/.config/CFTOKEN.enc)
+  echo "$CFTOKEN_ENC" | openssl  aes-256-cbc -a -d -md sha256 -pass pass:"$HF_TOKEN"  > /workspace/.config/cftoken
+  export CFTOKEN=$(cat /workspace/.config/cftoken)
+  /usr/local/bin/cloudflared --pidfile /tmp/$name.pid  --autoupdate-freq 24h0m0s tunnel run --token $CFTOKEN &
+fi
+
 git clone https://huggingface.co/eltorio/IDEFICS3_ROCOv2
 git config --global user.email "[email protected]"
 git config --global user.name "[email protected]"