Selfhosted

Indeed, Ollama is going a shady route. https://github.com/ggml-org/llama.cpp/pull/11016#issuecomment-2599740463

I started playing with Ramalama (the name is a mouthful) and it works great. There is one or two more steps in the setup but I've achieved great performance and the project is making good use of standards (OCI, jinja, unmodified llama.cpp, from what I understand).

Go and check it out, they are compatible with models from HF and Ollama too.

https://github.com/containers/ramalama

What would you recommend to hook to my home assistant?

While I don't think that llama.cpp is specifically a special risk, I think that running generative AI software in a container is probably a good idea. It's a rapidly-moving field with a lot of people contributing a lot of code that very quickly gets run on a lot of systems by a lot of people. There's been malware that's shown up in extensions for (for example) ComfyUI. And the software really doesn't need to poke around at outside data.

Also, because the software has to touch the GPU, it needs a certain amount of outside access. Containerizing that takes some extra effort.

https://old.reddit.com/r/comfyui/comments/1hjnf8s/psa_please_secure_your_comfyui_instance/

ComfyUI users has been hit time and time again with malware from custom nodes or their dependencies. If you're just using the vanilla nodes, or nodes you've personally developed yourself or vet yourself every update, then you're fine. But you're probably using custom nodes. They're the great thing about ComfyUI, but also its great security weakness.

Half a year ago the LLMVISION node was found to contain an info stealer. Just this month the ultralytics library, used in custom nodes like the Impact nodes, was compromised, and a cryptominer was shipped to thousands of users.

Granted, the developers have been doing their best to try to help all involved by spreading awareness of the malware and by setting up an automated scanner to inform users if they've been affected, but what's better than knowing how to get rid of the malware is not getting the malware at all. '

Why Containerization is a solution

So what can you do to secure ComfyUI, which has a main selling point of being able to use nodes with arbitrary code in them? I propose a band-aid solution that, I think, isn't horribly difficult to implement that significantly reduces your attack surface for malicious nodes or their dependencies: containerization.

Ollama means sticking llama.cpp in a Docker container, and that is, I think, a positive thing.

If there were a close analog to ollama, like some software package that could take a given LLM model and run in podman or Docker or something, I think that that'd be great. But I think that putting the software in a container is probably a good move relative to running it uncontainerized.

Thanks will do all that!

Start now! Install it, get a python environment up and running if you haven't already, and get that first play-around project working which you work outwards from!