655b366aa1
Some checks failed
wai-quantum command line / does this change touch it (push) Successful in 25s
wai-quantum docs, course and locales / does this change touch it (push) Successful in 23s
WAI operation catalogue / does this change touch it (push) Successful in 28s
wai-quantum editors / does this change touch it (push) Successful in 23s
wai-quantum service / does this change touch it (push) Successful in 17s
wai-quantum for Python / does this change touch it (push) Successful in 18s
wai-quantum extension points / does this change touch it (push) Successful in 18s
wai-quantum error correction and mitigation / does this change touch it (push) Successful in 18s
wai-quantum variational and algorithm library / does this change touch it (push) Successful in 21s
wai-quantum studio and desktop / does this change touch it (push) Successful in 24s
wai-quantum views in agent hosts / does this change touch it (push) Successful in 19s
wai-quantum verdicts and repairs / does this change touch it (push) Successful in 21s
wai-sink-android native sink library / does this change touch it (push) Successful in 11s
WAI Studio / does this change touch it (push) Successful in 12s
wai-sink-swift native sink package / does this change touch it (push) Successful in 13s
wai-quantum resource estimation / does this change touch it (push) Successful in 2m1s
wai-quantum OpenQASM reader / does this change touch it (push) Successful in 2m22s
wai-quantum pulse and dynamics / does this change touch it (push) Successful in 2m22s
wai-quantum for JavaScript / does this change touch it (push) Successful in 2m25s
wai-quantum contract / does this change touch it (push) Successful in 2m32s
wai-quantum other formats / does this change touch it (push) Successful in 2m26s
joule-moq-room room service / joule-moq-room · does this change touch it (push) Successful in 2m46s
wai-audit collector and player integration / does this change touch it (push) Successful in 2m39s
wai-quantum command line / command line · macos (push) Successful in 2m38s
wai-quantum service / service energy · linux packages (push) Successful in 2m19s
wai-quantum editors / editors · macos (push) Successful in 4m22s
WAI breaking changes and the conformance runner / WAI breaking · does this change touch WAI (push) Successful in 12s
wai-quantum service / service · macos (push) Successful in 6m19s
wai-quantum studio and desktop / desktop app · macos (push) Successful in 4m50s
wai-quantum wasmQ / does this change touch it (push) Successful in 10s
wai-quantum for Python / python · macos (push) Successful in 6m32s
wai-quantum pulse and dynamics / the same bits · macos (push) Successful in 1m17s
wai-quantum docs, course and locales / the Studio's words in every locale · linux (push) Successful in 22s
wai-audit collector and player integration / collector, player integration and the browser end to end · macos (push) Successful in 1m26s
WAI operation catalogue / the catalogue and every door · linux (push) Failing after 45s
wai-quantum wasmQ / profile, engines, reference modules, adversarial, vectors · macos (push) Successful in 2m6s
wai-quantum service / service · linux (push) Failing after 36s
wai-quantum extension points / the registry under wasm32-wasip2 (wasmtime) (push) Failing after 33s
wai-quantum error correction and mitigation / codes, decoders, texts and mitigation · linux, release (push) Failing after 22s
wai-quantum studio and desktop / desktop app · linux (push) Failing after 4s
wai-quantum studio and desktop / studio · browser (push) Failing after 4s
wai-quantum variational and algorithm library / parameters, gradients, optimisers, VQE, QAOA and builders · linux, release (push) Failing after 2s
wai-quantum verdicts and repairs / verdicts, repairs and the intent set · linux (push) Failing after 2s
wai-sink-android native sink library / every ABI, the AAR, and the instrumented tests in a headless emulator · macos (push) Successful in 6m54s
wai-quantum docs, course and locales / the course and the command line's languages · linux (push) Successful in 2m58s
wai-quantum verdicts and repairs / the intent set and the verdict under wasm32-wasip2 (wasmtime) (push) Failing after 18s
wai-quantum views in agent hosts / views · the page and its engine (push) Failing after 6s
WAI Studio / Studio in WebKit · linux (push) Failing after 1m24s
WAI Studio / the catalogue's actions, the unit tests and the core · linux (push) Successful in 1m28s
wai-quantum extension points / the registry and the example · linux (push) Failing after 4m4s
WAI Studio / Studio in Chromium and Firefox · macos (push) Successful in 7m39s
wai-quantum OpenQASM reader / corpus under wasm32-wasip2 (wasmtime) (push) Successful in 1m6s
wai-quantum OpenQASM reader / reader and corpus · linux (push) Successful in 2m23s
wai-quantum editors / editors · linux (push) Successful in 6m26s
wai-quantum for JavaScript / javascript · linux (push) Successful in 3m35s
wai-quantum for Python / python · linux (push) Successful in 6m26s
wai-quantum views in agent hosts / views · a scripted host (push) Failing after 5m32s
wai-quantum other formats / the set under wasm32-wasip2 (wasmtime) (push) Successful in 2m45s
wai-quantum contract / the policy is linked, and the deprecations page reads (push) Successful in 11s
wai-quantum pulse and dynamics / reader, simulator and pulse jobs · linux, release (push) Successful in 1m43s
wai-quantum pulse and dynamics / reader, simulator and pulse jobs under wasm32-wasip2 (wasmtime) (push) Successful in 2m6s
wai-audit collector and player integration / collector · linux (push) Successful in 1m18s
wai-quantum wasmQ / the reference modules rebuild to their modules of record · linux (push) Successful in 40s
wai-quantum other formats / readers, writers and the set · linux (push) Successful in 5m23s
WAI breaking changes and the conformance runner / WAI breaking · wire, record and API against main · linux (push) Successful in 2m33s
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (push) Successful in 4m49s
wai-quantum extension points / the registry and the example · linux-arm64 (push) Failing after 3m4s
wai-quantum variational and algorithm library / parameters, gradients, optimisers, VQE, QAOA and builders · linux-arm64, release (push) Successful in 2m52s
wai-quantum wasmQ / interpreter and vectors under wasm32-wasip2 (wasmtime) (push) Successful in 2m50s
wai-quantum wasmQ / profile, engines, reference modules, adversarial, vectors · linux (push) Successful in 3m45s
wai-sink-swift native sink package / libwai slices, desktop tests, simulator tests · macos (push) Successful in 16m1s
WAI breaking changes and the conformance runner / WAI breaking and conform · their tests, and the independent verifiers through wai conform · linux (push) Successful in 6m20s
wai-quantum contract / API compatibility · linux (push) Successful in 7m48s
wai-quantum contract / schemas and the committed tool lists · linux (push) Successful in 7m49s
wai-quantum resource estimation / estimation and calibration · linux, release (push) Successful in 12m15s
joule-moq-room room service / joule-moq-room, every target (push) Successful in 5m29s
wai-sink-android native sink library / the JNI layer and the platform-free half on the host JVM · linux-arm64 (push) Successful in 10m57s
wai-quantum pulse and dynamics / the same bits · linux-arm64 (push) Successful in 11m28s
wai-quantum studio and desktop / desktop app · windows (push) Successful in 12m28s
wai-quantum docs, course and locales / every command and snippet in the docs · linux (push) Successful in 40m54s
wai-quantum command line / command line · linux (push) Successful in 53m9s
A caller sends a task in the course's exercise form; the service's own code model writes an OpenQASM program for it with the writer's loop, the engine checks each attempt as it checks a lesson's answer, and the answer is the transcript, sealed with the service's receipt so POST /v1/verify checks it. Re-landed from #648. - A write is a job (Work::Write): admitted in #676's order (the client's window first, then a reading turn, its programs read in the capped reading child), kept, reloaded and run again as a job is. A queued write keeps the plan it was admitted with across a restart and fails only if the service has no model. - The writer process starts with the service from its kept binary copy, in the worker's sandbox on macOS, in its own process group, carrying the parent pid, first in line for the kernel under memory pressure. WAI_QSVC_WRITER_GB and WAI_QSVC_WRITE_SECS bound it; one client holds one queued or running write. - Refusals J080 (no model, 503), J081 (task) and J082 (options); main's contracts hold J070 to J074. A write carries no contract, so the energy ceilings do not apply; its energy figure is built on the engine's own functions. - Discovery (GET /v1, quantum_service_info), OpenAPI, the MCP task write_circuit, an attempt event per attempt, and its own label in GET /metrics. - WAI_QSVC_WRITER_SCRIPT runs the scripted model in the model's place for tests; smoke.sh writes a Bell pair's program with SMOKE_WRITE=1 and otherwise checks that a service with no model refuses a write. - offload.rs: each client counts the reading turns its requests actually hold, so no turn is lent past its share while one passes between its requests. The new test no_turn_is_lent_while_one_passes_between_a_client_s_requests fails 3 of 3 on main and passes 3 of 3 here. Tested on the Framework (Linux) and the M3 Ultra (macOS): service 140 tests and clippy with warnings denied; wai-quantum full library 1,517; the engine-only and engine+receipt builds with warnings denied; the writer leg; the course and docs legs; check_schemas.py; smoke over HTTP with and without a scripted writer (its receipt verifies, a changed transcript does not); the shipped image. Co-Authored-By: Claude Opus 5.5 <[email protected]>
55 lines
3 KiB
Docker
55 lines
3 KiB
Docker
# The WAI quantum job service as an OCI image, for running it yourself.
|
|
#
|
|
# Build from the repository's root, with the ignore file beside this one
|
|
# keeping the context to the crates the service is built from: the engine, the
|
|
# service, the writer (src/writer.rs), and the two crates of the writer's model
|
|
# runtime, with the manifest of their workspace, which they inherit from:
|
|
#
|
|
# docker build -f wai/wai-quantum-service/deploy/Containerfile -t wai-quantum-service .
|
|
# (or: podman build -f ... the same)
|
|
#
|
|
# Two stages. The first builds the service with the repository's pinned
|
|
# toolchain from the locked dependencies; the second holds the binary alone,
|
|
# run as an unprivileged user. Both bases are pinned by digest, the build is
|
|
# locked, paths are remapped and the timestamp is fixed, so the same source
|
|
# builds the same binary. See ../docs/self-host.md for running it.
|
|
|
|
# The build stage: the language's build image at the repository's toolchain, pinned by digest.
|
|
FROM docker.io/library/rust:1.98.0-slim-trixie@sha256:17d1ba895198f9934c6314ec5346a0d5115372f3243390c3d731e242f35c2f27 AS build
|
|
ENV CARGO_INCREMENTAL=0 \
|
|
CARGO_TERM_COLOR=never \
|
|
SOURCE_DATE_EPOCH=0 \
|
|
RUSTFLAGS="--remap-path-prefix=/src=/build --remap-path-prefix=/usr/local/cargo=/cargo -C strip=symbols"
|
|
WORKDIR /src
|
|
COPY wai/wai-quantum ./wai/wai-quantum
|
|
COPY wai/wai-quantum-writer ./wai/wai-quantum-writer
|
|
COPY wai/wai-quantum-service ./wai/wai-quantum-service
|
|
COPY jouleclaw/jouleclaw-rs/Cargo.toml ./jouleclaw/jouleclaw-rs/Cargo.toml
|
|
COPY jouleclaw/jouleclaw-rs/crates/jouleclaw-core ./jouleclaw/jouleclaw-rs/crates/jouleclaw-core
|
|
COPY jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf ./jouleclaw/jouleclaw-rs/crates/jouleclaw-loader-gguf
|
|
WORKDIR /src/wai/wai-quantum-service
|
|
# JOBS bounds the build's parallel jobs on a shared host (--build-arg JOBS=8).
|
|
ARG JOBS
|
|
RUN cargo build --locked --release ${JOBS:+--jobs "$JOBS"} && cp target/release/wai-quantum-service /wai-quantum-service
|
|
|
|
# The run stage: a slim base of the same release, pinned by digest, and the binary.
|
|
FROM docker.io/library/debian:trixie-slim@sha256:89c1ea91e897f0fe0a3731595330bc45b8bdef4047464a07116f891a94054b31
|
|
RUN useradd --system --uid 10001 --home-dir /var/lib/wai-quantum-service --create-home wai \
|
|
&& mkdir -p /var/lib/wai-quantum-service/store /var/lib/wai-quantum-service/keys \
|
|
&& chown -R wai:wai /var/lib/wai-quantum-service \
|
|
&& chmod 0700 /var/lib/wai-quantum-service/keys
|
|
COPY --from=build /wai-quantum-service /usr/local/bin/wai-quantum-service
|
|
USER wai
|
|
# Everything the service keeps lives under one volume: its job store and its receipt keys.
|
|
VOLUME ["/var/lib/wai-quantum-service"]
|
|
ENV WAI_QSVC_ADDR=0.0.0.0:8241 \
|
|
WAI_QSVC_STORE=/var/lib/wai-quantum-service/store \
|
|
WAI_QSVC_KEY=/var/lib/wai-quantum-service/keys/signing.key \
|
|
WAI_QSVC_PUBLIC_BASE=http://localhost:8241 \
|
|
WAI_QSVC_CONSOLE=http://localhost:8241/v1 \
|
|
WAI_QSVC_BUDGET_GB=8 \
|
|
WAI_QSVC_JOB_GB=4 \
|
|
WAI_QSVC_WORKERS=2
|
|
EXPOSE 8241
|
|
ENTRYPOINT ["/usr/local/bin/wai-quantum-service"]
|
|
CMD ["serve"]
|