mirror of
https://github.com/hanzo-ml/trainer.git
synced 2026-09-24 00:31:34 +00:00
a6e862ee0c
* fix(runtimes): set file modes on MPI SSH secret volume Set per-item file modes on the MPI SSH auth Secret volume to prevent the private key from being world-readable inside training pods. Private key uses 0o640 (not 0o600) because the builtin deepspeed-distributed and mlx-distributed runtimes run as runAsUser: 1000 while Secret volumes mount as root:root. A volume-level DefaultMode of 0o400 is added as defense-in-depth for any future items added without an explicit per-item mode. Fixes #3262 Signed-off-by: Dmytro Hryshchenko <[email protected]> * docs: update pkg/constants/constants.go Co-authored-by: Andrey Velichkevich <[email protected]> Signed-off-by: Dmytro Hryshchenko <[email protected]> --------- Signed-off-by: Dmytro Hryshchenko <[email protected]> Signed-off-by: Dmytro Hryshchenko <[email protected]> Co-authored-by: Andrey Velichkevich <[email protected]> Co-authored-by: Hanzo Dev <[email protected]>