vh
3132a16ca0
Every fv-ml1 link on the Homepage dashboard was broken. Measured against the
live dashboard API before the fix: 16 entries pointing at the dead 10.250.50.54
and zero at the live 10.251.50.54, covering gen, M.O.G.-SEC, Scriberr, Embed,
Rerank, Reward, Coder, Dockge and six dormant seats.
The miss was structural, not careless. fv-ml1-rename-sweep.sh works from an
allowlist assembled from files that mention the HOST, and a homepage.href label
mentions only an IP -- so every stack whose sole stale reference was a label
fell outside it. The allowlist now covers those 24 files, and records how to
derive the list next time (grep the old address, subtract history) rather than
enumerating from memory.
History is still untouched, and the exclusions are now written down with the
reason each one keeps the old address: recorded benchmark results, whose
base_url is part of a measurement's provenance; the one LiteLLM comment
preserving a retired hand-test endpoint; and the cutover runbooks, where the old
address is the subject matter.
Two bugs found while applying it, both fixed here:
- deploy-stack.sh rejected any stack name containing a dot, so qwen3.5-122b,
qwopus3.5-122b and mistral-medium-3.5 could not be deployed by the script at
all. The check exists to stop path traversal, which means rejecting ".." and
"/" -- not every dot. Traversal is now rejected explicitly and tested.
- stacks/scriberr/.env.example allowed CORS only from the dead IP and from
scriberr.ana.internal, which no longer resolves; the box is at the fv site
and DNS already carries scriberr.fv.internal. The live .env had both stale
origins, i.e. an allowlist with nothing reachable in it.
Host side, applied separately: canonical pushed for the 16 stacks whose only
difference from the host was this renumber, and an in-place address-only fix for
the nine whose host copy has genuinely drifted or has no canonical copy, so that
drift survives for a deliberate reconciliation instead of being clobbered. Every
compose.yaml on fv-ml1 now reads 10.251.50.54. The labels themselves only take
effect at container creation, so the running containers still need recreating.
102 lines
3.4 KiB
YAML
102 lines
3.4 KiB
YAML
# mistral-small-4-heretic — abliterated Mistral Small 4 (heretic NVFP4) as a
|
|
# DROP-IN for the official mistral-small-4 backend.
|
|
#
|
|
# Serves darkc0de/Mistral-Small-4-119B-2603-heretic, quantized to NVFP4 in-house
|
|
# (vision tower kept bf16) and converted to Mistral native format. Built + validated
|
|
# 2026-06-17 — see tools/mistral-small4-nvfp4/ for the build pipeline.
|
|
#
|
|
# WHY a separate stack: GPU0 fits only one mistral-class model (~65-70 GB), so this
|
|
# is a backend SWAP, not a co-tenant. Bring it up only after downing the official
|
|
# mistral-small-4 stack. It serves under --served-model-name mistral-small-4 on the
|
|
# SAME port (8010), so litellm's mistral-small-4 + mistral-small-4-reasoning entries
|
|
# route here with NO litellm change. Revert = down this, `up -d` the official stack.
|
|
#
|
|
# DIFFERENCES vs the official compose (everything else mirrors it for a faithful
|
|
# drop-in — TP=1, util 0.93, MLA, reasoning + tool-call parsers, prefix caching):
|
|
# - model is a LOCAL native dir (mounted /model), not an HF id, so it needs the
|
|
# native loader flags: --config-format/--load-format/--tokenizer-mode mistral.
|
|
# - distinct container_name (vllm-mistral4-heretic) so it can be staged without
|
|
# colliding with the official container.
|
|
|
|
name: mistral-small-4-heretic
|
|
|
|
services:
|
|
vllm-mistral4-heretic:
|
|
image: ${MISTRAL_IMAGE}
|
|
container_name: ${MISTRAL_CONTAINER_NAME}
|
|
restart: unless-stopped
|
|
ipc: host
|
|
ports:
|
|
- "${MISTRAL_PORT}:8000"
|
|
volumes:
|
|
- /tank/aimodels/huggingface:/hfcache
|
|
# The in-house heretic native NVFP4 checkpoint (read-only).
|
|
- /tank/aimodels/quant-work/heretic-native-nvfp4:/model:ro
|
|
environment:
|
|
- HF_HOME=/hfcache
|
|
- HF_HUB_CACHE=/hfcache/hub
|
|
- HUGGING_FACE_HUB_TOKEN=${HF_TOKEN:-}
|
|
- VLLM_API_KEY=${API_KEY:-}
|
|
command:
|
|
- /model
|
|
# Native Mistral format (params.json + consolidated*.safetensors + tekken).
|
|
- --config-format
|
|
- mistral
|
|
- --load-format
|
|
- mistral
|
|
- --tokenizer-mode
|
|
- mistral
|
|
# SAME served name as the official → litellm routes here unchanged.
|
|
- --served-model-name
|
|
- mistral-small-4
|
|
- --host
|
|
- 0.0.0.0
|
|
- --port
|
|
- "8000"
|
|
- --tensor-parallel-size
|
|
- "1"
|
|
- --gpu-memory-utilization
|
|
- ${MISTRAL_GPU_MEM_UTIL}
|
|
- --max-model-len
|
|
- ${MISTRAL_MAX_MODEL_LEN}
|
|
- --attention-backend
|
|
- TRITON_MLA
|
|
- --tool-call-parser
|
|
- mistral
|
|
- --enable-auto-tool-choice
|
|
- --reasoning-parser
|
|
- mistral
|
|
- --max-num-seqs
|
|
- ${MISTRAL_MAX_NUM_SEQS}
|
|
- --dtype
|
|
- auto
|
|
- --enable-prefix-caching
|
|
deploy:
|
|
resources:
|
|
reservations:
|
|
devices:
|
|
- driver: nvidia
|
|
device_ids:
|
|
- "${MISTRAL_GPU_ID}"
|
|
capabilities:
|
|
- gpu
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 600s
|
|
networks:
|
|
- tnet
|
|
labels:
|
|
- homepage.group=AI Systems
|
|
- homepage.name=Mistral Small 4 (heretic NVFP4)
|
|
- homepage.icon=mdi-creation
|
|
- homepage.description=Abliterated Mistral-Small-4 (heretic NVFP4) drop-in via vLLM (fv-ml1 GPU 0)
|
|
- homepage.href=http://10.251.50.54:${MISTRAL_PORT}/docs
|
|
|
|
networks:
|
|
tnet:
|
|
name: traefik-net
|
|
external: true
|