- BUILD_PROXY now defaults to empty: the three GitHub fetches (llama.cpp zip x2,
pinned CPython tarball) go straight to GitHub, so the Dockerfile builds as-is on
unrestricted networks. Pass --build-arg BUILD_PROXY=socks5://<host>:<port> to
route them through a SOCKS5 proxy instead. The hard-coded cr1.mse:2000 address
is gone from every file.
- socks2http.py + proxyrun.sh are now committed: the Dockerfile always shells out
to proxyrun.sh (even in direct mode), so the bridge must be in the build context.
- proxyrun.sh resolves socks2http.py relative to its own location (was hard-coded
/src/socks2http.py), so the wrapper also works outside the image.
- socks2http.py: --upstream defaults to empty (was the hard-coded address); empty
upstream = plain TCP passthrough, still useful for testing.
- CUDA 12.9 (CUDA 13 dropped Volta), CMAKE_CUDA_ARCHITECTURES=70, STRATA_EXPERIMENTAL_SM60=ON
- BUILD_DSV41=1 builds the DeepSeek engine and bakes it into the image as a real file
inside /opt/strata/engine-dsv41 (never a symlink: setup.py and launch/runner.py put
exe.parent on LD_LIBRARY_PATH, so a symlink folder carries no CUDA libs)
- BUILD_ISA_FLOOR: default keeps STRATA_PORTABLE (AVX2 baseline); =none builds the
experimental SSE4.2 floor (STRATA_ISA_FLOOR) for CPUs without AVX2, where the
AVX2 ggml-cpu the DeepSeek CPU experts run on traps with SIGILL (exit -4)
- STRATA_COMMIT build-arg: the build context has no .git, so pass the host commit
to keep 'strata bench run' conforming (terminal archive carries a COMMIT file)
- BUILD_PROXY=socks5://... routes the three GitHub fetches (llama.cpp zip x2, pinned
CPython tarball) through a stdlib-only HTTP forward proxy (socks2http.py + proxyrun.sh,
keep them at the build-context root); apt and pip go direct
Hermes-1