Upload 32 files

Dockerfile

@@ -8,9 +8,6 @@ ARG VERSION_VNC="1.6.0"
 ARG VERSION_UTK="1.2.0"
 ARG VERSION_PASST="2025_09_19"
 
-# Set working dir
-
-
 ARG DEBCONF_NOWARNINGS="yes"
 ARG DEBIAN_FRONTEND="noninteractive"
 ARG DEBCONF_NONINTERACTIVE_SEEN="true"
@@ -69,15 +66,6 @@ COPY --chmod=744 ./web/conf/nginx.conf /etc/nginx/default.conf
 
 ADD --chmod=755 "https://github.com/qemus/fiano/releases/download/v${VERSION_UTK}/utk_${VERSION_UTK}_${TARGETARCH}.bin" /run/utk.bin
 
-WORKDIR /.
-
-
-# Make the entire /app directory fully writeable for all users
-
-
-
-USER root
-
 VOLUME /storage
 EXPOSE 22 5900 8006
 

src/reset.sh

@@ -5,7 +5,21 @@ trap 'error "Status $? while: $BASH_COMMAND (line $LINENO/$BASH_LINENO)"' ERR
 [[ "${TRACE:-}" == [Yy1]* ]] && set -o functrace && trap 'echo "# $BASH_COMMAND" >&2' DEBUG
 
 [ ! -f "/run/entry.sh" ] && error "Script must be run inside the container!" && exit 11
-[ "$(id -u)" -ne "0" ] && error "Script must be executed with root privileges." && exit 12
+
+# If not running as root, don't hard-exit. Some restricted environments (like
+# Hugging Face Spaces) run containers without root privileges. Fall back to a
+# degraded non-root mode: warn, set NONROOT, and disable KVM and network
+# features that require capabilities.
+NONROOT="N"
+if [ "$(id -u)" -ne "0" ]; then
+  warn "Script is not running as root. Entering non-root degraded mode. Some features (KVM, TAP/VHOST) will be disabled."
+  NONROOT="Y"
+  # Disable privileged features
+  KVM="N"
+  NETWORK="N"
+else
+  NONROOT="N"
+fi
 
 # Docker environment variables
 

src/start.sh

@@ -1,6 +1,46 @@
 #!/usr/bin/env bash
 set -Eeuo pipefail
 
+# Diagnostics: when DEBUG=Y or DIAG=Y, print environment info useful for
+# debugging why KVM or networking may not be available in restricted hosts
+# (e.g. Hugging Face Spaces).
+if [[ "${DEBUG:-N}" == [Yy1]* || "${DIAG:-N}" == [Yy1]* ]]; then
+	echo "--- startup diagnostics ---"
+	echo "User UID: $(id -u) ($(id -un 2>/dev/null || echo unknown))"
+	if [ -e /dev/kvm ]; then
+		ls -l /dev/kvm || true
+		if [ -w /dev/kvm ] 2>/dev/null; then
+			echo "/dev/kvm: present and writable"
+		else
+			echo "/dev/kvm: present but not writable"
+		fi
+	else
+		echo "/dev/kvm: missing"
+	fi
+
+	if [ -e /dev/net/tun ]; then
+		ls -l /dev/net/tun || true
+		echo "/dev/net/tun: present"
+	else
+		echo "/dev/net/tun: missing"
+	fi
+
+	if [ -e /dev/vhost-net ]; then
+		ls -l /dev/vhost-net || true
+		echo "/dev/vhost-net: present"
+	else
+		echo "/dev/vhost-net: missing"
+	fi
+
+	echo "Kernel accel availability (qemu):"
+	if command -v qemu-system-x86_64 &>/dev/null; then
+		qemu-system-x86_64 -accel help 2>/dev/null || true
+	else
+		echo "qemu-system-x86_64: not installed"
+	fi
+	echo "--- end diagnostics ---"
+fi
+
 # You can override this hook to execute a script before startup!
 
 return 0