Soulstone Resources and Secrets

In plain words: Local model devices, mounts, secrets

Available 1 min read 4 glossary terms 5 connected pages
The short version written for the Snayu team

Rules for what a local model service may receive: explicit devices, volume mounts, non-secret environment, Podman secret references and a unique host port.

Why read it: Read this before granting a local model access to a GPU, folder, port or credential.
  1. 1Mounts may not touch the Settings Folder, Data Folder or systemd binding roots.
  2. 2secret_env_files maps env names to Podman secrets; Apply Config checks they exist without reading them.
  3. 3Every local model needs a unique host port; omit it to have one assigned automatically.

Words on this page, decoded click one for its card

The original text Underlined words open their plain-English card.

A SoulstoneLocal Model receives an explicit slice of local substrate. Its RuneService Config File may name devices, ports, volumes, non-secret environment, and Podman secret references. It gains no blanket CryptData Folder, model shelf, host socket, or credential authority from being local.

Explicit Local Substrate

devices passes named hardware into the container. volumes maps exact host paths to exact container paths. Model artifacts must be reachable through a declared RuneService Config File or adapter-contributed mount; there is no implicit host model_root.

Before admitting a mount, the protected-root gate checks both ends. Each must be absolute. It resolves host symlinks before comparison and emits a safe alias as its canonical target. Neither end may equal, contain, or sit beneath the CodexSettings Folder, CryptData Folder, Reactor, or user-systemd binding roots. Percent signs, backslashes, and non-printable characters also cause rejection.

Secret Hydration

secret_env_files maps an environment-variable name to a Podman secret name. This schematic example demonstrates that mapping; an admitted engine profile must separately pin its image:

name = "private-runtime"
runtime = "vllm"
model_path = "/models/qwen-awq"

[quadlet]
image = "vllm/vllm-openai:latest"

[secret_env_files]
HF_TOKEN_FILE = "hf_runtime_token"

Binding first checks that hf_runtime_token exists, without reading its contents. Missing secrets or failed existence probes refuse the bind. A successful bind emits Secret=hf_runtime_token in the Quadlet, making HF_TOKEN_FILE=/run/secrets/hf_runtime_token available inside the container. The CodexSettings Folder retains the name; rootless Podman's secret store retains the value. Recreate the consuming container after replacing that value.

The Port Singularity

Every SoulstoneLocal Model must listen on a unique host port

Reusing a port can fail a transition with Address already in use.

A SoulstoneLocal Model may omit both port and base_url; loading assigns a unique local port and derives http://localhost:{port}/v1. Explicit values win, and host publication remains loopback-bound.

Owners and Refusal

Configuration owns secret references and RuneService Config File validation; Layout owns protected geography; and Containers owns unit-scoped mounts, devices, and secrets. Security owns the trust boundary they defend. Repair the rejected declaration and bind again. Do not edit generated units to bypass a refusal.