Open WebUI on Incus (images:debian/bookworm/cloud)

minerva.yaml

architecture: x86_64
config:
  cloud-init.user-data: |
    #cloud-config
    package_upgrade: true
    packages:
      - apt-transport-https
      - ca-certificates
      - curl
    write_files:
      - path: /setup/install-application.sh
        permissions: '0744'
        owner: root
        content: |
          #!/usr/bin/env bash
          set -euxo pipefail
          export HOME="/root"
          export UV_UNMANAGED_INSTALL="/usr/local/bin"
          curl -LsSf https://astral.sh/uv/install.sh | sh
          systemctl daemon-reload
          systemctl enable open-webui
          systemctl start open-webui
      - path: /etc/systemd/system/open-webui.service
        permissions: '0755'
        owner: root
        content: |
          [Unit]
          Description=Open WebUI
          [Service]
          Type=exec
          Restart=always
          WorkingDirectory=/media/open-webui
          User=root
          Group=root
          Environment=DATA_DIR=/media/open-webui
          ExecStart=/usr/local/bin/uvx --python 3.11 open-webui@latest serve --port 80
          AmbientCapabilities=CAP_NET_BIND_SERVICE
          [Install]
          WantedBy=multi-user.target
    runcmd:
      - /setup/install-application.sh
  image.architecture: amd64
  image.description: Debian bookworm amd64 (20250206_05:24)
  image.os: Debian
  image.release: bookworm
  image.serial: "20250206_05:24"
  image.type: squashfs
  image.variant: cloud
  volatile.base_image: df23835284b2b17892874b182bbde0b6707885fa775bdfda6393baf306421eb4
  volatile.cloud-init.instance-id: 7df965e8-cedf-447c-b650-2515c0de00d5
  volatile.eth0.host_name: veth968d4263
  volatile.eth0.hwaddr: 00:16:3e:b5:4c:b6
  volatile.idmap.base: "0"
  volatile.idmap.current: '[{"Isuid":true,"Isgid":false,"Hostid":1000000,"Nsid":0,"Maprange":1000000000},{"Isuid":false,"Isgid":true,"Hostid":1000000,"Nsid":0,"Maprange":1000000000}]'
  volatile.last_state.power: RUNNING
  volatile.last_state.ready: "false"
  volatile.network-primary.host_name: enp65s0f0v3
  volatile.network-primary.hwaddr: 00:16:3e:a2:79:4a
  volatile.network-primary.last_state.created: "false"
  volatile.network-primary.last_state.hwaddr: d6:ff:bd:71:f1:db
  volatile.network-primary.last_state.mtu: "1500"
  volatile.network-primary.last_state.vf.hwaddr: "00:00:00:00:00:00"
  volatile.network-primary.last_state.vf.id: "3"
  volatile.network-primary.last_state.vf.parent: enp65s0f0np0
  volatile.network-primary.last_state.vf.spoofcheck: "false"
  volatile.network-primary.last_state.vf.vlan: "0"
  volatile.network-primary.name: eth1
  volatile.network-sanctuary.host_name: enp65s0f1v3
  volatile.network-sanctuary.hwaddr: 00:16:3e:94:99:35
  volatile.network-sanctuary.last_state.created: "false"
  volatile.network-sanctuary.last_state.hwaddr: ba:8e:70:f6:13:ce
  volatile.network-sanctuary.last_state.mtu: "1500"
  volatile.network-sanctuary.last_state.vf.hwaddr: "00:00:00:00:00:00"
  volatile.network-sanctuary.last_state.vf.id: "3"
  volatile.network-sanctuary.last_state.vf.parent: enp65s0f1np1
  volatile.network-sanctuary.last_state.vf.spoofcheck: "false"
  volatile.network-sanctuary.last_state.vf.vlan: "0"
  volatile.network-sanctuary.name: eth2
  volatile.uuid: ad377a43-4c21-495a-9129-5f2fc6d56ac7
  volatile.uuid.generation: ad377a43-4c21-495a-9129-5f2fc6d56ac7
devices:
  disk-open-webui:
    path: /media/open-webui
    pool: hercules
    source: minerva-open-webui
    type: disk
  root:
    path: /
    pool: hercules
    size: 64GiB
    type: disk
ephemeral: false
profiles:
- default
- infrastructure-network-cpu0
stateful: false
description: ""