Initial commit: Hermes Agent Skills collection

2026-07-12 19:02:59 +00:00
commit e9cc106625
789 changed files with 233126 additions and 0 deletions
@@ -0,0 +1,85 @@
+# LXC GPU Device Bind Rules — Quick Reference
+
+## AMD ROCm (APU / dGPU)
+
+```conf
+# /etc/pve/lxc/NNN.conf additions
+lxc.cgroup2.devices.allow: c 226:* rwm
+lxc.cgroup2.devices.allow: c 511:0 rwm
+lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir
+lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
+lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
+lxc.mount.entry: /dev/kfd dev/kfd none bind,optional,create=file
+```
+
+Verify host devices before adding:
+```bash
+ls -la /dev/dri/ /dev/kfd
+```
+
+## NVIDIA CUDA
+
+```conf
+lxc.cgroup2.devices.allow: c 195:* rwm
+lxc.cgroup2.devices.allow: c 243:* rwm
+lxc.cgroup2.devices.allow: c 235:* rwm
+lxc.mount.entry: /dev/nvidia0 dev/nvidia0 none bind,optional,create=file
+lxc.mount.entry: /dev/nvidiactl dev/nvidiactl none bind,optional,create=file
+lxc.mount.entry: /dev/nvidia-uvm dev/nvidia-uvm none bind,optional,create=file
+lxc.mount.entry: /dev/nvidia-modeset dev/nvidia-modeset none bind,optional,create=file
+```
+
+## Intel Arc / OneAPI
+
+```conf
+lxc.cgroup2.devices.allow: c 226:* rwm
+lxc.cgroup2.devices.allow: c 10:122 rwm    # /dev/dri/renderD128 via misc major
+lxc.mount.entry: /dev/dri dev/dri none bind,optional,create=dir
+lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file
+```
+
+## Device Number Reference
+
+| Path | Major | Minor | Group |
+|------|-------|-------|-------|
+| `/dev/dri/card0` | 226 | 0 | video |
+| `/dev/dri/renderD128` | 226 | 128 | render |
+| `/dev/dri/renderD129` | 226 | 129 | render |
+| `/dev/kfd` | 511 | 0 | compute |
+| `/dev/nvidia0` | 195 | 0 | nvidia |
+| `/dev/nvidiactl` | 195 | 255 | nvidia |
+| `/dev/nvidia-uvm` | 243 | 0 | nvidia |
+
+## Dynamic Device Discovery Script
+
+Run on host to auto-generate LXC mount entries:
+
+```bash
+#!/bin/bash
+# generate_lxc_gpu_mounts.sh
+DEV_ALLOW=""
+MOUNTS=""
+
+# AMD kfd
+if [ -e /dev/kfd ]; then
+    DEV_ALLOW+="lxc.cgroup2.devices.allow: c 511:0 rwm\n"
+    MOUNTS+="lxc.mount.entry: /dev/kfd dev/kfd none bind,optional,create=file\n"
+fi
+
+# DRI devices
+for dev in /dev/dri/card* /dev/dri/renderD*; do
+    [ -e "$dev" ] || continue
+    MAJ=$(stat -c '%t' "$dev")
+    MIN=$(stat -c '%T' "$dev")
+    MAJ_DEC=$((16#$MAJ))
+    MIN_DEC=$((16#$MIN))
+    DEV_ALLOW+="lxc.cgroup2.devices.allow: c ${MAJ_DEC}:${MIN_DEC} rwm\n"
+    BASENAME=$(basename "$dev")
+    MOUNTS+="lxc.mount.entry: $dev dev/dri/$BASENAME none bind,optional,create=file\n"
+done
+
+echo "# Device allow rules:"
+echo -e "$DEV_ALLOW"
+echo "# Mount entries:"
+echo -e "$MOUNTS"
+```