Skip to content
Draft
Show file tree
Hide file tree
Changes from 11 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
94 changes: 49 additions & 45 deletions metro-ai-suite/metro-vision-ai-app-recipe/compose-scenescape.yml
Original file line number Diff line number Diff line change
Expand Up @@ -167,9 +167,9 @@ services:
devices:
- "/dev/dri:/dev/dri"
device_cgroup_rules:
- 'c 189:* rmw'
- 'c 209:* rmw'
- 'a 189:* rwm'
- "c 189:* rmw"
- "c 209:* rmw"
- "a 189:* rwm"
group_add:
- "109"
- "110"
Expand Down Expand Up @@ -208,67 +208,46 @@ services:
restart: on-failure:5

pgserver:
image: docker.io/intel/scenescape-manager:v1.4.0
init: true
image: postgres:17.6
env_file:
- ./${SAMPLE_APP}/src/secrets/pgserver/pgserver.env
networks:
- scenescape
environment:
- "DBROOT=/workspace"
- "EXAMPLEDB=smart-intersection-ri.tar.bz2"
- http_proxy=${http_proxy}
- https_proxy=${https_proxy}
- no_proxy=${no_proxy},.scenescape.intel.com,influxdb2
- NO_PROXY=${no_proxy},.scenescape.intel.com,influxdb2
- HTTP_PROXY=${http_proxy}
- HTTPS_PROXY=${https_proxy}
entrypoint: [
"/bin/bash",
"-e",
"-c",
"cp /tmp/user_access_config.json /home/scenescape/SceneScape/user_access_config.json && \
cp /tmp/smart-intersection-ri.tar.bz2 /home/scenescape/SceneScape/smart-intersection-ri.tar.bz2 && \
chown -R scenescape:scenescape /workspace && \
SUPASS=$(cat /run/secrets/supass) /usr/local/bin/scenescape-init database --preloadexample",
]
cap_add:
- SYS_ADMIN
devices:
- /dev/fuse
security_opt:
- apparmor:unconfined
POSTGRES_USER: scenescape
POSTGRES_DB: scenescape
volumes:
- pgserver-db:/workspace/db
- pgserver-migrations:/workspace/migrations
- pgserver-media:/workspace/media
- ./${SAMPLE_APP}/src/webserver/user_access_config.json:/tmp/user_access_config.json
- ./${SAMPLE_APP}/src/webserver/smart-intersection-ri.tar.bz2:/tmp/smart-intersection-ri.tar.bz2
secrets:
- django
- browser.auth
- controller.auth
- supass
restart: on-failure:5
- pgserver-db:/var/lib/postgresql/data
ports:
- "5432:5432"

web:
image: docker.io/intel/scenescape-manager:v1.4.0
image: ghcr.io/open-edge-platform/edge-ai-libraries/intel/scenescape-manager:2025.2-rc2
init: true
networks:
scenescape:
aliases:
- web.scenescape.intel.com
depends_on:
- pgserver
pgserver:
condition: service_started
broker:
condition: service_started
environment:
- "DBROOT=/workspace"
- http_proxy=${http_proxy}
- https_proxy=${https_proxy}
- no_proxy=${no_proxy},.scenescape.intel.com,influxdb2
- NO_PROXY=${no_proxy},.scenescape.intel.com,influxdb2
- HTTP_PROXY=${http_proxy}
- HTTPS_PROXY=${https_proxy}
- SUPASS
Copy link
Contributor

@jakubsikorski jakubsikorski Nov 20, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- SUPASS
- SUPASS=${SUPASS}

The creation of this environment variable either needs to be moved to install script where .env file gets populated with this value or documentation needs to be updated saying user needs to export supass with a value.

I believe the creation of /src/secrets/supass is no longer necessary as this file is no longer supplied as a secret anywhere.
Previously it was supplied as a secret to manager and the createDB init was run with the value being read from the file

SUPASS=$(cat /run/secrets/supass) /usr/local/bin/scenescape-init database --preloadexample

but this is not the case anymore of how it's done

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will fix when migrating to rc3

- EXAMPLEDB=/home/scenescape/SceneScape/smart-intersection-ri.tar.bz2
- DJANGO_DEBUG=True
command: >
webserver
--dbhost pgserver
--dbtype postgres
--dbport 5432
--broker broker.scenescape.intel.com
--brokerauth /run/secrets/browser.auth
--brokerrootcert /run/secrets/certs/scenescape-ca.pem
Expand All @@ -286,6 +265,10 @@ services:
- apparmor:unconfined
volumes:
- pgserver-media:/workspace/media
- pgserver-migrations:/workspace/migrations
- sample-data:/home/scenescape/SceneScape/sample_data
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Inspecting this volume - it's empty. I'm not sure this is needed

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will fix when migrating to rc3

- ./${SAMPLE_APP}/src/webserver/user_access_config.json:/home/scenescape/SceneScape/user_access_config.json
- ./${SAMPLE_APP}/src/webserver/smart-intersection-ri.tar.bz2:/home/scenescape/SceneScape/smart-intersection-ri.tar.bz2
secrets:
- source: root-cert
target: certs/scenescape-ca.pem
Expand All @@ -299,7 +282,7 @@ services:
restart: on-failure:5

scene:
image: docker.io/intel/scenescape-controller:v1.4.0
image: ghcr.io/open-edge-platform/edge-ai-libraries/intel/scenescape-controller:2025.2-rc2
init: true
environment:
- http_proxy=${http_proxy}
Expand All @@ -308,19 +291,31 @@ services:
- NO_PROXY=${no_proxy},.scenescape.intel.com,influxdb2
- HTTP_PROXY=${http_proxy}
- HTTPS_PROXY=${https_proxy}
- CONTROLLER_ENABLE_METRICS
- CONTROLLER_METRICS_ENDPOINT
- CONTROLLER_METRICS_EXPORT_INTERVAL_S
- CONTROLLER_ENABLE_TRACING
- CONTROLLER_TRACING_ENDPOINT
- CONTROLLER_TRACING_SAMPLE_RATIO
networks:
scenescape:
configs:
- source: tracker-config
target: /home/scenescape/SceneScape/tracker-config.json
depends_on:
web:
condition: service_healthy
broker:
condition: service_started
ntpserver:
condition: service_started
command: controller --broker broker.scenescape.intel.com --ntp ntpserv
command: >
--restauth /run/secrets/controller.auth
--brokerauth /run/secrets/controller.auth
--broker broker.scenescape.intel.com
--ntp ntpserv
volumes:
- pgserver-media:/home/scenescape/SceneScape/media
- ./${SAMPLE_APP}/src/controller/tracker-config.json:/home/scenescape/SceneScape/tracker-config.json
secrets:
- source: root-cert
target: certs/scenescape-ca.pem
Expand Down Expand Up @@ -381,6 +376,14 @@ secrets:
supass:
file: ./${SAMPLE_APP}/src/secrets/supass

configs:
mosquitto-secure:
file: ./${SAMPLE_APP}/src/mosquitto/mosquitto-secure.conf
tracker-config:
# Use this configuration file to run tracking with time-chunking enabled
# file: ./controller/config/tracker-config-time-chunking.json
file: ./${SAMPLE_APP}/src/controller/tracker-config.json

volumes:
dlstreamer-pipeline-server-pipeline-root:
driver: local
Expand All @@ -398,3 +401,4 @@ volumes:
pgserver-db:
pgserver-migrations:
pgserver-media:
sample-data:
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
src/secrets/ca
src/secrets/certs
src/secrets/django
src/secrets/pgserver
src/secrets/influxdb2
src/secrets/*.auth
src/secrets/*.token
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,5 +2,7 @@
"max_unreliable_frames": 10,
"non_measurement_frames_dynamic": 8,
"non_measurement_frames_static": 16,
"baseline_frame_rate": 30
}
"baseline_frame_rate": 30,
"time_chunking_enabled": false,
"time_chunking_interval_milliseconds": 50
}
Loading
Loading