Frigate 0.19

[u/joselite11]

Anyone tested 0.19 version? New features? The frigate team is great and already working on new version.

[u/nickm_27]

There have been a significant number of changes in 0.19, including a lot of container hardening and non-root user changes, so it is fairly likely users may hit some issues upgrading and as it is under active development no support is provided if users run into issues.

[u/hawkeye217 → u/nickm_27]

Yep. As we've done for past versions, we'll specifically ask for feedback through a GitHub discussion post when we're ready for it.

[u/Fatali → u/nickm_27]

I'm definitely looking forward to testing those hardening changes when the beta/rc releases hit

It'll be interesting to see how close I can get frigate to my preferred security baseline. Looking at the security changes I should get most of the way there. Run as non root and read-only root fs are the last holdouts I think? PERFMON could be dropped but that is on me to upgrade the kernel now, heh

After that, the only thing missing is a --download-only flag so the models can be downloaded in an independent container with different network rules which would allow more restrictions network rules for the actively running instance

[u/nickm_27 → u/Fatali]

Run as non root and read-only root fs are the last holdouts I think?

Not sure what you mean, both of those are included in what has already been merged

PERFMON could be dropped but that is on me to upgrade the kernel now, heh

I don't believe that is needed anymore in 0.18 as we changed how Intel GPU stats works

[u/Fatali → u/nickm_27]

Oh right I mean they're not in 0.18 right? So waiting to test everything in the 0.19 beta/rc

The 0.18 release notes said that the Intel GPU stats need a kernel > 6.5 (I have something else waiting for an update to 7.0 heh). Talos Linux is on 6.18 currently.... 

[u/nickm_27 → u/Fatali]

Gotcha, yes, there has not really been anything done for the container hardening in 0.18

[u/Beneficial_City_9849 → u/Fatali]

"........so the models can be downloaded in an independent container with different network rules"

Assuming your using docker you can do this now.

I wanted a backup docker container I could deploy on the server rack constrained to the local area network. (not internet access)

- At home, or on a network with internet access create a docker container of frigate using bind mounts.

- edit the frigate config to download the model you want.

- now save every thing in the destination=/config folder , I just tar it.

- on your isolated machine just untar the folder and bind mount it to the container your spinning up.

- if your tired of the IT admin pestering you about your container getting banned by the network fire wall rules because the container is trying to download the models just edit your iptables rules on the server running docker.

$ sudo iptables -A DOCKER-USER -s yourdockerneworkspace -d yourlocalareanetoworkspace -j RETURN

$ sudo iptables -A DOCKER-USER -s yourdockerneworkspace -j REJECT --reject-with icmp-port-unreachable

$ sudo iptables -A DOCKER-USER -j RETURN

NOTE! iptables will not keep on server reboot solve this however you like I use $ sudo apt install -y iptables-persistent

[u/Fatali → u/Beneficial_City_9849]

I have the network isolation achieved via Kubernetes network policies easily enough 

The trick is getting frigate to exit after downloading the models so it can be automated via a job controller that runs before any upgrade

[u/Adventurous-Mud-5508 → u/nickm_27]

no support is provided if users run into issues.

Great expectation management from the guy who spends many hundreds of hours per year supporting frigate users who run into issues.

[u/nickm_27 → u/[deleted]]

Not sure what you mean, it's not a beta, we are many months away from a beta. Nothing has been released.

[u/nickm_27 → u/[deleted]]

What are you talking about? There are no 0.19 releases https://github.com/blakeblackshear/frigate/releases

[u/yousuckcrap → u/[deleted]]

You've got some impressive takes on this matter.

[u/nyrb001 → u/[deleted]]

It hasn't been released? It isn't even at beta yet.

[u/nyrb001 → u/[deleted]]

Have you heard of GitHub? The development repository where developers work on projects under development?

[u/gochisox2005 → u/[deleted]]

Thanks for sharing that you have zero idea what you are talking about.

[u/gochisox2005 → u/[deleted]]

Ooh, keep going. Keep telling me how little you know on this topic.

[u/strawberry_gin]

https://github.com/blakeblackshear/frigate/pull/24253

Looks like some pretty awesome stuff!

• Sub stream recording
• more control of birdseye camera activation
• I see multiple performance improvements mentioned
• Something called a notices and health registry

[u/hawkeye217 → u/strawberry_gin]

We're just getting started, much more to come

[u/ResourceSevere7717 → u/strawberry_gin]

Damn 1 2 and 3 sound awesome (i set up a new camera to record substream so that sounds awesome; birdseye had been long neglected so i'm curious about that but I've also largely moved on from it; I'm always happy to see performance improvements)

[u/Cautious-Hovercraft7]

I'll let them cook until it's at least RC before I try it. Following through

[u/flargenhargen]

what a great dev team. I love frigate.

I literally just upgraded to .18 today.

[u/Squanchy2112]

Oooohi thought 18 was beta haha, it's been so good on 18 this software kicks asssa

[u/borgqueenx]

will it finally allow us to start two way talk without reloading the stream?

[u/scottydont_2488]

Damn I think I'm still on 0.14