kami
b129935995
Mapping /dev/dri alone wasn't enough — the container runs as unprivileged uid 10001, and renderD128 is root:render (mode crw-rw----). Without membership in the host render gid, Vulkan enumerates zero devices and whisper silently falls back to CPU. Added group_add 993 (host 'render'); whisper now loads on RADV RENOIR (AMD Radeon).