[Feature Request]: Docker Image?

[jason-e-gross]

Is there an existing issue for this?

• I have searched the existing issues and checked the recent builds/commits

What would your feature do?

Any chance we can get a docker image like the original author for Fooocus had? I really don't want to litter up my machine with bare-metal changes, if I can help it.

original docker

[DavidDragonsage]

I am not the Linux specialist on our development team, so I cannot address this issue fully. However, FooocusPlus started with a very insecure generative AI implementation and Docker was cut out very early in the development process when we were attempting to lock down all the blatant security holes. While Docker was the least of the worries, the fact that we started with an untrusted source meant that we could not rely on its implementation to be reasonably secure.

We may at some point restore Docker support but there are many other priorities to deal with first.

For short backgrounder on our security concerns, please see the FooocusPlus Wiki article,
https://github.com/DavidDragonsage/FooocusPlus/wiki/Security-&-Networking

[Brensom]

I understand the security concerns that led you to drop Docker, but for Linux users a Docker image is not a “nice-to-have” – it is the only realistic way to run FooocusPlus at all.

1. Native Linux install is broken by design

   • Issue [Bug]: Linux installation instruction problems #266 shows that the official script has been unusable for three months.
   • The Hugging-Face URLs are wrong, the 7-zip commands reference non-existent files, the venv is never created, and half the Python dependencies are missing.
   • Even after hand-fixing the script, Gradio fails to start because gradio_client is absent and the package resolver spirals into conflicts.
     In practice, nobody on a clean Ubuntu 22.04/24.04 can get the program to launch.

2. Docker is the de-facto Linux package manager for AI projects
   Stable Diffusion, ComfyUI, InvokeAI, Automatic1111, OobaBooga, FaceFusion – every major generative-AI repo ships a Dockerfile or a ready-made image.
   Users expect a one-liner:

   docker run --gpus all -p 7860:7860 davidragonsage/fooocusplus:latest

   and they will not even try a project that forces them to chase missing .bat files on Linux.

3. “Insecure” is still better than “impossible”
   Yes, a container running as root with GPU passthrough is not NSA-grade security.
   But the host filesystem can be mounted read-only, the container can be dropped into an unprivileged namespace, and the user can decide whether to expose any port at all.
   A working but slightly risky image is infinitely more valuable than a “secure” installation guide that does not install anything.

4. Maintenance cost is tiny

   • Take the working Windows bundle, copy core/ and UserDir/ into an Ubuntu 22.04 base image.
   • Install the exact CUDA/Python versions you already document.
   • Add a 5-line entrypoint script that calls python entry_with_update.py --listen 0.0.0.0.
   • Push to Docker Hub or GHCR from a GitHub Action on every release tag.
     The total CI YAML is <30 lines; the Dockerfile <40 lines. Once it exists the community will happily PR improvements.

5. Refusing Docker does not make the security problems disappear
   Users who really want to run FooocusPlus on Linux will simply:

   • fork the repo,
   • write their own Dockerfile in 15 minutes,
   • publish an unofficial image that you do not control.
     The security surface is still there, but now you have zero visibility and zero update path.

Please reconsider: ship an official, clearly labelled “experimental” Docker image.
Mark it “use at your own risk”, pin the issue, lock the comments if you must – but give Linux users something that actually starts.
The current situation is not “security first”, it is “Linux users last”, and that is unsustainable for an open-source project.

Thank you for your time and for the otherwise great work you are doing with FooocusPlus.

[DavidDragonsage]

@Brensom Thank you for your clearly conveyed concerns. Unfortunately I cannot help with this one way or the other. It will need to wait until @iwr-redmond is available again to work on the Linux side of things and at this point I do not know when that will be. I share your frustrations but I also know that Mr. Redmond would not be absent without good reason. He has also put his heart and soul into this project and I likely would not have started it without his guidance and encouragement.

I am the primary coder and I am reasonably sure that the code itself is Linux compatible - I have put many hours into that. However actually installing the Linux version is not something I can test or improve.

[DavidDragonsage]

@Brensom If you are willing, let's start with the basics. As far as I know, if there are that many problems as you described in (1) above, there is not much point in going ahead with Docker support.

You said that "Native Linux install is broken by design", but obviously that is not the case, it was not designed to be broken and it must have functioned at some point. For example, I do not understand how the script cannot find FooocusPlus_Linux.7z when I can see it sitting there online. Please join me on #266 and lets see what we can do.