Permission denied writing to disc
Some phoenix containers run as nonroot and therefore must be granted explicit write permissions to the mounted disc (see https://kubernetes.io/docs/tasks/configure-pod-container/security-context/). Phoenix 4.1.3 and above run as root by default to avoid this. However there aredebug and nonroot variants of the image as well.
How do I configure Phoenix for air-gapped deployments?
How do I configure Phoenix for air-gapped deployments?
Set Environment Variable:
PHOENIX_ALLOW_EXTERNAL_RESOURCES to false so Phoenix makes no public-internet requests of its own. This turns off Google Fonts, telemetry, PXI’s documentation lookups and web and GitHub access, the WebAssembly sandbox runtime download, and the web interface’s GitHub star count and update check. Without it, blocked requests can delay UI loading by 10-20 seconds. Services you configure yourself, such as LLM providers and hosted sandboxes, aren’t affected. To use the WebAssembly sandbox offline, set PHOENIX_WASM_BINARY_PATH to a local copy of the runtime.Docker Example:The
PHOENIX_ALLOW_EXTERNAL_RESOURCES environment variable was added in Phoenix version 11.15.0. It defaults to true and only needs to be set to false in air-gapped deployments where external network access is not available.How do I configure automatic trace retention and cleanup?
How do I configure automatic trace retention and cleanup?
Phoenix supports automatic trace retention policies to help manage storage and comply with data retention requirements. You can configure the default retention policy at deployment time using the Docker Example:Kubernetes/Helm Example:Key Points:
PHOENIX_DEFAULT_RETENTION_POLICY_DAYS environment variable.Basic Configuration:Set the environment variable to the number of days you want to retain traces:- Default value is 0 (infinite retention) - no traces are automatically deleted
- Applies to all projects by default, but individual projects can override this through the Phoenix UI
- Cleanup runs weekly according to the configured schedule (Sunday at midnight by default)
- Only affects the default policy - you can still create custom retention policies for specific projects
- Changes to this setting will update the default policy but won’t affect existing project-specific policies

