Operations¶
Review the known issues for this version, protect your state and diagnose problems without exposing credentials or customer data.
4. Protect state and plan upgrades¶
Application state is under /var/lib/whisper-cpu; server configuration and private identity are under /etc/whisper-cpu. Preserve those together with /home/ubuntu/.config/sushi/whisper-cpu and any customer input/output directories. Treat backups containing credentials, documents, audio, metrics or repositories as private data. A single local EBS volume is not a redundant service or a backup.
For a consistent backup, finish active requests, stop the owning services below and take an encrypted EBS snapshot or protected file backup using your approved procedure. Preserve ownership and permissions. Start the same services afterwards and verify readback. Test restoration on a separate instance before replacing the original.
sudo systemctl stop sushi-whisper-cpu-api.service
# Take and verify your protected backup while the services are stopped.
sudo systemctl start sushi-whisper-cpu-api.service
A new Marketplace version does not update an existing instance. Launch the replacement separately, check state-format compatibility, restore only required customer state and verify your own read/write workflow before cutover. Keep a protected backup until the replacement is confirmed. Never erase a server identity as a routine upgrade step.
The generated self-signed TLS certificate expires after 365 days. Arrange an operator-reviewed certificate replacement before expiry, updating the client trust from the authenticated instance. Public DNS and certificate renewal automation are not included.
5. Diagnose a problem¶
sudo systemctl show sushi-whisper-cpu-api.service -p ActiveState -p SubState -p NRestarts
sudo journalctl -u sushi-whisper-cpu-api.service --no-pager -n 50
Inspect logs privately. Before sharing a support case, remove credentials, private hostnames and all customer content; include the Marketplace version, failing operation and a small invented reproduction. For connection errors, verify the correct Region/instance, Session Manager permissions, network endpoints and the active forwarding session. For input errors, check the package limits and request schema first. Do not install arbitrary replacement packages or delete customer state to force a retry.
Use the Software Sushi support contact and terms on the purchased Marketplace offer. faster-whisper source and usage explains the upstream project; it is not a support commitment from that project for this package.
6. Maintenance and known issues — versions 0.1.8 to 0.1.10¶
Version 0.1.10 has not passed Software Sushi’s full security qualification; neither have 0.1.8 and 0.1.9. Complete unfiltered scans for 0.1.10 were collected on 17 October 2026 at 22:36 UTC with Grype 0.119.0. No ignore rule or suppression was added. The retained 0.1.8 and 0.1.9 scans have the same High/Critical counts.
- Complete host inventory: 681 High and 104 Critical raw matches. The kernel accounts for 680 High and 104 Critical; the remaining High match is FFmpeg. Three further matches have Unknown severity.
- Native media inventory: one High match for FFmpeg 9.0.2, CVE-2026-107696, concerning an RTSP redirect loop. The frozen media build disables network support and selects only WAV/FLAC/MP3 file demuxers. This configuration does not constitute a formally qualified “not affected” decision; the finding remains reported.
- Python runtime inventory: zero High or Critical raw matches in that inventory. This does not establish a clean host or complete compiled-component coverage.
These are raw package/advisory matches, not distinct CVE counts. A finding can occur in more than one inventory. Complete compiled-component coverage remains unverified; the retained FFmpeg package inventory is not proof of every component linked into every runtime library.
Review these unresolved findings against your deployment policy. Plan operating-system maintenance and test replacement Marketplace versions before cutover. Updating Ubuntu packages does not rebuild this package’s custom media libraries. Source, build material, licence notices and replacement instructions remain under /usr/share/doc/whisper-cpu and /opt/whisper-cpu. Keep protected backups and verify your own workflow after an upgrade.
Package 0.1.10 includes the customer launch, access and hands-on instructions under /opt/sushi/docs/README.md and /opt/sushi/docs/DEMO.md. On a fresh instance, its HTTPS API was checked with English and Spanish recordings. The installed SDK transcribed WAV, FLAC and MP3 files passed by filename. A separate local SDK batch passed a WAV file of more than five minutes of natural English speech directly by filename. These functional checks do not clear security findings or guarantee accuracy for other recordings. Versions 0.1.8 and 0.1.9 keep the filename limitation described in Getting started.
Transcription requires human review. Accuracy varies by recording, accent and background noise; inspect important names, numbers and intended actions against the audio. A successful API request and valid timestamps do not guarantee correct wording.
Last updated October 17, 2026 · Suggest an improvement