Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews
AI

How to host Llama 3 70B locally with Ollama and Open WebUI: a 2026 tutorial

Martynas VareikisBy Martynas VareikisMay 7, 2026Updated:May 7, 2026No Comments3 Mins Read1,407 Views
Share Facebook Twitter Pinterest LinkedIn Tumblr Email Copy Link
A desktop GPU tower with model weights flowing in and a green chat interface on a monitor
Share
Facebook Twitter LinkedIn Pinterest Email Copy Link

Running a capable LLM locally in 2026 is no longer a research project. The 70B-class open models, Llama 3 70B, Mistral Large, Qwen 2.5, match GPT-3.5 quality on most tasks, sometimes hit GPT-4 territory on specific ones, and run on a single consumer-grade workstation. For privacy-sensitive work, legal review, medical-record summarisation, malware analysis, security research, local AI is the right tool. This tutorial walks through the build end to end.

Step 1: Hardware

Llama 3 70B at 4-bit quantisation needs roughly 40 GB of memory. Three workable hardware paths:

Single GPU with enough VRAM, RTX 4090 (24 GB) won’t fit a 70B; RTX 5090 (32 GB) doesn’t either. You need an A6000 (48 GB, ~$4500 used) or two RTX 4090s in parallel.

Apple Silicon, M2 Ultra Mac Studio with 128 GB unified memory (~$5000) runs 70B at usable speeds (10-15 tokens/sec). M3 Max MacBook Pro with 128 GB also works for development. The unified memory architecture makes Apple unusually well-suited.

CPU + system RAM, slow but free if you have 64+ GB DDR5 already. Expect 2-4 tokens/sec, which is too slow for chat but fine for batch jobs.

For most readers the M2/M3 Ultra Mac Studio is the cleanest answer. For production-leaning setups, dual RTX 4090s with NVLink.

Step 2: Install Ollama

Ollama is the cleanest local-LLM runtime in 2026, it handles model downloads, quantisation, GPU acceleration, and serves a local API.

Mac/Linux: curl -fsSL https://ollama.com/install.sh | sh

Windows: download installer from ollama.com.

Pull the model:

// Free tool

How does your own site score?

Run the same forty passive checks against your own domain — TLS and certificates, security headers, SPF and DMARC, cookies before consent, and what your stack quietly reveals. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

ollama pull llama3.3:70b

That downloads ~40 GB. Test it:

ollama run llama3.3:70b "Explain prompt injection in two sentences."

Step 3: Install Open WebUI for a chat interface

Ollama on its own is a CLI/API. For a ChatGPT-like web UI, install Open WebUI. Cleanest way is Docker:

docker run -d -p 3000:8080 \
  --add-host=host.docker.internal:host-gateway \
  -v open-webui:/app/backend/data \
  --name open-webui --restart always \
  ghcr.io/open-webui/open-webui:main

Browse to http://localhost:3000, create the admin account (first user becomes admin), and you have a chat UI talking to your local Llama. Multi-user auth, conversation history, document upload for RAG, all included.

Step 4: Bind correctly so it doesn’t leak

By default Ollama binds to 127.0.0.1, which is correct. If you want to access it from another machine on your local network, set OLLAMA_HOST=0.0.0.0:11434, but only do that on a network you trust, ideally behind a firewall and a VLAN that doesn’t reach the internet.

Do not expose Ollama or Open WebUI to the public internet. They have no auth by default and any drive-by scanner finds them within hours.

Step 5: Alternative tooling worth knowing

LM Studio, desktop GUI for browsing and running local models, no command line. Easier for non-technical users.

Jan, open-source ChatGPT alternative that runs entirely locally, with a polished UI.

Hugging Face, the underlying model marketplace. If you want to verify weights against published hashes before downloading, hugging face is the source of truth.

Step 6: Use cases that justify the setup

Don’t run local AI for every prompt, cloud models are still better and cheaper for general use. Run local for:

  • Reviewing leaked datasets, malware samples, or anything sensitive that shouldn’t leave your perimeter
  • Privileged legal or medical document review where data residency is contractual
  • Bulk processing where you’d hit cloud rate limits or rack up significant API spend
  • Offline work, flights, conferences with hostile networks, sensitive client sites

For everything else, cloud is fine. The hybrid setup, Anthropic for general chat, local Llama for sensitive work, is what most practitioners actually run in 2026.

The Ransomnews Monthly

One email a month. Original leak-site data, victim census updates, and the findings that did not make the articles. No spam, unsubscribe any time.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Telegram Email Copy Link
Previous ArticleHow to red-team your own LLM app: tutorial with Garak, PyRIT, and Promptfoo
Next Article Build the 2026 privacy stack: Mullvad Browser, GPC, uBlock Origin, and SimpleLogin tutorial
Martynas Vareikis

Martynas Vareikis is the AI Editor at Ransomnews. He covers the intersection of artificial intelligence and information security — from machine-learning models in defensive tooling to the adversarial use of LLMs by ransomware operators, deepfake-driven social engineering, and the rise of agentic threats. His reporting focuses on translating fast-moving AI research into practical guidance for defenders, journalists, and the broader security community. Reach Martynas via [email protected].

Related Posts

“Delve” is dead: AI writing tells expire in 18 months

August 21, 2026

Best VirusTotal alternatives 2026: what threat hunters run

August 9, 2026

SOAR vs SIEM 2026: tune before you automate

August 6, 2026

Comments are closed.

// The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

// Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

// Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

// Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,520 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.