UniqAI/nvidia-container-toolkit
1
0
Fork 0
mirror of https://github.com/NVIDIA/nvidia-container-toolkit synced 2025-02-19 18:58:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'fix-centos7' into 'master'

Browse Source 
Upgrade NSS for critical CVE in centos7 image

See merge request nvidia/container-toolkit/container-toolkit!90
This commit is contained in:
Evan Lezar 2021-12-07 16:43:08 +00:00
commit 13603e9794
3 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.common-ci.yml
View File

@ -46,6 +46,7 @@ stages:
.dist-centos7: .dist-centos7:
variables: variables:
DIST: centos7 DIST: centos7
CVE_UPDATES: "nss"
.dist-centos8: .dist-centos8:
variables: variables:

7
build/container/Dockerfile.centos
View File

@ -75,4 +75,11 @@ LABEL description="See summary"
COPY ./LICENSE /licenses/LICENSE COPY ./LICENSE /licenses/LICENSE
# Install / upgrade packages here that are required to resolve CVEs
ARG CVE_UPDATES
RUN if [ -n "${CVE_UPDATES}" ]; then \
yum update -y ${CVE_UPDATES} && \
rm -rf /var/cache/yum/*; \
fi
ENTRYPOINT ["/work/nvidia-toolkit"] ENTRYPOINT ["/work/nvidia-toolkit"]

1
build/container/Makefile
View File

@ -75,6 +75,7 @@ $(BUILD_TARGETS): build-%: $(ARTIFACTS_ROOT)
--build-arg PACKAGE_VERSION="$(PACKAGE_VERSION)" \ --build-arg PACKAGE_VERSION="$(PACKAGE_VERSION)" \
--build-arg PACKAGE_ARCH="$(PACKAGE_ARCH)" \ --build-arg PACKAGE_ARCH="$(PACKAGE_ARCH)" \
--build-arg VERSION="$(VERSION)" \ --build-arg VERSION="$(VERSION)" \
--build-arg CVE_UPDATES="$(CVE_UPDATES)" \
-f $(DOCKERFILE) \ -f $(DOCKERFILE) \
$(CURDIR) $(CURDIR)