From 652345bc4d42eb6021853fe19d8dbf3c964bc446 Mon Sep 17 00:00:00 2001 From: Evan Lezar Date: Wed, 7 Jun 2023 13:15:50 +0200 Subject: [PATCH] Add nvidia-container-runtime as folder Signed-off-by: Evan Lezar --- third_party/nvidia-container-runtime | 1 - .../nvidia-container-runtime/.dockerignore | 6 + .../nvidia-container-runtime/.gitattributes | 1 + .../nvidia-container-runtime/.gitignore | 6 + .../nvidia-container-runtime/.gitlab-ci.yml | 96 +++++++++ .../nvidia-container-runtime/CONTRIBUTING.md | 60 ++++++ .../nvidia-container-runtime/Jenkinsfile | 110 ++++++++++ third_party/nvidia-container-runtime/LICENSE | 202 ++++++++++++++++++ third_party/nvidia-container-runtime/Makefile | 41 ++++ .../nvidia-container-runtime/README.md | 196 +++++++++++++++++ .../debian/changelog.old | 84 ++++++++ .../nvidia-container-runtime/debian/compat | 1 + .../nvidia-container-runtime/debian/control | 16 ++ .../nvidia-container-runtime/debian/copyright | 185 ++++++++++++++++ ...nvidia-container-runtime.lintian-overrides | 3 + .../nvidia-container-runtime/debian/prepare | 5 + .../nvidia-container-runtime/debian/rules | 7 + .../docker/Dockerfile.deb | 45 ++++ .../docker/Dockerfile.rpm | 36 ++++ .../nvidia-container-runtime/docker/docker.mk | 77 +++++++ .../rpm/SOURCES/LICENSE | 190 ++++++++++++++++ .../rpm/SPECS/nvidia-container-runtime.spec | 36 ++++ .../rpm/changelog.old | 46 ++++ 23 files changed, 1449 insertions(+), 1 deletion(-) delete mode 160000 third_party/nvidia-container-runtime create mode 100644 third_party/nvidia-container-runtime/.dockerignore create mode 100644 third_party/nvidia-container-runtime/.gitattributes create mode 100644 third_party/nvidia-container-runtime/.gitignore create mode 100644 third_party/nvidia-container-runtime/.gitlab-ci.yml create mode 100644 third_party/nvidia-container-runtime/CONTRIBUTING.md create mode 100644 third_party/nvidia-container-runtime/Jenkinsfile create mode 100644 third_party/nvidia-container-runtime/LICENSE create mode 100644 third_party/nvidia-container-runtime/Makefile create mode 100644 third_party/nvidia-container-runtime/README.md create mode 100644 third_party/nvidia-container-runtime/debian/changelog.old create mode 100644 third_party/nvidia-container-runtime/debian/compat create mode 100644 third_party/nvidia-container-runtime/debian/control create mode 100644 third_party/nvidia-container-runtime/debian/copyright create mode 100644 third_party/nvidia-container-runtime/debian/nvidia-container-runtime.lintian-overrides create mode 100755 third_party/nvidia-container-runtime/debian/prepare create mode 100755 third_party/nvidia-container-runtime/debian/rules create mode 100644 third_party/nvidia-container-runtime/docker/Dockerfile.deb create mode 100644 third_party/nvidia-container-runtime/docker/Dockerfile.rpm create mode 100644 third_party/nvidia-container-runtime/docker/docker.mk create mode 100644 third_party/nvidia-container-runtime/rpm/SOURCES/LICENSE create mode 100644 third_party/nvidia-container-runtime/rpm/SPECS/nvidia-container-runtime.spec create mode 100644 third_party/nvidia-container-runtime/rpm/changelog.old diff --git a/third_party/nvidia-container-runtime b/third_party/nvidia-container-runtime deleted file mode 160000 index 6f328ae6..00000000 --- a/third_party/nvidia-container-runtime +++ /dev/null @@ -1 +0,0 @@ -Subproject commit 6f328ae638853b5b295deabfa08becc74f7273ef diff --git a/third_party/nvidia-container-runtime/.dockerignore b/third_party/nvidia-container-runtime/.dockerignore new file mode 100644 index 00000000..660738be --- /dev/null +++ b/third_party/nvidia-container-runtime/.dockerignore @@ -0,0 +1,6 @@ +dist +testing +.git +test/output +/nvidia-container-runtime +/runc diff --git a/third_party/nvidia-container-runtime/.gitattributes b/third_party/nvidia-container-runtime/.gitattributes new file mode 100644 index 00000000..3cf0ffd6 --- /dev/null +++ b/third_party/nvidia-container-runtime/.gitattributes @@ -0,0 +1 @@ +testing/* linguist-vendored=true diff --git a/third_party/nvidia-container-runtime/.gitignore b/third_party/nvidia-container-runtime/.gitignore new file mode 100644 index 00000000..5001ca5c --- /dev/null +++ b/third_party/nvidia-container-runtime/.gitignore @@ -0,0 +1,6 @@ +dist +*.swp +*.swo +test/output +/runc +/nvidia-container-runtime diff --git a/third_party/nvidia-container-runtime/.gitlab-ci.yml b/third_party/nvidia-container-runtime/.gitlab-ci.yml new file mode 100644 index 00000000..34ffc491 --- /dev/null +++ b/third_party/nvidia-container-runtime/.gitlab-ci.yml @@ -0,0 +1,96 @@ +# Copyright (c) 2020-2022, NVIDIA CORPORATION. All rights reserved. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +default: + image: docker + services: + - name: docker:dind + command: ["--experimental"] + +variables: + # We specify the LIB_VERSION, TOOLKIT_VERSION, and TOOLKIT_TAG variable to allow packages + # to be built. + LIB_VERSION: 999.999.999 + LIB_TAG: dummy+lib + TOOLKIT_VERSION: 999.999.999 + TOOLKIT_TAG: dummy+toolkit + +# Build packages for all supported OS / ARCH combinations +stages: + - trigger + - build + +.pipeline-trigger-rules: + rules: + # We trigger the pipeline if started manually + - if: $CI_PIPELINE_SOURCE == "web" + # We trigger the pipeline on the main branch + - if: $CI_COMMIT_BRANCH == "main" + # We trigger the pipeline on the release- branches + - if: $CI_COMMIT_BRANCH =~ /^release-.*$/ + # We trigger the pipeline on tags + - if: $CI_COMMIT_TAG && $CI_COMMIT_TAG != "" + +workflow: + rules: + # We trigger the pipeline on a merge request + - if: $CI_PIPELINE_SOURCE == 'merge_request_event' + # We then add all the regular triggers + - !reference [.pipeline-trigger-rules, rules] + +# The main or manual job is used to filter out distributions or architectures that are not required on +# every build. +.main-or-manual: + rules: + - !reference [.pipeline-trigger-rules, rules] + - if: $CI_PIPELINE_SOURCE == "schedule" + when: manual + +# The trigger-pipeline job adds a manualy triggered job to the pipeline on merge requests. +trigger-pipeline: + stage: trigger + script: + - echo "starting pipeline" + rules: + - !reference [.main-or-manual, rules] + - if: $CI_PIPELINE_SOURCE == "merge_request_event" + when: manual + allow_failure: false + - when: always + +.build-setup: + stage: build + variables: + ARTIFACTS_NAME: "${CI_PROJECT_NAME}-${CI_COMMIT_REF_SLUG}-${CI_JOB_NAME}-artifacts-${CI_PIPELINE_ID}" + ARTIFACTS_DIR: "${CI_PROJECT_NAME}-${CI_COMMIT_REF_SLUG}-artifacts-${CI_PIPELINE_ID}" + DIST_DIR: "${CI_PROJECT_DIR}/${ARTIFACTS_DIR}" + + artifacts: + name: ${ARTIFACTS_NAME} + paths: + - ${ARTIFACTS_DIR} + + before_script: + - apk update + - apk upgrade + - apk add coreutils build-base sed git bash make + +build: + extends: + - .build-setup + parallel: + matrix: + - PACKAGING: [deb, rpm] + script: + - make ${PACKAGING} diff --git a/third_party/nvidia-container-runtime/CONTRIBUTING.md b/third_party/nvidia-container-runtime/CONTRIBUTING.md new file mode 100644 index 00000000..3bcaaabb --- /dev/null +++ b/third_party/nvidia-container-runtime/CONTRIBUTING.md @@ -0,0 +1,60 @@ +# Contribute to the NVIDIA Container Toolkit + +Want to hack on the NVIDIA Container Toolkit Project? Awesome! +We only require you to sign your work, the below section describes this! + +## Sign your work + +The sign-off is a simple line at the end of the explanation for the patch. Your +signature certifies that you wrote the patch or otherwise have the right to pass +it on as an open-source patch. The rules are pretty simple: if you can certify +the below (from [developercertificate.org](http://developercertificate.org/)): + +``` +Developer Certificate of Origin +Version 1.1 + +Copyright (C) 2004, 2006 The Linux Foundation and its contributors. +1 Letterman Drive +Suite D4700 +San Francisco, CA, 94129 + +Everyone is permitted to copy and distribute verbatim copies of this +license document, but changing it is not allowed. + +Developer's Certificate of Origin 1.1 + +By making a contribution to this project, I certify that: + +(a) The contribution was created in whole or in part by me and I + have the right to submit it under the open source license + indicated in the file; or + +(b) The contribution is based upon previous work that, to the best + of my knowledge, is covered under an appropriate open source + license and I have the right under that license to submit that + work with modifications, whether created in whole or in part + by me, under the same open source license (unless I am + permitted to submit under a different license), as indicated + in the file; or + +(c) The contribution was provided directly to me by some other + person who certified (a), (b) or (c) and I have not modified + it. + +(d) I understand and agree that this project and the contribution + are public and that a record of the contribution (including all + personal information I submit with it, including my sign-off) is + maintained indefinitely and may be redistributed consistent with + this project or the open source license(s) involved. +``` + +Then you just add a line to every git commit message: + + Signed-off-by: Joe Smith + +Use your real name (sorry, no pseudonyms or anonymous contributions.) + +If you set your `user.name` and `user.email` git configs, you can sign your +commit automatically with `git commit -s`. + diff --git a/third_party/nvidia-container-runtime/Jenkinsfile b/third_party/nvidia-container-runtime/Jenkinsfile new file mode 100644 index 00000000..257f03cb --- /dev/null +++ b/third_party/nvidia-container-runtime/Jenkinsfile @@ -0,0 +1,110 @@ +/* +# Copyright (c) 2021, NVIDIA CORPORATION. All rights reserved. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +*/ + +podTemplate (cloud:'sw-gpu-cloudnative', + containers: [ + containerTemplate(name: 'docker', image: 'docker:dind', ttyEnabled: true, privileged: true) + ]) { + node(POD_LABEL) { + def scmInfo + + stage('checkout') { + scmInfo = checkout(scm) + } + + stage('dependencies') { + container('docker') { + sh 'apk add --no-cache make bash git' + } + } + stage('check') { + } + stage('test') { + } + + def versionInfo + stage('version') { + container('docker') { + versionInfo = getVersionInfo(scmInfo) + println "versionInfo=${versionInfo}" + } + } + + def dist = 'ubuntu20.04' + def arch = 'amd64' + def stageLabel = "${dist}-${arch}" + + stage('build-one') { + container('docker') { + stage (stageLabel) { + sh "make ${dist}-${arch}" + } + } + } + + stage('release') { + container('docker') { + stage (stageLabel) { + + def component = 'main' + def repository = 'sw-gpu-cloudnative-debian-local/pool/main/' + + def uploadSpec = """{ + "files": + [ { + "pattern": "./dist/${dist}/${arch}/*.deb", + "target": "${repository}", + "props": "deb.distribution=${dist};deb.component=${component};deb.architecture=${arch}" + } + ] + }""" + + sh "echo starting release with versionInfo=${versionInfo}" + if (versionInfo.isTag) { + // upload to artifactory repository + def server = Artifactory.server 'sw-gpu-artifactory' + server.upload spec: uploadSpec + } else { + sh "echo skipping release for non-tagged build" + } + } + } + } + } +} + +// getVersionInfo returns a hash of version info +def getVersionInfo(def scmInfo) { + def versionInfo = [ + isTag: isTag(scmInfo.GIT_BRANCH) + ] + + scmInfo.each { k, v -> versionInfo[k] = v } + return versionInfo +} + +def isTag(def branch) { + if (!branch.startsWith('v')) { + return false + } + + def version = shOutput('git describe --all --exact-match --always') + return version == "tags/${branch}" +} + +def shOuptut(def script) { + return sh(script: script, returnStdout: true).trim() +} diff --git a/third_party/nvidia-container-runtime/LICENSE b/third_party/nvidia-container-runtime/LICENSE new file mode 100644 index 00000000..d6456956 --- /dev/null +++ b/third_party/nvidia-container-runtime/LICENSE @@ -0,0 +1,202 @@ + + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright [yyyy] [name of copyright owner] + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/third_party/nvidia-container-runtime/Makefile b/third_party/nvidia-container-runtime/Makefile new file mode 100644 index 00000000..3a76f0dc --- /dev/null +++ b/third_party/nvidia-container-runtime/Makefile @@ -0,0 +1,41 @@ +# Copyright (c) 2017-2021, NVIDIA CORPORATION. All rights reserved. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +LIB_NAME := nvidia-container-runtime +# Define the package version and tag. Since this package is released as part of +# the NVIDIA Container Toolkit, these versions are specified where they are +# built or when invoking the MAKE command. +LIB_VERSION ?= # Set by CI +LIB_TAG ?= # Set by CI + +ifeq ($(strip $(LIB_VERSION)),) +$(error LIB_VERSION must be specified) +endif + +# Define the nvidia-container-toolkit version on which the nvidia-docker2 +# package depends. It is recommended that the TOOLKIT_TAG and the LIB_TAG match. +TOOLKIT_VERSION ?= # Set by CI +TOOLKIT_TAG ?= # Set by CI + +ifeq ($(strip $(TOOLKIT_VERSION)),) +$(error TOOLKIT_VERSION must be specified) +endif + +ifneq ($(TOOLKIT_TAG),$(LIB_TAG)) +$(warning TOOLKIT_TAG=$(TOOLKIT_TAG) and LIB_TAG=$(LIB_TAG) do not match) +endif + +# By default run all native docker-based targets +docker-native: +include $(CURDIR)/docker/docker.mk diff --git a/third_party/nvidia-container-runtime/README.md b/third_party/nvidia-container-runtime/README.md new file mode 100644 index 00000000..3502df20 --- /dev/null +++ b/third_party/nvidia-container-runtime/README.md @@ -0,0 +1,196 @@ +# Migration Notice + +**NOTE**: The source code for the `nvidia-container-runtime` binary has been moved to the [`nvidia-container-toolkit`](https://gitlab.com/nvidia/container-toolkit/container-toolkit/-/tree/main/cmd/nvidia-container-runtime) repository. It is now included in the `nvidia-container-toolkit` package and the `nvidia-container-runtime` package defined in this repository is a meta-package that allows workflows that referred to this package directly to continue to function without modification. + +# nvidia-container-runtime +[![GitHub license](https://img.shields.io/badge/License-Apache%202.0-blue.svg?style=flat-square)](https://raw.githubusercontent.com/NVIDIA/nvidia-container-runtime/main/LICENSE) +[![Package repository](https://img.shields.io/badge/packages-repository-b956e8.svg?style=flat-square)](https://nvidia.github.io/nvidia-container-runtime) + +A modified version of [runc](https://github.com/opencontainers/runc) adding a custom [pre-start hook](https://github.com/opencontainers/runtime-spec/blob/main/config.md#prestart) to all containers. +If environment variable `NVIDIA_VISIBLE_DEVICES` is set in the OCI spec, the hook will configure GPU access for the container by leveraging `nvidia-container-cli` from project [libnvidia-container](https://github.com/NVIDIA/libnvidia-container). + +## Usage example + +```sh +# Setup a rootfs based on Ubuntu 16.04 +cd $(mktemp -d) && mkdir rootfs +curl -sS http://cdimage.ubuntu.com/ubuntu-base/releases/16.04/release/ubuntu-base-16.04-core-amd64.tar.gz | tar --exclude 'dev/*' -C rootfs -xz + +# Create an OCI runtime spec +nvidia-container-runtime spec +sed -i 's;"sh";"nvidia-smi";' config.json +sed -i 's;\("TERM=xterm"\);\1, "NVIDIA_VISIBLE_DEVICES=0";' config.json + +# Run the container +sudo nvidia-container-runtime run nvidia_smi +``` + +## Installation +#### Ubuntu distributions + +1. Install the repository for your distribution by following the instructions [here](http://nvidia.github.io/nvidia-container-runtime/). +2. Install the `nvidia-container-runtime` package: +``` +sudo apt-get install nvidia-container-runtime +``` + +#### CentOS distributions +1. Install the repository for your distribution by following the instructions [here](http://nvidia.github.io/nvidia-container-runtime/). +2. Install the `nvidia-container-runtime` package: +``` +sudo yum install nvidia-container-runtime +``` + +## Docker Engine setup + +**Do not follow this section if you installed the `nvidia-docker2` package, it already registers the runtime.** + +To register the `nvidia` runtime, use the method below that is best suited to your environment. +You might need to merge the new argument with your existing configuration. + +#### Systemd drop-in file +```bash +sudo mkdir -p /etc/systemd/system/docker.service.d +sudo tee /etc/systemd/system/docker.service.d/override.conf <:` as seen in the example output: +``` +$ nvidia-smi -L +GPU 0: Graphics Device (UUID: GPU-b8ea3855-276c-c9cb-b366-c6fa655957c5) + MIG Device 0: (UUID: MIG-GPU-b8ea3855-276c-c9cb-b366-c6fa655957c5/1/0) + MIG Device 1: (UUID: MIG-GPU-b8ea3855-276c-c9cb-b366-c6fa655957c5/1/1) + MIG Device 2: (UUID: MIG-GPU-b8ea3855-276c-c9cb-b366-c6fa655957c5/11/0) +``` + +### `NVIDIA_MIG_CONFIG_DEVICES` +This variable controls which of the visible GPUs can have their MIG +configuration managed from within the container. This includes enabling and +disabling MIG mode, creating and destroying GPU Instances and Compute +Instances, etc. + +#### Possible values +* `all`: Allow all MIG-capable GPUs in the visible device list to have their + MIG configurations managed. + +**Note**: +* This feature is only available on MIG capable devices (e.g. the A100). +* To use this feature, the container must be started with `CAP_SYS_ADMIN` privileges. +* When not running as `root`, the container user must have read access to the + `/proc/driver/nvidia/capabilities/mig/config` file on the host. + +### `NVIDIA_MIG_MONITOR_DEVICES` +This variable controls which of the visible GPUs can have aggregate information +about all of their MIG devices monitored from within the container. This +includes inspecting the aggregate memory usage, listing the aggregate running +processes, etc. + +#### Possible values +* `all`: Allow all MIG-capable GPUs in the visible device list to have their + MIG devices monitored. + +**Note**: +* This feature is only available on MIG capable devices (e.g. the A100). +* To use this feature, the container must be started with `CAP_SYS_ADMIN` privileges. +* When not running as `root`, the container user must have read access to the + `/proc/driver/nvidia/capabilities/mig/monitor` file on the host. + +### `NVIDIA_DRIVER_CAPABILITIES` +This option controls which driver libraries/binaries will be mounted inside the container. + +#### Possible values +* `compute,video`, `graphics,utility` …: a comma-separated list of driver features the container needs. +* `all`: enable all available driver capabilities. +* *empty* or *unset*: use default driver capability: `utility,compute`. + +#### Supported driver capabilities +* `compute`: required for CUDA and OpenCL applications. +* `compat32`: required for running 32-bit applications. +* `graphics`: required for running OpenGL and Vulkan applications. +* `utility`: required for using `nvidia-smi` and NVML. +* `video`: required for using the Video Codec SDK. +* `display`: required for leveraging X11 display. + +### `NVIDIA_REQUIRE_*` +A logical expression to define constraints on the configurations supported by the container. + +#### Supported constraints +* `cuda`: constraint on the CUDA driver version. +* `driver`: constraint on the driver version. +* `arch`: constraint on the compute architectures of the selected GPUs. +* `brand`: constraint on the brand of the selected GPUs (e.g. GeForce, Tesla, GRID). + +#### Expressions +Multiple constraints can be expressed in a single environment variable: space-separated constraints are ORed, comma-separated constraints are ANDed. +Multiple environment variables of the form `NVIDIA_REQUIRE_*` are ANDed together. + +### `NVIDIA_DISABLE_REQUIRE` +Single switch to disable all the constraints of the form `NVIDIA_REQUIRE_*`. + +### `NVIDIA_REQUIRE_CUDA` + +The version of the CUDA toolkit used by the container. It is an instance of the generic `NVIDIA_REQUIRE_*` case and it is set by official CUDA images. +If the version of the NVIDIA driver is insufficient to run this version of CUDA, the container will not be started. + +#### Possible values +* `cuda>=7.5`, `cuda>=8.0`, `cuda>=9.0` …: any valid CUDA version in the form `major.minor`. + +### `CUDA_VERSION` +Similar to `NVIDIA_REQUIRE_CUDA`, for legacy CUDA images. +In addition, if `NVIDIA_REQUIRE_CUDA` is not set, `NVIDIA_VISIBLE_DEVICES` and `NVIDIA_DRIVER_CAPABILITIES` will default to `all`. + +## Issues and Contributing + +[Checkout the Contributing document!](CONTRIBUTING.md) + +* Please let us know by [filing a new issue](https://github.com/NVIDIA/nvidia-container-toolkit/issues/new) +* You can contribute by creating a [merge request](https://gitlab.com/nvidia/container-toolkit/container-runtime/-/merge_requests/new) to our public GitLab repository diff --git a/third_party/nvidia-container-runtime/debian/changelog.old b/third_party/nvidia-container-runtime/debian/changelog.old new file mode 100644 index 00000000..ed658ff4 --- /dev/null +++ b/third_party/nvidia-container-runtime/debian/changelog.old @@ -0,0 +1,84 @@ +# Note: as of 3.6.0-1 this file is no longer updated, with a changelog +# entry for a given release generated as part of the packaging step. + +nvidia-container-runtime (3.6.0-1) UNRELEASED; urgency=medium + + * Promote 3.6.0~rc.3-1 to 3.6.0-1 + + -- NVIDIA CORPORATION Wed, 17 Nov 2021 09:25:15 +0100 + +nvidia-container-runtime (3.6.0~rc.3-1) experimental; urgency=medium + + * Switch to "all" architecture + + -- NVIDIA CORPORATION Mon, 08 Nov 2021 13:46:59 +0100 + +nvidia-container-runtime (3.6.0~rc.2-1) experimental; urgency=medium + + * Allow the toolkit version to be specified as a variable + + -- NVIDIA CORPORATION Thu, 04 Nov 2021 14:14:32 +0000 + +nvidia-container-runtime (3.6.0~rc.1-1) experimental; urgency=medium + + * Add AARCH64 package for Amazon Linux 2 + * [BUILD] Allow tag to be specified instead of revision + * Convert to meta package that depends on nvidia-container-toolkit + * Remove libseccomp2 dependency + + -- NVIDIA CORPORATION Tue, 07 Sep 2021 13:06:50 +0200 + +nvidia-container-runtime (3.5.0-1) UNRELEASED; urgency=medium + + * Add dependence on nvidia-container-toolkit >= 1.5.0 + * Refactor the whole project for easier extensibility in the future + * Move main to cmd/nvidia-container-runtime to make it go-installable + * Switch to logrus for logging and refactor how logging is done + * Update to Golang 1.16.3 + * Improvements to build and CI system + * Reorganize the code structure and format it correctly + + -- NVIDIA CORPORATION Thu, 29 Apr 2021 05:10:29 +0000 + +nvidia-container-runtime (3.4.2-1) UNRELEASED; urgency=medium + + * Add dependence on nvidia-container-toolkit >= 1.4.2 + + -- NVIDIA CORPORATION Fri, 05 Feb 2021 02:30:49 +0000 + +nvidia-container-runtime (3.4.1-1) UNRELEASED; urgency=medium + + * Update README to list 'compute' as part of the default capabilities + * Switch to gomod for vendoring + * Update to Go 1.15.6 for builds + * Add dependence on nvidia-container-toolkit >= 1.4.1 + + -- NVIDIA CORPORATION Mon, 25 Jan 2021 02:34:42 +0000 + +nvidia-container-runtime (3.4.0-1) UNRELEASED; urgency=medium + + * Bump version to v3.4.0 + * Add dependence on nvidia-container-toolkit >= 1.3.0 + + -- NVIDIA CORPORATION Wed, 16 Sep 2020 13:48:15 +0000 + +nvidia-container-runtime (3.3.0-1) UNRELEASED; urgency=medium + + * e550cb15 Update package license to match source license + * f02eef53 Update project License + * c0fe8aae Update dependence on nvidia-container-toolkit to 1.2.0 + + -- NVIDIA CORPORATION Wed, 08 Jul 2020 20:23:05 +0000 + +nvidia-container-runtime (3.2.0-1) UNRELEASED; urgency=medium + + * e486a70e Update build system to support multi-arch builds + * 854f4c48 Require new MIG changes + + -- NVIDIA CORPORATION Fri, 15 May 2020 12:04:57 +0000 + +nvidia-container-runtime (3.1.4-1) UNRELEASED; urgency=medium + + * Split into nvidia-container-runtime and nvidia-container-runtime-hook + + -- NVIDIA CORPORATION Wed, 07 Mar 2018 05:47:37 +0000 diff --git a/third_party/nvidia-container-runtime/debian/compat b/third_party/nvidia-container-runtime/debian/compat new file mode 100644 index 00000000..ec635144 --- /dev/null +++ b/third_party/nvidia-container-runtime/debian/compat @@ -0,0 +1 @@ +9 diff --git a/third_party/nvidia-container-runtime/debian/control b/third_party/nvidia-container-runtime/debian/control new file mode 100644 index 00000000..9a51306b --- /dev/null +++ b/third_party/nvidia-container-runtime/debian/control @@ -0,0 +1,16 @@ +Source: nvidia-container-runtime +Section: @SECTION@utils +Priority: optional +Maintainer: NVIDIA CORPORATION +Standards-Version: 3.9.8 +Homepage: https://github.com/NVIDIA/nvidia-container-runtime/wiki +Vcs-Git: https://github.com/NVIDIA/nvidia-container-runtime +Vcs-Browser: https://github.com/NVIDIA/nvidia-container-runtime +Build-Depends: debhelper (>= 9) + +Package: nvidia-container-runtime +Architecture: all +Depends: ${misc:Depends}, nvidia-container-toolkit (>= @TOOLKIT_VERSION@), nvidia-container-toolkit (<< 2.0.0) +Description: NVIDIA Container Toolkit meta-package + A meta-package that allows installation flows expecting the nvidia-container-runtime + to be migrated to installing the NVIDIA Container Toolkit packages directly. diff --git a/third_party/nvidia-container-runtime/debian/copyright b/third_party/nvidia-container-runtime/debian/copyright new file mode 100644 index 00000000..f4784bd3 --- /dev/null +++ b/third_party/nvidia-container-runtime/debian/copyright @@ -0,0 +1,185 @@ +Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: nvidia-container-runtime +Source: https://github.com/NVIDIA/nvidia-container-runtime + +Files: * +Copyright: 2017-2020 NVIDIA CORPORATION +License: Apache-2.0 + +License: Apache-2.0 + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS diff --git a/third_party/nvidia-container-runtime/debian/nvidia-container-runtime.lintian-overrides b/third_party/nvidia-container-runtime/debian/nvidia-container-runtime.lintian-overrides new file mode 100644 index 00000000..273c48a2 --- /dev/null +++ b/third_party/nvidia-container-runtime/debian/nvidia-container-runtime.lintian-overrides @@ -0,0 +1,3 @@ +new-package-should-close-itp-bug +binary-without-manpage +description-is-pkg-name diff --git a/third_party/nvidia-container-runtime/debian/prepare b/third_party/nvidia-container-runtime/debian/prepare new file mode 100755 index 00000000..04e969b3 --- /dev/null +++ b/third_party/nvidia-container-runtime/debian/prepare @@ -0,0 +1,5 @@ +#! /bin/bash + +set -e + +sed -i "s;@SECTION@;${SECTION:+$SECTION/};g" debian/control diff --git a/third_party/nvidia-container-runtime/debian/rules b/third_party/nvidia-container-runtime/debian/rules new file mode 100755 index 00000000..f3908b29 --- /dev/null +++ b/third_party/nvidia-container-runtime/debian/rules @@ -0,0 +1,7 @@ +#!/usr/bin/make -f +# -*- makefile -*- + +#export DH_VERBOSE=1 + +%: + dh $@ diff --git a/third_party/nvidia-container-runtime/docker/Dockerfile.deb b/third_party/nvidia-container-runtime/docker/Dockerfile.deb new file mode 100644 index 00000000..0359e908 --- /dev/null +++ b/third_party/nvidia-container-runtime/docker/Dockerfile.deb @@ -0,0 +1,45 @@ +ARG BASEIMAGE +FROM ${BASEIMAGE} + +# packaging dependencies +ENV DEBIAN_FRONTEND=noninteractive +RUN apt-get update && apt-get install -y --no-install-recommends \ + dh-make \ + fakeroot \ + build-essential \ + devscripts \ + lsb-release && \ + rm -rf /var/lib/apt/lists/* + +# packaging +ARG PKG_NAME +ARG PKG_VERS +ARG PKG_REV +ARG TOOLKIT_VERSION +ARG DOCKER_VERSION + +ENV DEBFULLNAME "NVIDIA CORPORATION" +ENV DEBEMAIL "cudatools@nvidia.com" +ENV PKG_NAME "${PKG_NAME}" +ENV REVISION "$PKG_VERS-$PKG_REV" +ENV DOCKER_VERSION $DOCKER_VERSION +ENV TOOLKIT_VERSION $TOOLKIT_VERSION +ENV SECTION "" + +# output directory +ENV DIST_DIR=/tmp/${PKG_NAME}-$PKG_VERS +RUN mkdir -p $DIST_DIR /dist + +WORKDIR $DIST_DIR +COPY debian ./debian + +RUN sed -i "s;@TOOLKIT_VERSION@;${TOOLKIT_VERSION};" debian/control && \ + dch --create --package="${PKG_NAME}" \ + --newversion "${REVISION}" \ + "Bump nvidia-container-toolkit dependency to ${TOOLKIT_VERSION}" && \ + dch -r "" && \ + if [ "$REVISION" != "$(dpkg-parsechangelog --show-field=Version)" ]; then exit 1; fi + +CMD export DISTRIB="$(lsb_release -cs)" && \ + debuild --preserve-env --dpkg-buildpackage-hook='sh debian/prepare' -i -us -uc -b && \ + mv /tmp/*.deb /dist diff --git a/third_party/nvidia-container-runtime/docker/Dockerfile.rpm b/third_party/nvidia-container-runtime/docker/Dockerfile.rpm new file mode 100644 index 00000000..382253bd --- /dev/null +++ b/third_party/nvidia-container-runtime/docker/Dockerfile.rpm @@ -0,0 +1,36 @@ +ARG BASEIMAGE +FROM ${BASEIMAGE} + +# packaging dependencies +RUN yum install -y \ + rpm-build && \ + rm -rf /var/cache/yum/* + +# packaging +ARG PKG_NAME +ARG PKG_VERS +ARG PKG_REV +ARG TOOLKIT_VERSION +ARG DOCKER_VERSION + +ENV PKG_NAME "${PKG_NAME}" +ENV VERSION $PKG_VERS +ENV RELEASE $PKG_REV +ENV DOCKER_VERSION $DOCKER_VERSION +ENV TOOLKIT_VERSION $TOOLKIT_VERSION + +# output directory +ENV DIST_DIR=/tmp/${PKG_NAME}-$PKG_VERS/SOURCES +RUN mkdir -p $DIST_DIR /dist + +WORKDIR $DIST_DIR/.. +COPY rpm . + +CMD rpmbuild --clean -bb \ + -D "_topdir $PWD" \ + -D "release_date $(date +'%a %b %d %Y')" \ + -D "version $VERSION" \ + -D "release $RELEASE" \ + -D "toolkit_version $TOOLKIT_VERSION" \ + SPECS/nvidia-container-runtime.spec && \ + mv RPMS/noarch/*.rpm /dist diff --git a/third_party/nvidia-container-runtime/docker/docker.mk b/third_party/nvidia-container-runtime/docker/docker.mk new file mode 100644 index 00000000..cf482039 --- /dev/null +++ b/third_party/nvidia-container-runtime/docker/docker.mk @@ -0,0 +1,77 @@ +# Copyright (c) 2021, NVIDIA CORPORATION. All rights reserved. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +DOCKER ?= docker +MKDIR ?= mkdir +DIST_DIR ?= $(CURDIR)/dist + +# Supported packaging formats +FORMAT_TARGETS := deb rpm + +# We add utility targets to support common os-arch combinations by mapping to the required format targets. +DEB_TARGETS := debian10-amd64 ubuntu18.04-amd64 ubuntu18.04-arm64 ubuntu18.04-ppc64le +RPM_TARGETS := amazonlinux2-aarch64 amazonlinux2-x86_64 centos7-x86_64 centos8-aarch64 centos8-ppc64le centos8-x86_64 opensuse-leap15.1-x86_64 + +$(DEB_TARGETS): %: deb +$(RPM_TARGETS): %: rpm + +# Define top-level build targets +docker%: SHELL:=/bin/bash + +$(FORMAT_TARGETS): %: --% + +# Default variables for all private '--' targets below. +# One private target is defined for each OS we support. +--%: FORMAT = $(*) +--%: BUILDIMAGE = nvidia/$(LIB_NAME)/$(FORMAT)-all +--%: DOCKERFILE = $(CURDIR)/docker/Dockerfile.$(FORMAT) +--%: ARTIFACTS_DIR = $(DIST_DIR)/$(FORMAT)/all +--%: docker-build-% + @ + +PKG_VERS = $(LIB_VERSION)$(if $(LIB_TAG),~$(LIB_TAG)) +PKG_REV = 1 +MIN_TOOLKIT_PKG_VERSION = $(TOOLKIT_VERSION)$(if $(TOOLKIT_TAG),~$(TOOLKIT_TAG))-1 + +--deb: BASEIMAGE := ubuntu:18.04 + +--rpm: BASEIMAGE := quay.io/centos/centos:stream8 + +docker-build-%: + @echo "Building $(FORMAT) packages to $(ARTIFACTS_DIR)" + docker pull $(BASEIMAGE) + DOCKER_BUILDKIT=1 \ + $(DOCKER) build \ + --progress=plain \ + --build-arg BASEIMAGE="$(BASEIMAGE)" \ + --build-arg TOOLKIT_VERSION="$(MIN_TOOLKIT_PKG_VERSION)" \ + --build-arg PKG_NAME="$(LIB_NAME)" \ + --build-arg PKG_VERS="$(PKG_VERS)" \ + --build-arg PKG_REV="$(PKG_REV)" \ + --tag $(BUILDIMAGE) \ + --file $(DOCKERFILE) . + $(DOCKER) run \ + -e DISTRIB \ + -e SECTION \ + -v $(ARTIFACTS_DIR):/dist \ + $(BUILDIMAGE) + +docker-clean: + IMAGES=$$(docker images "nvidia/$(LIB_NAME)/*" --format="{{.ID}}"); \ + if [ "$${IMAGES}" != "" ]; then \ + docker rmi -f $${IMAGES}; \ + fi + +distclean: + rm -rf $(DIST_DIR) diff --git a/third_party/nvidia-container-runtime/rpm/SOURCES/LICENSE b/third_party/nvidia-container-runtime/rpm/SOURCES/LICENSE new file mode 100644 index 00000000..f4446dee --- /dev/null +++ b/third_party/nvidia-container-runtime/rpm/SOURCES/LICENSE @@ -0,0 +1,190 @@ + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + Copyright 2017-2018 NVIDIA CORPORATION + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/third_party/nvidia-container-runtime/rpm/SPECS/nvidia-container-runtime.spec b/third_party/nvidia-container-runtime/rpm/SPECS/nvidia-container-runtime.spec new file mode 100644 index 00000000..4ec11f07 --- /dev/null +++ b/third_party/nvidia-container-runtime/rpm/SPECS/nvidia-container-runtime.spec @@ -0,0 +1,36 @@ +Name: nvidia-container-runtime +Version: %{version} +Release: %{release} +BuildArch: noarch +Group: Development Tools + +Vendor: NVIDIA CORPORATION +Packager: NVIDIA CORPORATION + +Summary: NVIDIA container runtime +URL: https://github.com/NVIDIA/nvidia-container-runtime +# runc NOTICE file: https://github.com/opencontainers/runc/blob/main/NOTICE +License: ASL 2.0 + +Source0: LICENSE + +Obsoletes: nvidia-container-runtime < 2.0.0 +Requires: nvidia-container-toolkit >= %{toolkit_version}, nvidia-container-toolkit < 2.0.0 + +%description +A meta-package that allows installation flows expecting the nvidia-container-runtime +to be migrated to installing the NVIDIA Container Toolkit packages directly. + +%prep +cp %{SOURCE0} . + +%install + +%files +%license LICENSE + +%changelog +# As of 3.6.0-1 we generate the release information automatically +* %{release_date} NVIDIA CORPORATION %{version}-%{release} +- As of 3.6.0-1 the package changelog is generated automatically. This means that releases since 3.6.0-1 all contain this same changelog entry updated for the version being released. +- Bump nvidia-container-toolkit dependency to %{toolkit_version} diff --git a/third_party/nvidia-container-runtime/rpm/changelog.old b/third_party/nvidia-container-runtime/rpm/changelog.old new file mode 100644 index 00000000..15a73bb1 --- /dev/null +++ b/third_party/nvidia-container-runtime/rpm/changelog.old @@ -0,0 +1,46 @@ +* Wed Nov 17 2021 NVIDIA CORPORATION 3.6.0-1 +- Promote 3.6.0-0.1.rc.3 to 3.6.0-1 + +* Mon Nov 08 2021 NVIDIA CORPORATION 3.6.0-0.1.rc.3 +- Convert to noarch package + +* Thu Nov 04 2021 NVIDIA CORPORATION 3.6.0-0.1.rc.2 +- Bump nvidia-container-toolkit dependency to %{toolkit_version} +- Allow the toolkit version to be specified as a variable + +* Thu Apr 29 2021 NVIDIA CORPORATION 3.6.0-0.1.rc.1 +- Add AARCH64 package for Amazon Linux 2 +- [BUILD] Allow tag to be specified instead of revision +- Convert to meta package that depends on nvidia-container-toolkit +- Remove libseccomp2 dependency + +* Thu Apr 29 2021 NVIDIA CORPORATION 3.5.0-1 +- Add dependence on nvidia-container-toolkit >= 1.5.0 +- Refactor the whole project for easier extensibility in the future +- Move main to cmd/nvidia-container-runtime to make it go-installable +- Switch to logrus for logging and refactor how logging is done +- Update to Golang 1.16.3 +- Improvements to build and CI system +- Reorganize the code structure and format it correctly + +* Fri Feb 05 2021 NVIDIA CORPORATION 3.4.2-1 +- Add dependence on nvidia-container-toolkit >= 1.4.2 + +* Mon Jan 25 2021 NVIDIA CORPORATION 3.4.1-1 +- Update README to list 'compute' as part of the default capabilities +- Switch to gomod for vendoring +- Update to Go 1.15.6 for builds +- Add dependence on nvidia-container-toolkit >= 1.4.1 + +* Wed Sep 16 2020 NVIDIA CORPORATION 3.4.0-1 +- Bump version to v3.4.0 +- Add dependence on nvidia-container-toolkit >= 1.3.0 + +* Wed Jul 08 2020 NVIDIA CORPORATION 3.3.0-1 +- e550cb15 Update package license to match source license +- f02eef53 Update project License +- c0fe8aae Update dependence on nvidia-container-toolkit to 1.2.0 + +* Fri May 15 2020 NVIDIA CORPORATION 3.2.0-1 +- e486a70e Update build system to support multi-arch builds +- 854f4c48 Require new MIG changes \ No newline at end of file