UniqAI/nvidia-container-toolkit
1
0
Fork 0
mirror of https://github.com/NVIDIA/nvidia-container-toolkit synced 2024-11-22 08:18:32 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
260 Commits 20 Branches 73 Tags 28 MiB
afb260d82e
Commit Graph

260 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Evan Lezar
afb260d82e Update nss on centos7 to address CVEs 
This addresses https://access.redhat.com/security/cve/CVE-2021-43527

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-07 16:20:17 +01:00
Evan Lezar
f0311bfe17 Allow packages to be specified to address CVEs 
This change allows the CVE_UPGRADES build arg to be set
to address CVEs in base images instead of requesting waivers.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-07 16:19:01 +01:00
Evan Lezar
050c29b157 Merge branch 'enable-image-release' into 'master' 
Enable release of toolkit-container images

See merge request nvidia/container-toolkit/container-toolkit!89
 2021-12-06 09:15:57 +00:00
Evan Lezar
de9afd4623 Merge branch 'bump-post-1.7.0' into 'master' 
Bump version post 1.7.0 release

See merge request nvidia/container-toolkit/container-toolkit!88
 2021-12-03 16:03:19 +00:00
Evan Lezar
b231d8f365 Merge branch 'fix-skip-scan' into 'master' 
Simplify skipping of scans

See merge request nvidia/container-toolkit/container-toolkit!87
 2021-12-03 16:03:11 +00:00
Evan Lezar
ee2b84b228 Update libnvidia-container submodule 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-03 16:19:31 +01:00
Evan Lezar
0c24fa83ae Bump version post 1.7.0 release 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-03 16:19:29 +01:00
Evan Lezar
79660d1e55 Enable release of toolkit-container images 
This change enables the release of toolkit-container images from this
repository instead of the container-config repository. This ensures
that these images are released along with the packages for the
NVIDIA Contianer Toolkit components.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-03 15:30:15 +01:00
Evan Lezar
39d2ff06fa Simplify skipping of scans 
Scans are now only skipped if the SKIP_SCANS=yes.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-03 14:39:11 +01:00
Evan Lezar
0ac288e6dd Merge branch 'add-package-upload' into 'master' 
Generate image containing packages for release

See merge request nvidia/container-toolkit/container-toolkit!82
 2021-12-03 13:25:16 +00:00
Evan Lezar
b334f1977b Add delay and timeout to image pull job 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-03 12:19:57 +01:00
Evan Lezar
2d07385e81 Pull public staging images to scan and release 
This change pulls images from public staging repositories to scan
and release. This ensures that the bits built and tested in public
CI (off the master branch, for example) match those scanned and
released. This also serves to reduce the load on our internal CI
runners as these don't have to store artifacts and build images.

Two CI variables: STAGING_REGISTRY and STAGING_VERSION are used
to control which image is pulled for release, with the latter
defaulting to the CI_COMMIT_SHORT_SHA.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-02 17:31:07 +01:00
Evan Lezar
fd5a1a72f0 Address review comments 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-01 18:45:30 +01:00
Evan Lezar
738d28dac5 Add script to pull packages from packaging image 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-01 18:45:30 +01:00
Evan Lezar
e662e8197c Add placeholder for testing packaging image 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-01 18:45:30 +01:00
Evan Lezar
2964f26533 Add packaging target to CI 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-01 18:45:30 +01:00
Evan Lezar
629d575fad Add packaging target that includes all release packages 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-01 18:45:30 +01:00
Evan Lezar
7fb04878c7 Include all architecture packages in toolkit container 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-12-01 18:45:30 +01:00
Evan Lezar
f10f533fb2 Merge branch 'bump-1.7.0' into 'master' 
Bump version to 1.7.0

See merge request nvidia/container-toolkit/container-toolkit!85
 2021-11-30 18:37:01 +00:00
Evan Lezar
9c2cdc2f81 Update libnvidia-container submodule 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-30 14:44:31 +01:00
Evan Lezar
5bbaf8af4b Bump version to 1.7.0 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-30 14:27:17 +01:00
Evan Lezar
c6ce5b5a29 Merge branch 'set-other-package-versions' into 'master' 
Set nvidia-container-runtime and nvidia-docker versions

See merge request nvidia/container-toolkit/container-toolkit!84
 2021-11-30 13:04:39 +00:00
Evan Lezar
b9e752e24e Update submodules 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-30 13:35:48 +01:00
Evan Lezar
94849fa822 Bump golang version to 1.16.4 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-30 13:35:48 +01:00
Evan Lezar
b0d6948d94 Add versions.mk file to define versions 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-30 13:35:46 +01:00
Evan Lezar
995bd0d34a Merge branch 'add-multi-arch-package-tests' into 'master' 
Allow testing of packages for non-native architectures

See merge request nvidia/container-toolkit/container-toolkit!80
 2021-11-29 13:57:53 +00:00
Evan Lezar
27bb5cca0c Specify nvidia-container-runtime and nvidia-docker versions 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-29 14:21:54 +01:00
Evan Lezar
72d1d90ce9 Bump post 1.7.0-rc.1 release 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-29 10:16:25 +01:00
Evan Lezar
6a1f7d0228 Don't rebuild packages for every local run 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-25 14:00:21 +01:00
Evan Lezar
094631329f Add basic multi-arch support to release tests 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-25 14:00:21 +01:00
Evan Lezar
6731f050da Rework init repo for centos8 release tests 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-25 14:00:21 +01:00
Evan Lezar
2ee6ec5d17 Merge branch 'update-libnvidia-container' into 'master' 
Update libnvidia-container to latest for release

See merge request nvidia/container-toolkit/container-toolkit!83
 2021-11-25 11:08:01 +00:00
Evan Lezar
1c25b349b1 Update libnvidia-container dependency for release 
This includes support for filtering CLI flags based on libnvidia-container
version.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-25 11:38:56 +01:00
Evan Lezar
d87bdf9ab6 Update changelog 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-25 11:37:51 +01:00
Evan Lezar
472c89d051 Merge branch 'remove-containerd-dependency' into 'master' 
Remove containerd dependency

See merge request nvidia/container-toolkit/container-toolkit!81
 2021-11-25 09:13:29 +00:00
Evan Lezar
3470f2ecb9 Merge branch 'add-supported-driver-capabilities' into 'master' 
Add supported-driver-capabilities config option

See merge request nvidia/container-toolkit/container-toolkit!74
 2021-11-24 15:43:30 +00:00
Evan Lezar
9c27e03c87 Merge branch 'post-1.6.0-release' into 'master' 
Bump post 1.6.0 release

See merge request nvidia/container-toolkit/container-toolkit!79
 2021-11-24 15:40:36 +00:00
Evan Lezar
09c6995ff9 Update vendoring 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-24 15:42:37 +01:00
Evan Lezar
e2ec381093 Specify containerd runtime type as string 
This removes the need to import the containerd package and reduces
the dependency management overhead.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-24 15:42:37 +01:00
Evan Lezar
7a31ebadb1 Update submodules 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-24 15:42:06 +01:00
Evan Lezar
7a34be62b2 Override LIB_TAGS for runtime and docker wrapper 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-24 10:59:10 +01:00
Evan Lezar
a4441b6545 Bump post 1.6.0 release 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-24 10:54:06 +01:00
Evan Lezar
ab3ebe5e49 Add jetpack-specific config.toml 
This chagne adds a jetpack-specific config.toml file which specifies
supported-driver-capabilities to remove the unsupported ngx capability.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-17 16:53:08 +01:00
Evan Lezar
ea0bf6fbf8 Specify config.toml file suffix as docker build arg 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-17 16:53:08 +01:00
Evan Lezar
0a2db7c70e Add nvidia-container-config option to overide drivercapabilities 
This change adds support for a supported-driver-capabilities config
option in the config.toml file that allows the driver capabilities
associated with the NVIDIA_DRIVER_CAPABILITIES=all environment variable.
This can be used on platforms such as Jetson to remove unsupported
capabilities such as "ngx".

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-17 16:53:08 +01:00
Evan Lezar
92bb04f0fd Merge branch 'bump-version-1.6.0' into 'master' 
Bump version for 1.6.0 release

See merge request nvidia/container-toolkit/container-toolkit!78
 2021-11-17 11:17:39 +00:00
Evan Lezar
4d224a114a Update components versions for 1.6.0 release 
* libnvidia-container v1.6.0: dd2c49d6699e4d8529fbeaa58ee91554977b652e
* nvidia-container-runtime v3.6.0: 38ff520daa33d3a3a733440957c6aa346757bd1f
* nvidia-docker v2.7.0: fd3233aa5f4ade28ac6bda616c2fa77a0ce89cd9

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-17 11:49:06 +01:00
Evan Lezar
2795e7d132 Bump version to 1.6.0 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-17 10:07:36 +01:00
Evan Lezar
58801d0c71 Fix logging to stderr instead of file logger 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2021-11-16 21:37:50 +01:00
Christopher Desiniotis
a13c785865 Merge branch 'pulse-ci' into 'master' 
[ci] remove --pss flag from pulse scanning

See merge request nvidia/container-toolkit/container-toolkit!77
 2021-11-16 18:55:29 +00:00