Conversation
rahulait
force-pushed
the
add-595-drivers
branch
2 times, most recently
from
3fabe7f to
a1ac4ee
Compare
|
/ok to test a1ac4ee |
| run: | | ||
| if [[ "${{ inputs.dist }}" =~ ^(rhel|rocky) ]]; then | ||
| echo "CVE_UPDATES=openssl python3-urllib3 libarchive libxml2 pam python3 sqlite-libs gnupg2" >> $GITHUB_ENV | ||
| echo "CVE_UPDATES=openssl python3-urllib3 libarchive libxml2 pam python3 platform-python python3-libs curl p11-kit lz4-libs vim-minimal sqlite-libs gnupg2 gnutls glib2 libblkid libfdisk libmount libsmartcols libuuid util-linux util-linux-core openldap" >> $GITHUB_ENV |
There was a problem hiding this comment.
Are we able to simplify this to list just the top lvl packets? (ie util-linux glib2 gnupg2 gnutls openldap libxml2 libarchive sqlite pam vim-minimal p11-kit). I believe the dependent packets should automatically be pulled. Otherwise LGTM
There was a problem hiding this comment.
Currently, we do:
yum update -y ${CVE_UPDATES}
Dependencies are upgraded only if strictly required. Hence, I am adding individual list so that they are upgraded if any newer version is available.
There was a problem hiding this comment.
I ended up bumping the base image used for rocky9 and also updated the base images early during the build process in #672 and #673. Now, I don't see any new package installed by CVE_UPDATES as everything is already up to date. Hence removed all the entries as they are no longer needed.
Logs from a run which had base images updated, so none of the listed package was updated.
rhel8 run: https://github.com/NVIDIA/gpu-driver-container/actions/runs/23829447442/job/69459543075?pr=666#step:9:2471
rhel9 run: https://github.com/NVIDIA/gpu-driver-container/actions/runs/23829447442/job/69459543060?pr=666#step:9:3079
rhel10 run: https://github.com/NVIDIA/gpu-driver-container/actions/runs/23829447442/job/69459543065?pr=666#step:9:4132
rocky9 run: https://github.com/NVIDIA/gpu-driver-container/actions/runs/23829447442/job/69459543071?pr=666#step:9:3022
rahulait
force-pushed
the
add-595-drivers
branch
from
a1ac4ee to
9020177
Compare
|
/ok to test 9020177 |
rahulait
force-pushed
the
add-595-drivers
branch
from
9020177 to
2f39f55
Compare
|
/ok to test 2f39f55 |
rahulait
force-pushed
the
add-595-drivers
branch
from
2f39f55 to
f3b9236
Compare
|
/ok to test f3b9236 |
rahulait
force-pushed
the
add-595-drivers
branch
from
f3b9236 to
d647fd8
Compare
|
Re-opened as I had accidentally fat-fingered and closed the PR. |
rahulait
force-pushed
the
add-595-drivers
branch
from
75a8686 to
35c2114
Compare
Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
rahulait
force-pushed
the
add-595-drivers
branch
from
35c2114 to
381bfa0
Compare
2 participants
Build 595TRD1 drivers as they are released.
https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-595-58-03/index.html