Skip to content

update base image to pick any updates#673

Merged
rahulait merged 1 commit intoNVIDIA:mainfrom
rahulait:update-base-image
Apr 1, 2026
Merged

update base image to pick any updates#673
rahulait merged 1 commit intoNVIDIA:mainfrom
rahulait:update-base-image

Conversation

@rahulait
Copy link
Copy Markdown
Contributor

@rahulait rahulait commented Apr 1, 2026

I was seeing older version of cuda-compat-13-2 in the cuda base image we are using. Doing "dnf update" pulls in newer version and also updates few packages which had CVEs in them. Example:

root@rahulsharm-dev1:~# docker run -it --entrypoint /bin/bash nvcr.io/nvidia/cuda:13.2.0-base-rockylinux9
Unable to find image 'nvcr.io/nvidia/cuda:13.2.0-base-rockylinux9' locally
13.2.0-base-rockylinux9: Pulling from nvidia/cuda
812c44127102: Already exists
8200543fc3d4: Pull complete
073e9408af9e: Pull complete
f36095593a69: Pull complete
5afc9d59efc0: Pull complete
314a2f652b6c: Pull complete
Digest: sha256:909fd18005d665a0204ab8cc9b05e2e8cde00970521e6e8052c45bb6deededf9
Status: Downloaded newer image for nvcr.io/nvidia/cuda:13.2.0-base-rockylinux9
bash-5.1# dnf update -y
cuda                                                           34 MB/s | 4.2 MB     00:00
Rocky Linux 9 - BaseOS                                        6.9 MB/s |  17 MB     00:02
Rocky Linux 9 - AppStream                                     7.6 MB/s |  17 MB     00:02
Rocky Linux 9 - Extras                                        6.1 kB/s |  17 kB     00:02
Dependencies resolved.
==============================================================================================
 Package                   Architecture    Version                      Repository       Size
==============================================================================================
Upgrading:
 cuda-compat-13-2          x86_64          3:595.58.03-1.el9            cuda            100 M
 gnutls                    x86_64          3.8.3-10.el9_7               baseos          1.1 M
 libarchive                x86_64          3.5.3-7.el9_7                baseos          387 k
 python3                   x86_64          3.9.25-3.el9_7.1             baseos           26 k
 python3-libs              x86_64          3.9.25-3.el9_7.1             baseos          7.5 M
 tzdata                    noarch          2026a-1.el9_7                baseos          496 k

In this PR, I am running dnf update for base image used so that we get the base image updated as required before configuring the image further.

I also added dnf clean all to reduce size of intermediate layers.

Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
@rahulait rahulait self-assigned this Apr 1, 2026
@rahulait rahulait merged commit d647fd8 into NVIDIA:main Apr 1, 2026
36 checks passed
@rahulait rahulait mentioned this pull request Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants