chore(python,wrappers): Update protobuf version and update RedHat ubi image from 9 to 10 #6947
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Why
Motivation
In the RedHat ubi9 image, there are a lot of Medium and Low CVEs on the OS layer. Updating from 9 to 10 resolves those. Furthermore, updating the protobuf version to align with the one in alibi-explain and to resolve a CVE. Third, updating the pip version in the python wrapper Dockerfile to resolve a CVE.
What
Summary of changes
Python Microservice
Wrappers
CONDA_BASE_IMAGEvar in the wrappers folder's Makefile to use the newly updated ubi10 Dockerfile.conda imageAlibi Server Wrappers
Checklist
Locally Built Images
All of the following images can be successfully built locally:
Note:
There is a Dockerfile.gpu image in the wrappers/s2i/python folder - this Dockerfile's image is not used anywhere in the seldon-core repository. Furthermore, it has not been released for a few years and has a low number of downloads on Dockerhub. Therefore, it is a low priority to update. Updates to this file have to be managed carefully as a lot of system libraries contain CVEs and later versions of nvidia/cuda images(the first layer) contain a different version of cuda(cuda 9) which contains breaking changes.