Skip to content

fix: migrate CPU Docker image to Ubuntu 24.04, eliminate CUDA bloat#15

Merged
dvcdsys merged 1 commit intomainfrom
fix/cpu-image-vulnerabilities
Mar 24, 2026
Merged

fix: migrate CPU Docker image to Ubuntu 24.04, eliminate CUDA bloat#15
dvcdsys merged 1 commit intomainfrom
fix/cpu-image-vulnerabilities

Conversation

@dvcdsys
Copy link
Copy Markdown
Owner

@dvcdsys dvcdsys commented Mar 24, 2026

  • Migrate from python:3.12-slim (Debian Trixie) to ubuntu:24.04 base, matching CUDA image's multi-stage build pattern
  • Install CPU-only PyTorch via --extra-index-url, removing 3.4GB of unnecessary NVIDIA CUDA libraries (nvidia/, triton/)
  • Remove separate arm64/amd64 push targets, keep only multi-arch
  • Image size reduced from 3.5GB to 941MB (compressed)
  • CVEs reduced from 40 (1C 1H 2M 36L) to 8 (0C 0H 4M 4L)
  • All remaining 8 CVEs are unfixed upstream in Ubuntu

What

Why

How

Type of change

  • Bug fix
  • New feature
  • Refactor
  • Docs
  • CI / infra

Checklist

  • Tested against a running API server
  • go vet ./... passes (CLI changes)
  • pytest tests/ passes (API changes)
  • No secrets or API keys committed

- Migrate from python:3.12-slim (Debian Trixie) to ubuntu:24.04 base,
  matching CUDA image's multi-stage build pattern
- Install CPU-only PyTorch via --extra-index-url, removing 3.4GB of
  unnecessary NVIDIA CUDA libraries (nvidia/, triton/)
- Remove separate arm64/amd64 push targets, keep only multi-arch
- Image size reduced from 3.5GB to 941MB (compressed)
- CVEs reduced from 40 (1C 1H 2M 36L) to 8 (0C 0H 4M 4L)
- All remaining 8 CVEs are unfixed upstream in Ubuntu

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@dvcdsys dvcdsys merged commit 53c4f70 into main Mar 24, 2026
4 checks passed
@dvcdsys dvcdsys deleted the fix/cpu-image-vulnerabilities branch March 24, 2026 13:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant