Conversation
.github/workflows/sycl-coverity.yml
Outdated
| runs-on: [Linux, build] | ||
| container: | ||
| image: ghcr.io/intel/llvm/ubuntu2404_intel_drivers:alldeps | ||
| image: ghcr.io/intel/llvm/ubuntu2404_intel_drivers:latest |
Check failure
Code scanning / zizmor
unpinned image references
| packages: read | ||
| container: | ||
| image: ${{ inputs.image || 'ghcr.io/intel/llvm/ubuntu2404_intel_drivers:alldeps'}} | ||
| image: ${{ inputs.image || 'ghcr.io/intel/llvm/ubuntu2404_intel_drivers:latest'}} |
Check failure
Code scanning / zizmor
unpinned image references
| runs-on: [ "Linux", "build" ] | ||
| container: | ||
| image: 'ghcr.io/intel/llvm/ubuntu2404_base' | ||
| image: 'ghcr.io/intel/llvm/ubuntu2404_build' |
Check failure
Code scanning / zizmor
unpinned image references
Signed-off-by: Nick Sarnie <nick.sarnie@intel.com>
|
|
||
| - `devops/containers/ubuntu2204_base`: contains basic environment | ||
| setup for building DPC++ compiler from source. | ||
| - `devops/containers/ubuntu2204_intel_drivers`: contains everything from the |
There was a problem hiding this comment.
nit
should we rename it to be ubuntu2204_all_gpu_drivers?
There was a problem hiding this comment.
Yeah good idea, let me just name it ubuntu2204_gpu_drivers
There was a problem hiding this comment.
Actually thinking now, build has the amd/nvidia drivers and only this one has the intel one, so i think the current naming makes sense
| dependencies.json. The drivers are tested/validated everytime we upgrade | ||
| the driver. Also includes the development kits for NVidia/AMD. | ||
| The drivers are installed as it is, not tested or validated. | ||
| - `devops/containers/ubuntu2204_build`: has development kits installed for |
There was a problem hiding this comment.
nit
should we describe ubuntu2204_build first, since we refer to it in ubuntu2204_intel_drivers and then in description of ubuntu2204_intel_drivers we can avoid repeating what we already described for build image.
There was a problem hiding this comment.
Makes sense, thanks. I just lazily deleted what was there :)
| other drivers are downloaded from release/tag and saved in dependencies.json. | ||
| * `alldeps`: Includes the same Intel drivers as `latest`, as well as the | ||
| development kits for NVidia/AMD from the `ubuntu2404_build` Dockerfile. | ||
| build Dockerfile + pre-installed Intel drivers. |
Signed-off-by: Nick Sarnie <nick.sarnie@intel.com>
sycl/doc/developer/DockerBKMs.md
Outdated
| the driver. Also includes the development kits for NVidia/AMD. | ||
| The drivers are installed as it is, not tested or validated. |
There was a problem hiding this comment.
nit - removed duplication
| the driver. Also includes the development kits for NVidia/AMD. | |
| The drivers are installed as it is, not tested or validated. | |
| the driver. NVidia/AMD drivers are installed as it is, not tested or validated. |
There was a problem hiding this comment.
nevermind, you're right, thanks
Signed-off-by: Nick Sarnie <nick.sarnie@intel.com>
Signed-off-by: Nick Sarnie <nick.sarnie@intel.com>
Signed-off-by: Nick Sarnie <nick.sarnie@intel.com>
|
For some reason trivy ignores the ignorefile. Feel free to ignore, I'll fix it |
|
@uditagarwal97 Mind taking a final look at this one? Thanks |
|
Thanks! After the containers build I will make a follow-up PR that actually uses these new containers. |
Start using the new container labels added in #21175 Signed-off-by: Nick Sarnie <nick.sarnie@intel.com>
Get rid of the
basecontainer and the currentlatestcontainer and move the currentintel_driversalldepscontainer tolatest.Nobody was using the
basecontainer directly, and it's only used in one place transitively, the UR liboffload workflow, through theintel_drivers:latesttag.Lets just simply everything.
This PR isn't updating any workflows because we need the containers in this PR to be published first.