Merge pull request #1686 from NVIDIA/cuda-base-bump

Bump CUDA base image versions for operator and validator

Author: cdesiniotis

.github/workflows/ci.yaml

@@ -154,6 +154,7 @@ jobs:
         env:
           IMAGE_NAME: ghcr.io/${LOWERCASE_REPO_OWNER}/gpu-operator
           VERSION: ${COMMIT_SHORT_SHA}-arm64
+          CVE_UPDATES: "pam libarchive"
         run: |
           echo "${VERSION}"
           make build-${{ matrix.dist }}
@@ -195,6 +196,7 @@ jobs:
           IMAGE_NAME: ghcr.io/${LOWERCASE_REPO_OWNER}/gpu-operator/gpu-operator-validator
           VERSION: ${COMMIT_SHORT_SHA}-arm64
           SUBCOMPONENT: validator
+          CVE_UPDATES: "pam libarchive"
         run: |
           echo "${VERSION}"
           make build-${{ matrix.dist }}
@@ -240,6 +242,7 @@ jobs:
         env:
           IMAGE_NAME: ghcr.io/${LOWERCASE_REPO_OWNER}/gpu-operator
           VERSION: ${COMMIT_SHORT_SHA}-amd64
+          CVE_UPDATES: "pam libarchive"
         run: |
           echo "${VERSION}"
           make build-${{ matrix.dist }}
@@ -282,6 +285,7 @@ jobs:
           IMAGE_NAME: ghcr.io/${LOWERCASE_REPO_OWNER}/gpu-operator/gpu-operator-validator
           VERSION: ${COMMIT_SHORT_SHA}-amd64
           SUBCOMPONENT: validator
+          CVE_UPDATES: "pam libarchive"
         run: |
           echo "${VERSION}"
           make build-${{ matrix.dist }}

docker/Dockerfile

@@ -14,7 +14,7 @@
 
 ARG GOLANG_VERSION=x.x.x
 
-FROM nvcr.io/nvidia/cuda:12.8.1-base-ubi9 as builder
+FROM nvcr.io/nvidia/cuda:13.0.0-base-ubi9 as builder
 
 RUN dnf install -y wget make git gcc
 
@@ -55,7 +55,7 @@ ARG VERSION="unknown"
 ARG GIT_COMMIT="unknown"
 RUN make gpu-operator
 
-FROM nvcr.io/nvidia/cuda:12.8.1-base-ubi9
+FROM nvcr.io/nvidia/cuda:13.0.0-base-ubi9
 
 # Remove CUDA libs(compat etc) in favor of libs installed by the NVIDIA driver
 RUN dnf remove -y cuda-*

validator/Dockerfile

@@ -15,7 +15,7 @@
 ARG CUDA_SAMPLE_IMAGE=undefined
 ARG GOLANG_VERSION=x.x.x
 
-FROM nvcr.io/nvidia/cuda:12.8.1-base-ubi9 as build
+FROM nvcr.io/nvidia/cuda:13.0.0-base-ubi9 as build
 
 RUN dnf install -y wget make git gcc
 
@@ -51,7 +51,7 @@ FROM ${CUDA_SAMPLE_IMAGE} AS sample-builder
 RUN mkdir /artifacts
 RUN cp /cuda-samples/vectorAdd /artifacts/vectorAdd
 
-FROM nvcr.io/nvidia/cuda:12.8.1-base-ubi9
+FROM nvcr.io/nvidia/cuda:13.0.0-base-ubi9
 
 # Remove CUDA libs(compat etc) in favor of libs installed by the NVIDIA driver
 RUN dnf remove -y cuda-*