Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nvidia-container-toolkit/1.17.2 package update #34287

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Nov 16, 2024

Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Nov 16, 2024
@octo-sts octo-sts bot added the P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. label Nov 16, 2024
Copy link
Contributor Author

octo-sts bot commented Nov 16, 2024

Gen AI suggestions to solve the build error:

Based on the error output, here are some steps to help debug and fix the build issue:

  1. First, there appears to be an authentication error:
Error: rpc error: code = NotFound desc = federate identity: rpc error: code = NotFound desc = no identity found for...

This is likely not affecting the actual build but is related to the CI system authentication.

  1. For debugging the build locally:
melange build --interactive nvidia-container-toolkit.yaml

This will drop you into a shell where you can:

  • Navigate to the build directory
  • Run the failing go build command manually
  • Check if all dependencies are available
  1. The build seems to stop at the go/build step for the nvidia-cdi-hook subpackage. Potential fixes:

a. Add Go-specific build dependencies to the environment section:

environment:
  contents:
    packages:
      - build-base
      - busybox
      - ca-certificates-bundle
      - go
      - git    # Ensure git is explicitly listed
      - gcc    # Ensure gcc is explicitly listed

b. Check if vendor directory exists since vendor: true is specified:

# In the interactive shell
ls vendor/
# If missing, try running
go mod vendor

c. Verify the go.mod file matches the version being built:

# In the interactive shell
cat go.mod
go mod tidy
  1. The ldflags in the build command are complex - verify they're being expanded correctly:
# In the interactive shell
echo $LDFLAGS  # Check actual values

Try building the specific component that's failing:

go build -v ./cmd/nvidia-cdi-hook

These steps should help identify where exactly the build is failing and what might be missing.

These have been merged into the main binary upstream:
NVIDIA/nvidia-container-toolkit#722

Signed-off-by: Dan Lorenc <dlorenc@chainguard.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. request-version-update request for a newer version of a package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants