Skip to content

Show notes from a talk by Patrick Smyth about CUDA Images from Chainguard

Notifications You must be signed in to change notification settings

k8sAustin/cuda-images

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 

Repository files navigation

AI Defense in Prod: Minimal and Zero CVE CUDA Images with Chainguard

DESCRIPTION

Deep learning is moving out of the lab and into production at a breakneck pace. However, as CNNs get baked into real-time applications and models run in inference become the responsibility of devops teams, security becomes a major issue.

In this presentation, Dr. Patrick Smyth, Staff Developer Relations Engineer at Chainguard, will discuss and demo new CUDA-powered Chainguard Images. While runtime images for major AI frameworks tend to throw in the kitchen sink by including hundreds of packages, these Chainguard Images for PyTorch and NeMo aim to be as minimal as possible to reduce attack surface, and at time of writing have 0 CVEs compared to the dozens of CVEs in official images. We'll train a simple animal recognition model, compare these images with their official counterparts, and discuss some of the advantages and tradeoffs in building on these base images. And, yes, there will be some jokes and animated GIFs along the way

SPEAKER

Patrick Smith

LINKS

COMMANDS

docker pull --platform linux/x86_64 cgr.dev/chainguard/pytorch-cuda12:latest-dev

trivy nvcr.io/nvidia/nemo:24.03.01.framework

Running grype command on an image:

grype <image name and tag>

Running docker scout command:

docker scout cves nvcr.io/nvidia/nemo:24.03.01.framework

About

Show notes from a talk by Patrick Smyth about CUDA Images from Chainguard

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published