Rebuilding TensorFlow 2.8.4 on Ubuntu 22.04 to patch vulnerabilities

1. GHSA-gw97-ff7c-9v96

   1 1 - -

   Discontinued [GET https://api.github.com/repos/advisories/GHSA-gw97-ff7c-9v96: 404 - Not Found // See: https://docs.github.com/rest/repos/repos#get-a-repository]

   1 critical [vuln]

2. InfluxDB

   www.influxdata.com featured

   InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

   

3. tensorflow

   2 236 189,943 10.0 C++

   An Open Source Machine Learning Framework for Everyone

   

   The official 2.8.4 container was published in Nov 2022. That's 1.5 years of OS updates at least. I looked up the 2.8.4 source and found that it's using Ubuntu 20.04 as the base OS. Of note, we're using the x86_64 architecture according to the container image layer: ENV NVARCH=x86_64.

4. tensorflow-2.8.4-redux

   3 2 0 0.0 C++

   Rebuilding Tensorflow 2.8.4 on modern ubuntu base

   

   Then, I updated the build steps. Here's what I did, following the instructions in the containers readme.

5. docker-py

   4 8 6,988 6.2 Python

   A Python library for the Docker Engine API

   

   Downgrade requests & urllib libraries (see github bug)

6. jax

   5 89 32,213 10.0 Python

   Composable transformations of Python+NumPy programs: differentiate, vectorize, JIT to GPU/TPU, and more

   

   I found a GitHub issue that seemed similar (missing ptxas) and saw a suggestion to install nvidia-cuda-toolkit. Alright: but that exploded the container size from 6.5 GB to 12.13 GB … unacceptable 😤 (Incidentally, this is too large for Cloud Shell to build on its limited persistent disk.)

7. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

Suggest a related project