mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-18 05:39:50 +08:00
Drew Newberry
910d3f09f2
* feat(vm): boot sandboxes from ext4 root disks * feat(vm): boot sandboxes with writable overlay disk * fix(sandbox): improve sandbox provisioning behavior * fix(vm): repair sandbox image provisioning * fix(vm): clean up rebase fallout * perf(vm): cache empty overlay images * perf(vm): skip repeated sandbox ownership repair * fix(vm): address lifecycle review issues * fix(vm): repair gateway vm startup * wip
44 lines
2.6 KiB
Bash
44 lines
2.6 KiB
Bash
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# Pinned dependency versions for the openshell-driver-vm runtime.
|
|
#
|
|
# This file is sourced by VM runtime packaging scripts. It centralises version
|
|
# pins and content-addressed digests so that builds are reproducible and
|
|
# auditable.
|
|
#
|
|
# Environment variables override these defaults — CI and local dev workflows
|
|
# can still set the runtime dependency versions below.
|
|
#
|
|
# To update a dependency:
|
|
# 1. Change the version/digest below.
|
|
# 2. Run the relevant build script to verify.
|
|
# 3. Commit pins.env alongside any script changes.
|
|
|
|
# ── Base Docker image (digest-pinned) ──────────────────────────────────
|
|
# Tag: nvcr.io/nvidia/base/ubuntu:noble-20251013
|
|
VM_BASE_IMAGE="${VM_BASE_IMAGE:-nvcr.io/nvidia/base/ubuntu@sha256:43fa5063e80fbbc533892af3ccca190868ce48db5a8928b19d7815c40436af8e}"
|
|
|
|
# ── Container images for rootfs pre-loading (digest-pinned) ────────────
|
|
# Tag: registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.1.0
|
|
AGENT_SANDBOX_IMAGE="${AGENT_SANDBOX_IMAGE:-registry.k8s.io/agent-sandbox/agent-sandbox-controller@sha256:ba71ea40ae0872791197badf2ab84f3f482df3902f1fce7ca9e076b1de9b57f6}"
|
|
# Tag: ghcr.io/nvidia/openshell-community/sandboxes/base:latest
|
|
COMMUNITY_SANDBOX_IMAGE="${COMMUNITY_SANDBOX_IMAGE:-ghcr.io/nvidia/openshell-community/sandboxes/base@sha256:d446c17105e7448e602238a8a5a4ddd0233c071082406522f81c31f8b1309525}"
|
|
|
|
# SERVER_IMAGE is intentionally NOT pinned here — it changes frequently
|
|
# during local development. Override via IMAGE_REPO_BASE and IMAGE_TAG
|
|
# environment variables (defaults: openshell/gateway:dev).
|
|
|
|
# ── gvproxy (networking proxy) ──────────────────────────────────────────
|
|
# Repo: https://github.com/containers/gvisor-tap-vsock
|
|
GVPROXY_VERSION="${GVPROXY_VERSION:-v0.8.8}"
|
|
|
|
# ── umoci (guest OCI unpacker) ──────────────────────────────────────────
|
|
# Repo: https://github.com/opencontainers/umoci
|
|
UMOCI_VERSION="${UMOCI_VERSION:-v0.6.0}"
|
|
|
|
# ── libkrunfw upstream (commit-pinned) ─────────────────────────────────
|
|
# Repo: https://github.com/containers/libkrunfw
|
|
# Pinned: 2026-03-27 (main branch HEAD at time of pinning)
|
|
LIBKRUNFW_REF="${LIBKRUNFW_REF:-463f717bbdd916e1352a025b6fb2456e882b0b39}"
|