Skip to main content

Nvidia Docker Images are Unsigned.

I've been finding that physics simulations that tax a GPU are very taxing on a virtual system in KVM when you don't have a GPU passthrough.

NVidia created their own Docker image that allows this seamlessly. I worry though that the Docker infrastructure is to be cavalier about the signing process for what gets to be part of an official image. For example Nvidia does not sign their docker images.

https://gitlab.com/nvidia/container-images/cuda/-/issues/108#note_502102151

Tags

Fixing an unsigned binary security vulnerability in Kubernetes/Docker deployments

The power of Open Source technology is the ability to delve deeply into the guts of a released project to see what's happening behind the scenes. That usually requires not just downloading the completed packages and looking at the code, but replicating the process used to create the packages and seeing if you get the same thing on an independent system.

Verifying hashes and core tarfiles or How I found the security issue in the official docker ubuntu release

Ubuntu does an excellent job of setting a trust chain that can be tracked all the way down to the original code both with hashes and signatures. You can follow the base code signature and hashes all the way up to the final signed/hashed distribution.  How about docker?

Update 4: "Spread the infection protest" of April 24 and results

2020-05-13: The science of spreading disease states that the more exposure to a virus, the more likely you are to be infected. And we see that clearly in COVID-19 as those counties most likely to participate in the "Spread the infection" protests became those counties with the largest increase in per-capita infections. WI Counties COVID-19 Infection Map

Tags

Update 2: MI "spread the infection" protest had a big result, next is Wisconsin

You can see the results of the spread the infection protest in MI in the graph below. The end effect that MI has been pushed back to peak infection rate levels.  As you see in the graph - since MI is 10 days ahead of WI, one would expect a similar peak after the WI spread the infection protest on 2020-04-24

 

WI vs MI on 2020-04-29

 

Tags
Subscribe to