Commit Graph

125 Commits

Author SHA1 Message Date
Mikko Ylinen
4193242a32 images: update license install path in all images
An earlier commit updated the license install paths in our
distroless based images. This updates the remaining ones
to stay consistent.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2022-02-24 07:01:16 +02:00
chaitanya1731
4633f22b51 Images: Updated base image to use 'ubi8-micro' image from RedHat
Signed-off-by: chaitanya1731 <chaitanya.kulkarni@intel.com>
2022-02-23 13:56:40 -05:00
Chaitanya Kulkarni
8c078f58e1
Images/Script - Added LABELs to all plugins (#894)
Added LABELs (name, vendor, version, release, summary, description) to all plugins and updated
scripts/set-version.sh script to include the LABEL version='<image-tag>' by passing TAG parameter
to make set-version TAG=<image-tag>

Signed-off-by: chaitanya1731 <chaitanya.kulkarni@intel.com>
2022-02-18 10:18:33 +02:00
chaitanya1731
2bcd863593 Images: Moved license path to /install_root/licenses/
Signed-off-by: chaitanya1731 <chaitanya.kulkarni@intel.com>
2022-02-15 13:27:52 -05:00
Mikko Ylinen
00633107d7 images: move to use go-licenses
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2022-01-26 13:38:13 +02:00
Mikko Ylinen
fd034118b0 images: update license obligations
In Debian, uuid and uuid-dev are totally different things.
accel-config build depends on uuid-dev headers but the runtime
library is libuuid1. This is part of debian:sid-slim so we can
just drop installing uuid. Moreover, it's sufficient that we
only ship accel-config source.

Also, correctly ship OPAE SDK COPYING in the final image.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2022-01-14 13:59:11 +02:00
Mikko Ylinen
b16625e614 images: update toybox to v0.8.6
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-12-22 13:05:43 +02:00
Oleg Zhurakivskyy
e281aaa11e dsa: Update idxd-config-initcontainer to accel-config v3.4.3
accel-config v3.4.3 dropped libkmod, libudev dependencies, update
initcontainer to v3.4.3 and drop local customizations / workarounds.

Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
2021-12-07 14:04:57 +02:00
Oleg Zhurakivskyy
6bba74acef dsa: Rename idxd-initcontainer to idxd-config-initcontainer
Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
2021-11-30 15:32:29 +02:00
Oleg Zhurakivskyy
fee2e12996 idxd-initcontainer: Drop libkmod, libudev
- Make libkmod, libudev optional
- Include accel-config, libjson-c, libuuid sources

Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
2021-11-30 15:32:23 +02:00
Hyeongju Johannes Lee
8362028560 dlb: Add new device plugin
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2021-11-11 11:51:49 +02:00
Oleg Zhurakivskyy
a7c612f7fc dsa: Rename dsa initcontainer to idxd
Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
2021-11-09 12:00:44 +02:00
Mikko Ylinen
d195e4a308 images: update pre-pull images
'make pre-pull' pulls the latest (base) images so that the image
build can share the cached pulls.

Update the list of pre-pull images to what we actually use in our
Dockerfiles.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-10-19 12:37:36 +03:00
Mikko Ylinen
a0f81d7574 go.mod: move to Go 1.17
go mod tidy adds more requirements because of the changes in 1.17:

"Go versions 1.17 and higher retain more requirements in order to
support lazy module loading."

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-10-08 13:10:08 +03:00
Oleg Zhurakivskyy
efb357d47f images: Add intel-dsa-initcontainer
Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
2021-10-01 10:40:24 +03:00
Mikko Ylinen
1fc087e62a qat: kerneldrv: use debian unstable as base
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-09-28 08:23:09 +03:00
Mikko Ylinen
7ef78e3176 vpu: use debian unstable as base
To align with other images that use Debian, move intel-vpu-plugin
container image to use unstable too.

Both the build image and the final base image use libusb-1.0 which
is ABI compatible.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-09-27 14:54:44 +03:00
Ed Bartosh
83f87ea55c change golang base to Debian bullseye
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2021-09-27 11:53:45 +03:00
Hyeongju Johannes Lee
b90812961e Add checksum checks for toybox and qat driver
Add checksum checks for toybox and qat driver
Use toybox version 0.8.5 instead of 0.8.4
Update toybox-config

Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2021-09-15 09:44:56 +03:00
Xinran Wang
60b0bfd265 Update qat driver in qat plugin image 2021-09-01 11:05:15 +00:00
Mikko Ylinen
f59a1fb9dc Move to Go 1.16.x
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-06-02 13:41:15 +03:00
Mikko Ylinen
06dbc1331b images: move intel-qat-plugin-kerneldrv to Debian
Also, update the documentation to reflect what is needed to
enable and use '-mode kernel'.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-06-02 13:39:39 +03:00
Mikko Ylinen
7000d30a35 images: update initcontainers and VPU plugin to new base images
This is the part 2 of the work to move our published container images
to new base images. The initcontainers will be based on
distroless/static and the VPU plugin is based on Debian.

Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-06-01 15:05:32 +03:00
Mikko Ylinen
c3cf958c85 images: move most plugin images to distroless/static
All but one (VPU) of the published container images can be built with
static binaries which allows us to use distroless/static as the
base image. Moreover, when combined with stripping the plugin binaries,
we can get both build time and image size savings.

This is the part 1 (out of 2) of the rework. Part 2 will finish the
change by making some adjustments to VPU plugin image and moving the
FPGA/SGX/GPU initcontainers to distroless/static too.

Partial: #516

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2021-05-19 09:44:47 +03:00
Mikko Ylinen
280bdceb2a sgx: add separate admissionwebhook image
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-04-14 08:09:33 +03:00
Mikko Ylinen
47e138acf1 Revert "ci: workaround buildah errors"
This reverts commit 6c02ff51fc.

crun fails to build the images [1] but when setting BUILDAH_RUNTIME
to runc the workaround is no longer needed.

[1] https://github.com/containers/podman/issues/9378

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-02-26 11:54:10 +02:00
Mikko Ylinen
aee9dd20f8 images: force buildah to use runc
buildah 1.19.4 and its dependencies when installed from the
libcontainers OBS repo, defaulted to crun and that made the
image builds to fail.

By forcing buildah to use runc instead, everything works OK.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-02-26 11:48:59 +02:00
Mikko Ylinen
6c02ff51fc ci: workaround buildah errors
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-02-16 12:09:49 +02:00
Mikko Ylinen
32ee51e7cc images: add Clear Linux workaround
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-12-23 12:15:06 +02:00
Ed Bartosh
174643436a implement DSA plugin
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2020-12-03 17:24:48 +02:00
Dmitry Rozhkov
1657b6ea95 operator: run as non-root 2020-11-16 13:42:57 +02:00
Mikko Ylinen
aed51bda06 openssl-qat-engine: update component versions
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-11-04 13:18:40 +02:00
Ukri Niemimuukko
505eadaf94 gpu-plugin nfd-hook
This adds an nfd-hook for the gpu-plugin, which will create labels
for the GPUs that can then be used for POD deployment purposes or
creation of GPU extended resources which allow then finer grained
GPU resource management.

The nfd-hook will install to the host system when the
intel-gpu-initcontainer is run. It is added into the plugin deployment
yaml.

Signed-off-by: Ukri Niemimuukko <ukri.niemimuukko@intel.com>
2020-10-01 12:02:57 +03:00
Mikko Ylinen
ae28b1c788 images: distribute copyleft sources
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-09-21 17:07:06 +03:00
Mikko Ylinen
a5f648077e sgx: add NFD EPC source, README and deployment YAMLs
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-08-24 16:33:45 +03:00
Mikko Ylinen
1cfb849eef qat: update QAT software stack
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-08-12 23:08:59 +03:00
Dmitry Rozhkov
6b2fa0a264 operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
Mikko Ylinen
4c64a2dab4 repo: drop .travis.yaml and update CODEOWNERS
Also, fix intel-vpu-plugin.Dockerfile build to get CI
passing. Clear Linux changed the license file names and
we had the name 'COPYING' hard coded which made install to fail.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-04-15 14:11:39 +03:00
Mikko Ylinen
a013595226 build: pass extra builder arguments from users
Users had no options to specify extra builder arguments to $BUILDER.

With this patch it's possible, e.g., to build QAT plugin with kernel
mode support:

make intel-qat-plugin EXTRA_BUILD_ARGS="--build-arg TAGS_KERNELDRV=kernel

Fixes: #234

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-03-16 20:19:16 +02:00
Mikko Ylinen
3ca0978c1d
openssl-qat-engine: update QAT stack versions (#304)
* openssl-qat-engine: update QAT stack versions

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-03-16 19:37:31 +02:00
Ed Bartosh
8a4fae3576 vpu plugin: fix image build failure
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2020-03-16 17:57:19 +02:00
Mikko Ylinen
3b9c57656d images: make os-core install implicit
swupd os-install fails (clearlinux/swupd-client/issues/1369) if
"--bundles=os-core" is used. It was confirmed that os-core is
always installed first regardless of what other --bundles are
specified.

To get the builds working, we move to rely on that implicit os-core
install.

Fixes: #330

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-03-12 18:55:01 +02:00
Mikko Ylinen
f545e0c2ed images: vpu: set Clear Linux version
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-03-03 14:54:39 +02:00
Antti Kervinen
5fe8174077 fpga_plugin: add kustomization files
- Add script/fpga-plugin-prepare-for-kustomization.sh, creates contents
  for the secret needed by the fpga plugin webhook.
- Single-command fpga plugin + webhook deployment for both modes:
  - `kubectl create -k deployments/fpga_plugin/overlays/af`
  - `kubectl create -k deployments/fpga_plugin/overlays/region`
- Change intel-fpga-plugin image CMD to ENTRYPOINT.
2020-02-24 16:32:26 +02:00
Alek Du
887e56e780 VPU: Add Intel Movidius MyriadX VPU plugin support
This patch is to support Intel VCAC-A card (with MyriadX 2485 VPUs), for other
later on VPUs, we will reuse this plugin and add support.

VCAC-A board info is at:
https://www.intel.com/content/dam/www/public/us/en/documents/datasheets/media-analytics-vcac-a-accelerator-card-by-celestica-datasheet.pdf

Also add openvino HDDL VPU demo for Intel VCAC-A card.

Signed-off-by: Alek Du <alek.du@intel.com>
2020-01-28 23:17:50 +08:00
Ed Bartosh
368f34c76b fpga: run webhook container with user privileges
Modified deployment template and script to run admission controller
webhook with user credentials.
2020-01-14 16:31:32 +02:00
Mikko Ylinen
27783e7b94 images: add LICENSEs
This commit adds a script that is (primarily) used in Dockerfiles
to install runtime Go dependencies' LICENSE/NOTICE files into the
image and modifies the Dockerfiles to use the script.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-11-13 10:50:57 +02:00
Mikko Ylinen
e6524eaada images: drop SRCREV tag
The SRCREV tag becomes a RepoTag we end up having those tags in the
registry too.

To keep the registry clean, drop SRCREV tags.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-11-01 14:43:48 +02:00
Mikko Ylinen
d3354d0522 travis: Use vendored code for container builds
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-11-01 14:32:26 +02:00
Mikko Ylinen
bfcac03e48 deployments: fix QAT plugin command path
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-08-29 13:21:42 +03:00
Mikko Ylinen
d06f98690f images: tag with intel prefix
In preparations to get some of the images to hub.docker.com/intel,
start using intel/ prefix.

Moreover, set the Makefile variables so that the images built
by make [images|demos] can easily be pushed to any registry/org
by 'docker push' (e.g., by Jenkins).

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-08-29 13:21:19 +03:00
Alexander D. Kanevskiy
9d585ea0b8
Merge pull request #209 from bart0sh/PR0061-fix-deployment-setup
fpga: fix deployment setup
2019-08-27 16:26:13 +03:00
Dmitry Rozhkov
097ce827de Add support for go mod
See https://github.com/kubernetes/kubernetes/issues/79384 for details on
how to update K8s dependencies.
2019-08-27 11:40:18 +03:00
Ed Bartosh
a4c124777a fpga: fix deployment setup
- used ENTRYPOINT instead of CMD in plugin and admission webhook
  Dockerfiles to avoid duplicating commands in the pod yamls
- fixed path to deploy.sh script in fpga initcontainer Dockerfile
2019-08-27 11:03:03 +03:00
Alexander Kanevskiy
6fd729f12c Cleanup and fixes for FPGA initcontainer
- Simplify initcontainer, we don't need OPAE anymore
- Remove old initcontainer related files
2019-08-25 02:37:07 +03:00
Mikko Ylinen
04be52e0a1 fpga: move to clearlinux based images
Switch to clearlinux based image and rootfs and add
enablers to make builds reproducible.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-08-24 18:27:39 +03:00
Alexander Kanevskiy
186ec6613c FPGA: migrate to ClearLinux environment
- Migrate to OPAE 1.3.2
- Build all the tools from the source
- ignore files in workspace
- minimal fpga_tool utility to check gbs/aocx file parsing and flashing
- implemented kernel IOCTL based flashing of bitstreams
- add PCI and sysfs functions
2019-08-24 02:55:19 +03:00
Mikko Ylinen
1023504dce gpu: move to clearlinux based images
Switch to clearlinux based image and rootfs and add
enablers to make builds reproducible.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-08-20 22:01:44 +03:00
Mikko Ylinen
144b45fba9 qat: move to clearlinux based images
The modifications also bring enablers to "reproducible" builds.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-08-20 22:01:44 +03:00
Mikko Ylinen
9f3537ab6a qat: update to qat1.7.l.4.6.0-00025
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-07-23 15:06:12 +03:00
Alexander Kanevskiy
65c44b92f9 User ClearLinux as base builder image 2019-06-18 18:13:55 +03:00
Ubuntu
ded152e8a4 Move FPGA plugin to Distroless and Clearlinux
Signed-off-by: Ubuntu <hector.augusto.garcia.baleon@intel.com>
2019-06-14 18:11:32 +00:00
Mikko Ylinen
822abe5d49 Move QAT and GPU plugins to Distroless
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-05-19 03:16:22 +03:00
Mikko Ylinen
23598e7839 build-image: always pull the latest base image
With this change, we make sure the local build always pulls the
latest version of the base image.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2019-05-14 20:39:36 +03:00
Dmitry Rozhkov
2683a07be0 qat: update to qat1.7.l.4.5.0-00034 2019-05-03 10:25:07 +03:00
Dmitry Rozhkov
ca569b0f70 qat: initial support for openssl QAT engine 2019-04-25 14:14:09 +03:00
Dmitry Rozhkov
5ee4de98b3
Merge pull request #109 from bart0sh/PR0047-build-images-with-buildah
Build images with buildah
2018-10-12 16:16:03 +03:00
Dmitry Rozhkov
1732a69e6b bump up Go lang version
The version 1.11 is required to use the latest features of the
`text/template` standard library (mutable variables in templates).
2018-10-04 10:19:23 +03:00
Ed Bartosh
891d69de83 Use buildah to build images
Added alternative builder for project images: buildah
https://github.com/containers/buildah

Considering that some of our plugins use CRI-O runtime it could be
a good idea to get rid of docker as a builder. It should allow us
not to run docker daemon at all, even for build purposes.

Kubernetes also goes this way encouraging users to switch to CRI
runtimes (CRI-O and containerd), so having non-docker builds supported
looks good from this perspective too.
2018-09-28 17:21:12 +03:00
Dmitry Rozhkov
eccd70c600 replace glog with simpler home-grown debug logging 2018-08-16 17:40:16 +03:00
Dmitry Rozhkov
fac7971f10 bump up Go version for Docker builds
This fixes build error:
github.com/intel/intel-device-plugins-for-kubernetes/internal/deviceplugin
../../internal/deviceplugin/server.go:186: cannot use srv (type *server) as type v1beta1.DevicePluginServer in argument to v1beta1.RegisterDevicePluginServer:
	*server does not implement v1beta1.DevicePluginServer (wrong type for Allocate method)
		have Allocate("context".Context, *v1beta1.AllocateRequest) (*v1beta1.AllocateResponse, error)
		want Allocate("github.com/intel/intel-device-plugins-for-kubernetes/vendor/golang.org/x/net/context".Context, *v1beta1.AllocateRequest) (*v1beta1.AllocateResponse, error)
2018-08-07 17:06:07 +03:00
ssehgal
3eb2b10f75 Enabling support for QuickAssist Devices 2018-07-23 17:35:37 +01:00
Dmitry Rozhkov
0e810a6cd8 tweak intel-fpga-plugin.Dockerfile to send logs to stderr by default 2018-06-20 09:36:52 +03:00
Dmitry Rozhkov
562f8fe722 fpga-admissionwebhook: add initial implementation 2018-06-19 14:55:59 +03:00
Dmitry Rozhkov
6a34355da3 simplify Makefile 2018-06-07 15:42:39 +03:00