fix(neuronx): apparmor and gevent vulnerabilities

aws · Oct 29, 2024 · 0c8dc5a · 0c8dc5a
1 parent c949bb8
commit 0c8dc5a
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/huggingface/pytorch/training/docker/2.1/py3/sdk2.20.0/Dockerfile.neuronx b/huggingface/pytorch/training/docker/2.1/py3/sdk2.20.0/Dockerfile.neuronx
@@ -12,6 +12,7 @@ LABEL dlc_major_version="1"
 ARG OPTIMUM_NEURON_VERSION=0.0.25
 ARG TRANSFORMERS_VERSION
 ARG DATASETS_VERSION
+ARG GEVENT_VERSION=24.2.1
 ARG PYTHON=python3
 
  # install Hugging Face libraries and its dependencies
@@ -21,7 +22,8 @@ RUN pip install --no-cache-dir \
 	transformers[sklearn,sentencepiece,audio,vision]==${TRANSFORMERS_VERSION} \
 	datasets==${DATASETS_VERSION} \
 	optimum-neuron==${OPTIMUM_NEURON_VERSION} \
-    peft
+    peft \
+	gevent==${GEVENT_VERSION}
 
 # Pin numpy to version required by neuronx-cc
 # Update Pillow and urllib version to fix high and critical vulnerabilities
@@ -33,12 +35,13 @@ RUN pip install -U \
 	"urllib3>=1.26.17,<1.27"
 
 RUN apt-get update \
- && apt install -y git-lfs \
+ && apt install -y --no-install-recommends \
+    git-lfs \
 	libgssapi-krb5-2 \
 	libexpat1 \
 	expat \
-	apparmor \
 	libarchive13 \
+ && apt-get upgrade -y apparmor \
  && apt-get clean \
  && rm -rf /var/lib/apt/lists/*