Add NVIDIA Container Toolkit v1.17.7 release notes

Signed-off-by: Evan Lezar <[email protected]>
Co-authored-by: Abigail McCarthy <[email protected]>

Author: elezar

container-toolkit/release-notes.md

@@ -10,6 +10,78 @@ This document describes the new features, improvements, fixed and known issues f
 
 ______________________________________________________________________
 
+## NVIDIA Container Toolkit 1.17.7
+
+This release of the NVIDIA Container Toolkit `v1.17.7` is a bugfix and minor feature release.
+
+### Fixes and Features
+- Fixed mode detection on Thor-based systems. With this change, the runtime mode correctly resolves to `csv`.
+- Fixed the resolution of libraries in the LDCache on ARM. This fixes CDI spec generation on ARM-based systems using NVML.
+- Added a `nvidia-container-runtime-modes.legacy.cuda-compat-mode` option to provide finer control of how CUDA Forward Compatibility is handled. The default value (`ldconfig`) fixes CUDA Compatibility Support in cases where only the NVIDIA Container Runtime Hook is used (e.g. the Docker `--gpus` command line flag).
+- Improved the `update-ldcache` hook to run in isolated namespaces. This improves hook security.
+
+
+#### Enhancements to libnvidia-container
+- Added a `--cuda-compat-mode` flag to the `nvidia-container-cli configure` command. The `--no-cntlibs` argument is deprecated and is replaced by the `--cuda-compat-mode=disabled` option.
+  Refer to the [known issue](#known-issues) section for details on a known issue when using this flag.
+
+#### Enhancements to container-toolkit Container Images
+- Updated the CUDA base image version to 12.9.0.
+
+### Included Packages
+
+The following packages are included:
+
+- `nvidia-container-toolkit 1.17.7`
+- `nvidia-container-toolkit-base 1.17.7`
+- `libnvidia-container-tools 1.17.7`
+- `libnvidia-container1 1.17.7`
+
+The following `container-toolkit` conatiners are included:
+
+- `nvcr.io/nvidia/k8s/container-toolkit:v1.17.7-ubi8`
+- `nvcr.io/nvidia/k8s/container-toolkit:v1.17.7-ubuntu20.04` (also as `nvcr.io/nvidia/k8s/container-toolkit:v1.17.7`)
+
+### Known Issues
+
+There is a [known issue](https://github.com/NVIDIA/nvidia-container-toolkit/issues/1093) in this release that causes unexpected failures when using the default value of the `cuda-compat-mode` flag in the following scenarios:
+
+* When invoking `nvidia-container-cli` directly. For example if you are using Enroot containers with Slurm.
+
+* When older versions of the `nvidia-container-toolkit` and `nvidia-container-toolkit-base` packages are used with the latest `libnvidia-container-tools` and `libnvidia-container1` packages.
+For example if you are only pinning the `nvidia-contianer-toolkit` and `nvidia-container-toolkit-base` package versions.
+
+This issue is caused by container flags being discarded when handling the default values of the `cuda-compat-mode` flag.
+This flag was added to the `nvidia-container-cli configure` command in the this release.
+
+```{important}
+If you are impacted by this issue, its recommended that you continue to use Container Toolkit v1.17.6 and pin all dependencies to v1.17.6 until this issue is resolved in the next patch release.
+```
+
+#### Pin dependencies to Container Toolkit 1.17.6
+
+**Using `apt` (Ubuntu, Debian):**
+
+```
+NVIDIA_CONTAINER_TOOLKIT_VERSION=1.17.6-1 \
+    apt-get install -y --allow-downgrades \
+        nvidia-container-toolkit=${NVIDIA_CONTAINER_TOOLKIT_VERSION} \
+        nvidia-container-toolkit-base=${NVIDIA_CONTAINER_TOOLKIT_VERSION} \
+        libnvidia-container-tools=${NVIDIA_CONTAINER_TOOLKIT_VERSION} \
+        libnvidia-container1=${NVIDIA_CONTAINER_TOOLKIT_VERSION}
+```
+
+**Using `dnf` (RHEL/CentOS, Fedora, Amazon Linux):**
+
+```  
+NVIDIA_CONTAINER_TOOLKIT_VERSION=1.17.6-1 \
+    dnf install -y \
+        nvidia-container-toolkit-${NVIDIA_CONTAINER_TOOLKIT_VERSION} \
+        nvidia-container-toolkit-base-${NVIDIA_CONTAINER_TOOLKIT_VERSION} \
+        libnvidia-container-tools-${NVIDIA_CONTAINER_TOOLKIT_VERSION} \
+        libnvidia-container1-${NVIDIA_CONTAINER_TOOLKIT_VERSION}
+```
+
 ## NVIDIA Container Toolkit 1.17.6
 
 This release of the NVIDIA Container Toolkit `v1.17.6` is a bugfix and minor feature release.
@@ -23,7 +95,7 @@ The following packages are included:
 
 The following `container-toolkit` conatiners are included:
 
-- `nvcr.io/nvidia/k8s/container-toolkit:v1.17.6-ubi9`
+- `nvcr.io/nvidia/k8s/container-toolkit:v1.17.6-ubi8`
 - `nvcr.io/nvidia/k8s/container-toolkit:v1.17.6-ubuntu20.04` (also as `nvcr.io/nvidia/k8s/container-toolkit:v1.17.6`)
 
 ### Fixes and Features
@@ -50,7 +122,7 @@ The following packages are included:
 
 The following `container-toolkit` conatiners are included:
 
-- `nvcr.io/nvidia/k8s/container-toolkit:v1.17.5-ubi9`
+- `nvcr.io/nvidia/k8s/container-toolkit:v1.17.5-ubi8`
 - `nvcr.io/nvidia/k8s/container-toolkit:v1.17.5-ubuntu20.04` (also as `nvcr.io/nvidia/k8s/container-toolkit:v1.17.5`)
 
 ### Fixes and Features

container-toolkit/versions.json

@@ -1,7 +1,10 @@
 {
-    "latest": "1.17.6",
+    "latest": "1.17.7",
     "versions":
     [
+        {
+            "version": "1.17.7"
+        },
         {
             "version": "1.17.6"
         },

container-toolkit/versions1.json

@@ -1,6 +1,10 @@
 [
   {
     "preferred": "true",
+    "url": "../1.17.7",
+    "version": "1.17.7"
+  },
+  {
     "url": "../1.17.6",
     "version": "1.17.6"
   },

repo.toml

@@ -101,7 +101,7 @@ project_build_order = [
 docs_root = "${root}/container-toolkit"
 project = "container-toolkit"
 name = "NVIDIA Container Toolkit"
-version = "1.17.6"
+version = "1.17.7"
 copyright_start = 2020
 redirects = [
   { path="concepts.html", target="index.html" },