[Snyk] Security upgrade ubuntu from 20.04 to rolling

[msaroufim]

This PR was automatically created by Snyk using the credentials of a real user.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

• docker/Dockerfile

We recommend upgrading to ubuntu:rolling, as this image has only 6 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity	Priority Score / 1000	Issue	Exploit Maturity
	150	Uncontrolled Recursion SNYK-UBUNTU2004-PCRE3-580031	No Known Exploit
	150	Time-of-check Time-of-use (TOCTOU) SNYK-UBUNTU2004-SHADOW-577863	No Known Exploit
	150	Time-of-check Time-of-use (TOCTOU) SNYK-UBUNTU2004-SHADOW-577863	No Known Exploit
	300	Off-by-one Error SNYK-UBUNTU2004-SYSTEMD-3098845	No Known Exploit
	300	Off-by-one Error SNYK-UBUNTU2004-SYSTEMD-3098845	No Known Exploit

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[codecov]

Codecov Report

Merging #2064 (99ef4c1) into master (5ac9c51) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #2064   +/-   ##
=======================================
  Coverage   53.38%   53.38%           
=======================================
  Files          71       71           
  Lines        3224     3224           
  Branches       56       56           
=======================================
  Hits         1721     1721           
  Misses       1503     1503           

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[msaroufim]

Logs

(base) ubuntu@ip-172-31-17-70:~/serve/docker$ ./build_image.sh -b snyk-fix-e1077ba036875975fd0ab47e0f5bffb7 -g -cv cu117 -t marksaroufim/torchserve:gpu-prod    
[+] Building 202.1s (25/25) FINISHED                                                                                                                                                          
 => [internal] load build definition from Dockerfile                                                                                                                                     0.0s
 => => transferring dockerfile: 4.65kB                                                                                                                                                   0.0s
 => [internal] load .dockerignore                                                                                                                                                        0.0s
 => => transferring context: 2B                                                                                                                                                          0.0s
 => resolve image config for docker.io/docker/dockerfile:experimental                                                                                                                    0.6s
 => [auth] docker/dockerfile:pull token for registry-1.docker.io                                                                                                                         0.0s
 => CACHED docker-image://docker.io/docker/dockerfile:experimental@sha256:600e5c62eedff338b3f7a0850beb7c05866e0ef27b2d2e8c02aa468e78496ff5                                               0.0s
 => [internal] load metadata for docker.io/nvidia/cuda:11.7.0-cudnn8-runtime-ubuntu20.04                                                                                                 0.4s
 => [auth] nvidia/cuda:pull token for registry-1.docker.io                                                                                                                               0.0s
 => [internal] load build context                                                                                                                                                        0.0s
 => => transferring context: 80B                                                                                                                                                         0.0s
 => [compile-image 1/8] FROM docker.io/nvidia/cuda:11.7.0-cudnn8-runtime-ubuntu20.04@sha256:1dbd8330054ddabfcb0b772e2a56108232ff124fc8b62374e615c26e13e25d88                             0.0s
 => CACHED [runtime-image 2/9] RUN --mount=type=cache,target=/var/cache/apt     apt-get update &&     DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends -y     pyt  0.0s
 => CACHED [runtime-image 3/9] RUN useradd -m model-server     && mkdir -p /home/model-server/tmp                                                                                        0.0s
 => CACHED [compile-image 2/8] RUN --mount=type=cache,id=apt-dev,target=/var/cache/apt     apt-get update &&     apt remove python-pip  python3-pip &&     DEBIAN_FRONTEND=noninteracti  0.0s
 => CACHED [compile-image 3/8] RUN update-alternatives --install /usr/bin/python python /usr/bin/python3.8 1     && update-alternatives --install /usr/local/bin/pip pip /usr/local/bin  0.0s
 => CACHED [compile-image 4/8] RUN python3.8 -m venv /home/venv                                                                                                                          0.0s
 => CACHED [compile-image 5/8] RUN python -m pip install -U pip setuptools                                                                                                               0.0s
 => CACHED [compile-image 6/8] RUN export USE_CUDA=1                                                                                                                                     0.0s
 => [compile-image 7/8] RUN TORCH_VER=$(curl --silent --location https://pypi.org/pypi/torch/json | python -c "import sys, json, pkg_resources; releases = json.load(sys.stdin)['rele  129.8s
 => [compile-image 8/8] RUN python -m pip install -U setuptools && python -m pip install --no-cache-dir captum torchtext torchserve torch-model-archiver                                 3.9s
 => [runtime-image 4/9] COPY --chown=model-server --from=compile-image /home/venv /home/venv                                                                                            32.1s 
 => [runtime-image 5/9] COPY dockerd-entrypoint.sh /usr/local/bin/dockerd-entrypoint.sh                                                                                                  0.0s 
 => [runtime-image 6/9] RUN chmod +x /usr/local/bin/dockerd-entrypoint.sh     && chown -R model-server /home/model-server                                                                0.3s 
 => [runtime-image 7/9] COPY config.properties /home/model-server/config.properties                                                                                                      0.0s 
 => [runtime-image 8/9] RUN mkdir /home/model-server/model-store && chown -R model-server /home/model-server/model-store                                                                 0.4s 
 => [runtime-image 9/9] WORKDIR /home/model-server                                                                                                                                       0.0s 
 => exporting to image                                                                                                                                                                  20.2s
 => => exporting layers                                                                                                                                                                 20.1s
 => => writing image sha256:e644d414385932c08844d932e1602b2de2d5eada8f4f8d0936bd478fe8e42b3f                                                                                             0.0s
 => => naming to docker.io/marksaroufim/torchserve:gpu-prod