[RHEL9] support passing a RockyLinux base image

Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>

Author: tariq1890

.common-ci.yml

@@ -131,6 +131,10 @@ trigger-pipeline:
   variables:
     DIST: rhel10
 
+.dist-rocky9:
+  variables:
+    DIST: rocky9
+
 .dist-fedora36:
   variables:
     DIST: fedora36
@@ -216,6 +220,14 @@ trigger-pipeline:
   rules:
     - if: $CI_PIPELINE_SOURCE != "schedule" && $CI_COMMIT_TAG == null
 
+.release-rocky9:
+  # Perform for each DRIVER_VERSION
+  extends:
+    - .release-generic
+    - .driver-versions
+  rules:
+    - if: $CI_PIPELINE_SOURCE != "schedule" && $CI_COMMIT_TAG == null
+
 .release-rhel10:
   # Perform for each DRIVER_VERSION
   extends:
@@ -280,6 +292,15 @@ trigger-pipeline:
     OUT_REGISTRY: "${NGC_REGISTRY}"
     OUT_IMAGE_NAME: "${NGC_STAGING_REGISTRY}/driver"
 
+.release:staging-rocky9:
+  extends:
+    - .release-rocky9
+  variables:
+    OUT_REGISTRY_USER: "${NGC_REGISTRY_USER}"
+    OUT_REGISTRY_TOKEN: "${NGC_REGISTRY_TOKEN}"
+    OUT_REGISTRY: "${NGC_REGISTRY}"
+    OUT_IMAGE_NAME: "${NGC_STAGING_REGISTRY}/driver"
+
 # Define an external release step that pushes an image to an external repository.
 .release:external:
   extends:
@@ -355,6 +376,13 @@ release:staging-rhel9:
 #  needs:
 #    - image-rhel10
 
+release:staging-rocky9:
+  extends:
+    - .release:staging
+    - .dist-rocky9
+  needs:
+    - image-rocky9
+
 .release:staging-precompiled:
   stage: release
   variables:

.github/workflows/image.yaml

@@ -38,6 +38,7 @@ jobs:
           - rhel8
           - rhel9
           - rhel10
+          - rocky9
         ispr:
           - ${{github.event_name == 'pull_request'}}
         exclude:
@@ -71,8 +72,8 @@ jobs:
           echo "PUSH_ON_BUILD=${GENERATE_ARTIFACTS}" >> $GITHUB_ENV
           echo "BUILD_MULTI_ARCH_IMAGES=${GENERATE_ARTIFACTS}" >> $GITHUB_ENV
           
-          if [[ "${{ matrix.dist }}" =~ "rhel" ]]; then
-             echo "CVE_UPDATES=openssl python3-urllib3 libarchive libxml2 pam python3 sqlite-libs gnupg2" >> $GITHUB_ENV
+          if [[ "${{ matrix.dist }}" =~ "rhel" || "${{ matrix.dist }}" =~ "rocky" ]]; then
+          echo "CVE_UPDATES=openssl python3-urllib3 libarchive libxml2 pam python3 sqlite-libs gnupg2" >> $GITHUB_ENV
           elif [[ "${{ matrix.dist }}" =~ "ubuntu" ]]; then
              echo "CVE_UPDATES=gnupg2" >> $GITHUB_ENV
           fi

.nvidia-ci.yml

@@ -161,6 +161,11 @@ image-rhel9:
 #    - .image-pull-rhel10
 #    - .dist-rhel10
 
+image-rocky9:
+  extends:
+    - .image-pull
+    - .dist-rocky9
+
 # The .scan step forms the base of the image scan operation performed before releasing
 # images.
 .scan-generic:
@@ -376,6 +381,22 @@ scan-rhel9-arm64:
 #  needs:
 #    - image-rhel10
 
+scan-rocky9-amd64:
+  extends:
+    - .scan
+    - .dist-rocky9
+    - .platform-amd64
+  needs:
+    - image-rocky9
+
+scan-rocky9-arm64:
+  extends:
+    - .scan
+    - .dist-rocky9
+    - .platform-arm64
+  needs:
+    - image-rocky9
+
 .release:ngc-variables:
   variables:
     OUT_REGISTRY_USER: "${NGC_REGISTRY_USER}"
@@ -495,6 +516,11 @@ release:ngc-rhel9.8:
   variables:
     OUT_DIST: "rhel9.8"
 
+release:ngc-rocky9:
+  extends:
+    - .release:ngc
+    - .dist-rocky9
+
 #release:ngc-rhel10.0:
 #  extends:
 #    - .release:ngc

Makefile

@@ -54,7 +54,7 @@ OUT_IMAGE_TAG = $(OUT_IMAGE_VERSION)-$(OUT_DIST)
 OUT_IMAGE = $(OUT_IMAGE_NAME):$(OUT_IMAGE_TAG)
 
 ##### Public rules #####
-DISTRIBUTIONS := ubuntu18.04 ubuntu20.04 ubuntu22.04 ubuntu24.04 signed_ubuntu20.04 signed_ubuntu22.04 signed_ubuntu24.04 rhel8 rhel9 rhel10 flatcar fedora36 sles15.3 precompiled_rhcos
+DISTRIBUTIONS := ubuntu18.04 ubuntu20.04 ubuntu22.04 ubuntu24.04 signed_ubuntu20.04 signed_ubuntu22.04 signed_ubuntu24.04 rhel8 rhel9 rhel10 rocky9 flatcar fedora36 sles15.3 precompiled_rhcos
 RHCOS_VERSIONS := rhcos4.14 rhcos4.15 rhcos4.16 rhcos4.17 rhcos4.18 rhel9.6
 PUSH_TARGETS := $(patsubst %, push-%, $(DISTRIBUTIONS))
 BASE_FROM := noble jammy focal
@@ -177,6 +177,9 @@ $(DRIVER_BUILD_TARGETS):
 
 build-rhcos%: SUBDIR = rhel9
 
+build-rocky9%: SUBDIR = rhel9
+build-rocky9%: DOCKER_BUILD_ARGS = --build-arg BASE_IMAGE=nvcr.io/nvidia/cuda:13.1.1-base-rockylinux9
+
 build-fedora%: SUBDIR = fedora
 
 build-sles15%: SUBDIR = sle15

rhel9/install.sh

@@ -146,6 +146,12 @@ extra_pkgs_install() {
   if [ "$DRIVER_TYPE" != "vgpu" ]; then
       dnf module enable -y nvidia-driver:${DRIVER_BRANCH}-dkms
 
+      # If running on a RockyLinux base image, we enable the Code Ready Builder RPM repo (crb)
+      OS_RELEASE_ID=$(grep -oP '(?<=^ID=).+' /etc/os-release | tr -d '"')
+      if [ "$OS_RELEASE_ID" = "rocky" ]; then
+        dnf config-manager --set-enabled crb
+      fi
+
       fabricmanager_install
       nscq_install
       nvsdm_install