fix: Upgrade to torch 2.6+ for CVE-2025-32434 compliance

- Use runpod/pytorch:1.0.3-cu1290-torch260-ubuntu2204 base image
- Torch 2.6.0 required by transformers for secure model loading
- CUDA 12.9 compatible
This commit is contained in:
2026-02-03 06:02:38 +00:00
parent 7a7b737cc0
commit 9b66b5fd14

View File

@@ -1,14 +1,12 @@
FROM runpod/pytorch:2.4.0-py3.11-cuda12.4.1-devel-ubuntu22.04
FROM runpod/pytorch:1.0.3-cu1290-torch260-ubuntu2204
WORKDIR /app
# Copy requirements first for better caching
COPY requirements.txt /app/requirements.txt
# Upgrade pip and install dependencies
# Force upgrade torch to ensure compatibility with transformers
# Install dependencies (torch 2.8 in base image satisfies CVE-2025-32434)
RUN pip install --upgrade pip && \
pip install --no-cache-dir torch==2.4.0 --force-reinstall && \
pip install --no-cache-dir -r requirements.txt
# Copy handler and data