Chainguard AI Images by Chainguard are a suite of CPU and GPU-enabled container images, including popular frameworks like PyTorch, Conda, and Kafka. These images are hardened, minimal, and optimized for efficient AI development and deployment. By leveraging Chainguard AI Images, organizations can secure their AI infrastructure, streamline vulnerability management, and maintain high performance with low-to-zero vulnerabilities. Pre-built images with rapid vulnerability patching protect AI applications from emerging threats. Minimal configurations and lightweight images reduce overhead and improve runtime efficiency. Chainguard AI Images meet and exceed AI security compliance requirements, streamlining audits and regulatory processes. The solution offers optimized GPU-enabled images, including drivers and libraries for secure deployment and management of GPU-accelerated AI applications with low-to-zero vulnerabilities and hardened configurations. Chainguard AI Images are designed for customers focused on business innovation and security, simplifying the AI/ML stack to enable businesses to utilize these technologies without complex infrastructure management. The current runtime release of the official PyTorch image on Docker Hub contains 1 critical, 23 high, 1,189 medium, and 72 low CVEs according to the Grype vulnerability scanner as run on July 24, 2024. The Chainguard AI Image for PyTorch has zero CVEs and new CVEs are rapidly patched, often within hours. Chainguard Images are rebuilt daily, with mitigations applied to packages in the upstream Wolfi distro within hours of public release, ready for the next day's build. Chainguard AI Images provide both development and runtime versions. Development images have tools for training or development, while production images are ideal for inference. Chainguard AI Images are smaller on disk than comparable official images, which is important for ultra-large frameworks and libraries that can break infrastructure like automated container scanners. Every Chainguard Image comes with an included Software Bill of Materials (SBOM) itemizing all included software artifacts. Chainguard Images are also reproducible from their attestations (signed build configurations).
