mirror of
https://github.com/blakeblackshear/frigate.git
synced 2026-11-10 15:43:01 +03:00
Josh HawkinsandGitHub
ca851a9238
* strip intel media driver on install The manually built iHD_drv_video.so was installed with full debug info, making it 513 MB in the image instead of 41 MB stripped. Installing with install/strip removes about 240 MB from the compressed amd64 image. * remove rjsf 6.11.0 dependabot hold The hold covered the GenAI form refilling the saved model after a provider switch. That was a GenAIModelWidget bug that rjsf 6.11 exposed, and it was fixed with the 6.11.1 bump in #24901, so no rjsf version needs holding. * strip intel media driver after install install/strip skipped iHD_drv_video.so because media-driver installs it with install(PROGRAMS), not as a target. Strip it directly instead. * bump dev docs version in header * attest published images with github build provenance Published images carried unsigned BuildKit provenance, so nothing tied an image digest to the commit it was built from. Each published image (the default multi-arch build and the six variants) now gets an actions/attest provenance attestation pushed to GHCR, verifiable with gh attestation verify. Release tags are skopeo copies with the same digest, so they're covered too. Storage records are off because they require an org-owned repo.
50 lines
2.0 KiB
Bash
Executable File
50 lines
2.0 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -euxo pipefail
|
|
|
|
# Intel media driver is x86_64-only. Create empty rootfs on other arches so
|
|
# the downstream COPY --from has a valid source.
|
|
if [ "$(uname -m)" != "x86_64" ]; then
|
|
mkdir -p /rootfs
|
|
exit 0
|
|
fi
|
|
|
|
MEDIA_DRIVER_VERSION="intel-media-25.2.6"
|
|
GMMLIB_VERSION="intel-gmmlib-22.7.2"
|
|
|
|
apt-get -qq update
|
|
apt-get -qq install -y wget gnupg ca-certificates cmake g++ make pkg-config
|
|
|
|
# Use Intel's jammy repo for newer libva-dev (2.22) which provides the
|
|
# VVC/VVC-decode headers required by media-driver 25.x
|
|
wget -qO - https://repositories.intel.com/gpu/intel-graphics.key | gpg --yes --dearmor --output /usr/share/keyrings/intel-graphics.gpg
|
|
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-graphics.gpg] https://repositories.intel.com/gpu/ubuntu jammy client" > /etc/apt/sources.list.d/intel-gpu-jammy.list
|
|
apt-get -qq update
|
|
apt-get -qq install -y libva-dev
|
|
|
|
# Build gmmlib (required by media-driver)
|
|
wget -qO gmmlib.tar.gz "https://github.com/intel/gmmlib/archive/refs/tags/${GMMLIB_VERSION}.tar.gz"
|
|
mkdir /tmp/gmmlib
|
|
tar -xf gmmlib.tar.gz -C /tmp/gmmlib --strip-components 1
|
|
cmake -S /tmp/gmmlib -B /tmp/gmmlib/build -DCMAKE_BUILD_TYPE=Release
|
|
make -C /tmp/gmmlib/build -j"$(nproc)"
|
|
make -C /tmp/gmmlib/build install
|
|
|
|
# Build intel-media-driver
|
|
wget -qO media-driver.tar.gz "https://github.com/intel/media-driver/archive/refs/tags/${MEDIA_DRIVER_VERSION}.tar.gz"
|
|
mkdir /tmp/media-driver
|
|
tar -xf media-driver.tar.gz -C /tmp/media-driver --strip-components 1
|
|
cmake -S /tmp/media-driver -B /tmp/media-driver/build \
|
|
-DCMAKE_BUILD_TYPE=Release \
|
|
-DENABLE_KERNELS=ON \
|
|
-DENABLE_NONFREE_KERNELS=ON \
|
|
-DCMAKE_INSTALL_PREFIX=/usr \
|
|
-DCMAKE_INSTALL_LIBDIR=/usr/lib/x86_64-linux-gnu \
|
|
-DCMAKE_C_FLAGS="-Wno-error" \
|
|
-DCMAKE_CXX_FLAGS="-Wno-error"
|
|
make -C /tmp/media-driver/build -j"$(nproc)"
|
|
|
|
# Install driver to rootfs for COPY --from
|
|
make -C /tmp/media-driver/build install DESTDIR=/rootfs
|
|
strip --strip-unneeded /rootfs/usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
|