llama.cpp c1d0e7a CUDA 12.8.1 Linux x86-64: the qualified reproducible archive 7fd27fca

BUILD-INFO.txt

@@ -0,0 +1,20 @@
+llama.cpp commit: c1d0e7a004015f23bc0233470b747b596f29b264
+cuda image: nvidia/cuda:12.8.1-devel-ubuntu22.04@sha256:a99a1860ba8e2916e5c3e73b72ec4c4301653a84586e05bfc9a2aa2d58027e97
+cuda architectures: 50-real;52-real;60-real;61-real;70-real;75-real;80-real;86-real;89-real;90-real;100-real;120-real
+Build cuda_12.8.r12.8/compiler.35583870_0
+gcc (Ubuntu 11.4.0-1ubuntu1~22.04) 11.4.0
+ubuntu snapshot: 20260929T000000Z
+ca-certificates	20260601~22.04.1
+cmake	3.22.1-1ubuntu1.22.04.2
+git	1:2.34.1-1ubuntu1.17
+ninja-build	1.10.1-1
+patchelf	0.14.3-1
+build container: Docker default seccomp profile plus personality(ADDR_NO_RANDOMIZE)
+seccomp profile passed to docker: 8cf97f143e83686dbb89219ad2d8f84c054a9db0b19bcd0797278bf6e37f477d
+536529b665dd0972c37bfb569f5d4ac8a53592e7b00752bc39ff063ca9864c74  docker-default-seccomp.json
+49408aa77e29734b9102b535e31ede762fdb39be647874b2c22f6fee0f135740  seccomp.py
+16b7f6d55f39a97b6e4541bba9ec29d67830506e76644b8a3f5b76b3bfb11b59  nvcc_launcher.sh
+a997bd388cf887bb3f428a7c46a37420ff81956a6c0f96fd9088ab8b93a8c69d  fixed_pid.c
+c2025a721b3c1ae810b70a0d377ce2e08a51d77e6eec27e9cdee87be66c60d03  pin_source_times.sh
+4324218250797daeba0190f9f48503be0755e8c4e2b7e518f56128e3e80f0aac  apt_snapshot.sh
+9639aa9d7df18a9eb548b903abe23034c35ad5375070ee30b8e3ed1a0646ea2f  cmake_flags.txt

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2023-2026 The ggml authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,68 @@
+---
+license: mit
+tags:
+  - llama.cpp
+  - cuda
+  - linux
+---
+
+# llama.cpp c1d0e7a, CUDA 12.8.1, Linux x86-64
+
+This is a CUDA build of [llama.cpp](https://github.com/ggml-org/llama.cpp) at commit
+`c1d0e7a004015f23bc0233470b747b596f29b264` (release `b10621`), for Linux x86-64. llama.cpp
+publishes no Linux CUDA archive for that commit, so this one is built from source by a pinned,
+reproducible recipe, which is included here.
+
+| File | Bytes | SHA-256 |
+|---|---|---|
+| `llama-c1d0e7a-cuda12.8.1-linux-x64.tar.gz` | 191,811,056 | `7fd27fca6917b1f5aeae38eef9815eed932cf1f7c490227e0eb15612cb238a21` |
+
+Files here are never overwritten. A new build gets a new name, so a pinned URL and its hash stay
+true together.
+
+## What it contains
+
+`llama-server` with its libraries, built for CUDA architectures 50, 52, 60, 61, 70, 75, 80, 86, 89,
+90, 100 and 120, with the web UI off. `BUILD-INFO.txt` records the source commit, the build image
+digest, the compiler, the Ubuntu snapshot, the package versions and the SHA-256 of every recipe
+file.
+
+## NVIDIA's libraries are not included
+
+The server also needs NVIDIA's CUDA runtime and cuBLAS, which are fetched from NVIDIA and placed
+beside `llama-server`:
+
+| Archive | SHA-256 |
+|---|---|
+| `cuda_cudart-linux-x86_64-12.8.90-archive.tar.xz` | `8d566b5fe745c46842dc16945cf36686227536decd2302c372be86da37faca68` |
+| `libcublas-linux-x86_64-12.8.4.1-archive.tar.xz` | `21718957c2cf000bacd69d36c95708a2319199e39e056f8b4f0f68e3b9f323bb` |
+
+Both are from `https://developer.download.nvidia.com/compute/cuda/redist/`. Copy `libcudart.so*`,
+`libcublas.so*` and `libcublasLt.so*` from their `lib/` folders. The GPU driver comes from the
+system.
+
+## How it was built
+
+Run `recipe/scripts/build_runtime.sh`. It builds in the pinned `nvidia/cuda:12.8.1-devel-ubuntu22.04`
+image, with packages from a fixed Ubuntu snapshot. Every source file gets a fixed time. The
+compiler runs with address randomization off and a fixed process ID. Docker's default seccomp
+profile is used, plus one `personality` rule. Before packaging, the build's CMake cache is checked
+against the expected configuration. `recipe/scripts/check_runtime_reproducible.sh` builds twice and
+requires the same archive. It did here: two independent builds gave identical bytes.
+
+## Qualification
+
+It was checked on an NVIDIA RTX 3090, with Qwen3.5-9B Q4_K_M (SHA-256 `cd76ec20…2a13`), a 32,768-token
+context, flash attention and thinking off. The test set was 33 labeled invoices, run twice:
+
+- 33 of 33 documents completed in each run, at a mean of 13.1 and 13.4 seconds per document,
+  with the slowest at 41.1 s;
+- 271 of 273 line items were exact in each run;
+- the two runs' answers were identical on 33 of 33;
+- the answers were identical, on 33 of 33, to those of the earlier build this one replaces;
+- peak graphics memory for the server was 6,393 MiB.
+
+## License
+
+llama.cpp is MIT-licensed; its license is in `LICENSE`. The build recipe in `recipe/` is also
+offered under the MIT license.

llama-c1d0e7a-cuda12.8.1-linux-x64.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7fd27fca6917b1f5aeae38eef9815eed932cf1f7c490227e0eb15612cb238a21
+size 191811056

recipe/scripts/build_runtime.sh

@@ -0,0 +1,160 @@
+#!/usr/bin/env bash
+# The committed recipe for the gpu-cuda runtime (MODEL-SETUP MS-PIN-3).
+#
+# Builds llama.cpp's llama-server at the commit every qualified run used, with CUDA, for every
+# NVIDIA architecture the pinned toolkit supports, inside NVIDIA's own build container, so the
+# result depends on nothing on this machine. The output directory holds the server and the
+# libraries it loads next to it (run path $ORIGIN), a manifest of every file's SHA-256, and one
+# archive of the directory. NVIDIA's CUDA runtime and cuBLAS are not part of it: setup fetches
+# those from NVIDIA (MS-PIN-3, Q2) and places them beside the server.
+#
+# The archive's hash enters the profile only after the qualification lane passes on exactly
+# this build (MS-PIN-4).
+#
+# Two runs give byte-identical archives (MS-PIN-3, "The build is reproducible"): no web UI is
+# downloaded, every source file gets the commit's time, and nvcc runs through
+# runtime_build/nvcc_launcher.sh in a container whose seccomp
+# profile is Docker's default plus the one rule the launcher needs. check_runtime_reproducible.sh
+# builds twice and compares.
+#
+# usage: scripts/build_runtime.sh <output directory>
+set -euo pipefail
+# Command substitutions inherit errexit too, so a failure inside $( ... ) stops the script.
+shopt -s inherit_errexit
+
+LLAMA_COMMIT="c1d0e7a004015f23bc0233470b747b596f29b264"   # tag v0.3.0, llama.cpp build b10621
+# CUDA 12.8.1, the first toolkit that compiles for 12.0 (Blackwell). Pinned by digest, not tag:
+# a tag can be pushed again, and the build must be reproducible from this line alone.
+CUDA_IMAGE="nvidia/cuda:12.8.1-devel-ubuntu22.04@sha256:a99a1860ba8e2916e5c3e73b72ec4c4301653a84586e05bfc9a2aa2d58027e97"
+# The build tools come from this Ubuntu snapshot, not the live mirrors, so a rebuild on any
+# date installs the same versions (runtime_build/apt_snapshot.sh; MS-PIN-3).
+UBUNTU_SNAPSHOT="20260929T000000Z"
+NAME="llama-c1d0e7a-cuda12.8.1-linux-x64"
+
+here="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+out="${1:?usage: $0 <output directory>}"
+mkdir -p "$out"
+out="$(cd "$out" && pwd)"
+if [ -e "$out/$NAME" ] || [ -e "$out/$NAME.tar.gz" ]; then
+    echo "refusing: $out already holds a build; use an empty directory" >&2
+    exit 2
+fi
+
+# Docker's default seccomp profile, pinned, plus personality(ADDR_NO_RANDOMIZE) for setarch -R.
+profile="$(mktemp)"
+trap 'rm -f "$profile"' EXIT
+python3 "$here/runtime_build/seccomp.py" "$profile"
+profile_sha256="$(sha256sum "$profile" | cut -d" " -f1)"
+
+docker run --rm \
+    --user 0:0 \
+    --security-opt "seccomp=$profile" \
+    -e LLAMA_COMMIT="$LLAMA_COMMIT" \
+    -e UBUNTU_SNAPSHOT="$UBUNTU_SNAPSHOT" \
+    -e SECCOMP_PROFILE_SHA256="$profile_sha256" \
+    -e NAME="$NAME" \
+    -e OWNER="$(id -u):$(id -g)" \
+    -v "$out:/out" \
+    -v "$here/runtime_build:/recipe:ro" \
+    "$CUDA_IMAGE" \
+    bash -euo pipefail -c '
+        export DEBIAN_FRONTEND=noninteractive
+        /recipe/apt_snapshot.sh "$UBUNTU_SNAPSHOT"
+        apt-get install -y -qq --no-install-recommends git cmake ninja-build ca-certificates patchelf >/dev/null
+        git init -q /src && cd /src
+        git remote add origin https://github.com/ggml-org/llama.cpp.git
+        git fetch -q --depth 1 origin "$LLAMA_COMMIT"
+        git checkout -q FETCH_HEAD
+        test "$(git rev-parse HEAD)" = "$LLAMA_COMMIT"
+        # Every source file gets the commit'"'"'s time, not the checkout'"'"'s (MS-PIN-3).
+        /recipe/pin_source_times.sh /src
+        # The launcher'"'"'s process id shim, built with the image'"'"'s own compiler; a build tool only.
+        gcc -shared -fPIC -O2 -o /opt/fixed_pid.so /recipe/fixed_pid.c
+        export NVCC_PID_SHIM=/opt/fixed_pid.so
+        # The configure flags have one owner, runtime_build/cmake_flags.txt (MS-PIN-3). Why each:
+        # Real code for every x86 NVIDIA generation from 5.0 through 12.0 ("no GPU limit"):
+        # Maxwell, Pascal, Volta, Turing, Ampere, Ada, Hopper, Blackwell datacenter and consumer.
+        # No PTX, so no JIT: the kernels a machine runs are the kernels this build compiled.
+        # GGML_NATIVE=OFF with every CPU variant loaded at run time: the build machine'"'"'s CPU
+        # features must not become a requirement of the machines that run it.
+        # LLAMA_OPENSSL=OFF: no TLS in the binary, so its built-in Hugging Face and Docker pulls
+        # cannot fetch anything; the server is reached over a local socket and needs no TLS.
+        # (LLAMA_CURL is deprecated and ignored at this commit; it stays only as a no-op.)
+        # GGML_CUDA_NCCL=OFF: NCCL is in this build image but not on the machines that run the
+        # server, and one missing library stops the CUDA backend loading at all. The server uses
+        # one device (ADR-0011), so multi-GPU collectives are not needed.
+        # LLAMA_BUILD_UI=OFF, LLAMA_USE_PREBUILT_UI=OFF: with the UI on, the build downloads it
+        # from a moving "latest" (a one-commit clone is build 1, and b1 does not exist). The
+        # server runs with --no-webui, so the UI is never served.
+        # CMAKE_CUDA_COMPILER_LAUNCHER: every nvcc compile depends on its input alone (MS-PIN-3).
+        mapfile -t flags < /recipe/cmake_flags.txt
+        cmake -S . -B build -G Ninja "${flags[@]}" >/dev/null
+        cmake --build build --target llama-server -j "$(nproc)"
+        # What is packaged was configured exactly as expected, however the configure was written
+        # (MS-PIN-3: the enforcement is the effect, not the shell text).
+        /recipe/check_cmake_cache.sh build /recipe/cmake_cache_expected.txt
+        mkdir -p "/out/$NAME"
+        cp -a build/bin/llama-server "/out/$NAME/"
+        find build/bin -maxdepth 1 -name "*.so*" -exec cp -a {} "/out/$NAME/" \;
+        for file in "/out/$NAME"/*; do
+            [ -L "$file" ] && continue
+            patchelf --set-rpath "\$ORIGIN" "$file"
+        done
+        {
+            echo "llama.cpp commit: $LLAMA_COMMIT"
+            echo "cuda image: '"$CUDA_IMAGE"'"
+            echo "cuda architectures: $(sed -n "s/^-DCMAKE_CUDA_ARCHITECTURES=//p" /recipe/cmake_flags.txt)"
+            nvcc --version | tail -1
+            gcc --version | head -1
+            # The build tools come from the pinned Ubuntu snapshot; their versions are recorded.
+            echo "ubuntu snapshot: $UBUNTU_SNAPSHOT"
+            dpkg-query --show git cmake ninja-build ca-certificates patchelf
+            echo "build container: Docker default seccomp profile plus personality(ADDR_NO_RANDOMIZE)"
+            echo "seccomp profile passed to docker: $SECCOMP_PROFILE_SHA256"
+            (cd /recipe && sha256sum docker-default-seccomp.json seccomp.py nvcc_launcher.sh \
+                fixed_pid.c pin_source_times.sh apt_snapshot.sh cmake_flags.txt)
+        } > "/out/$NAME/BUILD-INFO.txt"
+        chown -R "$OWNER" /out
+    '
+
+cd "$out"
+# Every library the artifact needs must ship in it, come from NVIDIA beside it (MS-PIN-3, Q2),
+# or belong to the base system or the GPU driver. Anything else (NCCL, TLS, an HTTP client)
+# would be missing on a user's machine or would be a network capability, so it is refused.
+BASE_SYSTEM="libc.so.6 libm.so.6 libstdc++.so.6 libgcc_s.so.1 libgomp.so.1 libdl.so.2 libpthread.so.0 librt.so.1 ld-linux-x86-64.so.2 libcuda.so.1"
+FROM_NVIDIA="libcudart.so.12 libcublas.so.12 libcublasLt.so.12"
+# Read every shipped ELF in the main shell, so a file readelf cannot read is a refusal
+# wherever it sits in the list, never a file whose needs are silently skipped.
+needed=""
+for file in "$NAME"/llama-server "$NAME"/*.so*; do
+    [ -L "$file" ] && continue
+    if ! dynamic="$(readelf -d "$file" 2>&1)"; then
+        echo "refusing: cannot read $file as an ELF file: $dynamic" >&2
+        exit 1
+    fi
+    needed+="$(sed -n 's/.*(NEEDED).*\[\(.*\)\]/\1/p' <<<"$dynamic")"$'\n'
+done
+libs="$(sort -u <<<"$needed")"
+unexpected=""
+while read -r lib; do
+    [ -z "$lib" ] && continue
+    [ -e "$NAME/$lib" ] && continue
+    case " $BASE_SYSTEM $FROM_NVIDIA " in *" $lib "*) continue ;; esac
+    unexpected+="$lib "
+done <<<"$libs"
+if [ -n "$unexpected" ]; then
+    echo "refusing: the build needs libraries it neither ships nor may expect: ${unexpected% }" >&2
+    exit 1
+fi
+( cd "$NAME" && find . -type f -o -type l | sort | while read -r file; do
+      if [ -L "$file" ]; then
+          echo "link $file -> $(readlink "$file")"
+      else
+          echo "file $file $(sha256sum "$file" | cut -d" " -f1)"
+      fi
+  done ) > "$NAME.MANIFEST.tmp"
+mv "$NAME.MANIFEST.tmp" "$NAME/MANIFEST.txt"   # written outside, so it never lists itself
+# Same files, same archive bytes: fixed order, times, owners, and no gzip name or timestamp.
+tar --sort=name --mtime=@0 --owner=0 --group=0 --numeric-owner -cf - "$NAME" | gzip -n > "$NAME.tar.gz"
+sha256sum "$NAME.tar.gz" | tee "$NAME.tar.gz.sha256"
+readelf -d "$NAME/llama-server" | grep -E "RUNPATH|RPATH"

recipe/scripts/check_runtime_reproducible.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+# Build the gpu-cuda runtime twice and require the same archive (MODEL-SETUP MS-PIN-3,
+# "The build is reproducible"). Each build is a full run of build_runtime.sh into its own empty
+# folder. On a difference, the files that differ are named from the two manifests.
+#
+# usage: scripts/check_runtime_reproducible.sh <empty work directory>
+set -euo pipefail
+shopt -s inherit_errexit
+
+here="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+work="${1:?usage: $0 <empty work directory>}"
+mkdir -p "$work"
+work="$(cd "$work" && pwd)"
+if [ -n "$(ls -A "$work")" ]; then
+    echo "refusing: $work is not empty" >&2
+    exit 2
+fi
+
+"$here/build_runtime.sh" "$work/first"
+"$here/build_runtime.sh" "$work/second"
+
+archive() {
+    local found=("$1"/*.tar.gz)
+    if [ "${#found[@]}" -ne 1 ] || [ ! -f "${found[0]}" ]; then
+        echo "refusing: $1 does not hold exactly one archive" >&2
+        exit 1
+    fi
+    printf '%s' "${found[0]}"
+}
+first="$(archive "$work/first")"
+second="$(archive "$work/second")"
+first_sha="$(sha256sum "$first" | cut -d" " -f1)"
+second_sha="$(sha256sum "$second" | cut -d" " -f1)"
+if [ "$first_sha" = "$second_sha" ]; then
+    echo "reproducible: $(basename "$first") $first_sha"
+    exit 0
+fi
+echo "NOT reproducible: $first_sha (first) and $second_sha (second)" >&2
+name="$(basename "$first" .tar.gz)"
+diff "$work/first/$name/MANIFEST.txt" "$work/second/$name/MANIFEST.txt" >&2 || true
+exit 1

recipe/scripts/runtime_build/apt_snapshot.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# The build container's apt sources: only the pinned Ubuntu snapshot (MODEL-SETUP MS-PIN-3,
+# "The build tools come from a pinned Ubuntu snapshot").
+#
+# The live mirrors change whenever Ubuntu updates a package, and BUILD-INFO.txt, which is in the
+# archive, records the installed versions; a snapshot never changes. The image's own sources and
+# NVIDIA's repository are removed, not added to. Release signatures are still checked; only the
+# Valid-Until expiry is ignored, because a snapshot's Release file expires while its content
+# stays fixed.
+#
+# usage: apt_snapshot.sh <snapshot timestamp, e.g. 20260929T000000Z>
+set -euo pipefail
+
+stamp="${1:?usage: $0 <snapshot timestamp>}"
+if ! [[ "$stamp" =~ ^[0-9]{8}T[0-9]{6}Z$ ]]; then
+    echo "refusing: $stamp is not a snapshot timestamp" >&2
+    exit 2
+fi
+. /etc/os-release
+snapshot="https://snapshot.ubuntu.com/ubuntu/$stamp"
+rm -f /etc/apt/sources.list.d/*
+printf 'deb %s %s main universe\n' \
+    "$snapshot" "$VERSION_CODENAME" \
+    "$snapshot" "$VERSION_CODENAME-updates" \
+    "$snapshot" "$VERSION_CODENAME-security" > /etc/apt/sources.list
+apt-get -o Acquire::Check-Valid-Until=false update -qq

recipe/scripts/runtime_build/check_cmake_cache.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+# The packaged build is configured exactly as expected (MODEL-SETUP MS-PIN-3, "The enforcement
+# is the effect").
+#
+# Shell text cannot be checked for every way of writing a configure call; the CMake cache records
+# the configuration that was built, however it was set. Every entry of <build>/CMakeCache.txt,
+# with its comment lines dropped and sorted, must equal the expected cache: a changed, extra or
+# missing entry is a refusal. The recipe runs this after the build and before packaging.
+#
+# usage: check_cmake_cache.sh <build directory> <expected cache>
+set -euo pipefail
+
+build="${1:?usage: $0 <build directory> <expected cache>}"
+expected="${2:?usage: $0 <build directory> <expected cache>}"
+cache="$build/CMakeCache.txt"
+for file in "$cache" "$expected"; do
+    if [ ! -f "$file" ]; then
+        echo "refusing: $file is not there, so the build's configuration cannot be checked" >&2
+        exit 1
+    fi
+done
+actual="$({ grep -v -E '^(//|#|$)' "$cache" || true; } | LC_ALL=C sort)"
+if ! difference="$(diff <(printf '%s\n' "$actual") "$expected")"; then
+    echo "refusing: the build is not configured exactly as cmake_cache_expected.txt says:" >&2
+    printf '%s\n' "$difference" | head -20 >&2
+    exit 1
+fi
+echo "configuration: as expected ($(wc -l < "$expected") entries)"

recipe/scripts/runtime_build/cmake_cache_expected.txt

@@ -0,0 +1,490 @@
+BUILD_SHARED_LIBS:BOOL=ON
+CMAKE_ADDR2LINE-ADVANCED:INTERNAL=1
+CMAKE_ADDR2LINE:FILEPATH=/usr/bin/addr2line
+CMAKE_AR-ADVANCED:INTERNAL=1
+CMAKE_AR:FILEPATH=/usr/bin/ar
+CMAKE_ASM_COMPILER-ADVANCED:INTERNAL=1
+CMAKE_ASM_COMPILER:FILEPATH=/usr/bin/cc
+CMAKE_ASM_COMPILER_AR-ADVANCED:INTERNAL=1
+CMAKE_ASM_COMPILER_AR:FILEPATH=/usr/bin/gcc-ar
+CMAKE_ASM_COMPILER_RANLIB-ADVANCED:INTERNAL=1
+CMAKE_ASM_COMPILER_RANLIB:FILEPATH=/usr/bin/gcc-ranlib
+CMAKE_ASM_COMPILER_WORKS:INTERNAL=1
+CMAKE_ASM_FLAGS-ADVANCED:INTERNAL=1
+CMAKE_ASM_FLAGS:STRING=
+CMAKE_ASM_FLAGS_DEBUG-ADVANCED:INTERNAL=1
+CMAKE_ASM_FLAGS_DEBUG:STRING=-g
+CMAKE_ASM_FLAGS_MINSIZEREL-ADVANCED:INTERNAL=1
+CMAKE_ASM_FLAGS_MINSIZEREL:STRING=-Os -DNDEBUG
+CMAKE_ASM_FLAGS_RELEASE-ADVANCED:INTERNAL=1
+CMAKE_ASM_FLAGS_RELEASE:STRING=-O3 -DNDEBUG
+CMAKE_ASM_FLAGS_RELWITHDEBINFO-ADVANCED:INTERNAL=1
+CMAKE_ASM_FLAGS_RELWITHDEBINFO:STRING=-O2 -g -DNDEBUG
+CMAKE_BUILD_TYPE:STRING=Release
+CMAKE_BUILD_WITH_INSTALL_RPATH:UNINITIALIZED=ON
+CMAKE_CACHEFILE_DIR:INTERNAL=/src/build
+CMAKE_CACHE_MAJOR_VERSION:INTERNAL=3
+CMAKE_CACHE_MINOR_VERSION:INTERNAL=22
+CMAKE_CACHE_PATCH_VERSION:INTERNAL=1
+CMAKE_COMMAND:INTERNAL=/usr/bin/cmake
+CMAKE_CPACK_COMMAND:INTERNAL=/usr/bin/cpack
+CMAKE_CTEST_COMMAND:INTERNAL=/usr/bin/ctest
+CMAKE_CUDA_ARCHITECTURES:UNINITIALIZED=50-real;52-real;60-real;61-real;70-real;75-real;80-real;86-real;89-real;90-real;100-real;120-real
+CMAKE_CUDA_COMPILER-ADVANCED:INTERNAL=1
+CMAKE_CUDA_COMPILER:FILEPATH=/usr/local/cuda/bin/nvcc
+CMAKE_CUDA_COMPILER_LAUNCHER:UNINITIALIZED=/recipe/nvcc_launcher.sh
+CMAKE_CUDA_FLAGS-ADVANCED:INTERNAL=1
+CMAKE_CUDA_FLAGS:STRING=
+CMAKE_CUDA_FLAGS_DEBUG-ADVANCED:INTERNAL=1
+CMAKE_CUDA_FLAGS_DEBUG:STRING=-g
+CMAKE_CUDA_FLAGS_MINSIZEREL-ADVANCED:INTERNAL=1
+CMAKE_CUDA_FLAGS_MINSIZEREL:STRING=-O1 -DNDEBUG
+CMAKE_CUDA_FLAGS_RELEASE-ADVANCED:INTERNAL=1
+CMAKE_CUDA_FLAGS_RELEASE:STRING=-O3 -DNDEBUG
+CMAKE_CUDA_FLAGS_RELWITHDEBINFO-ADVANCED:INTERNAL=1
+CMAKE_CUDA_FLAGS_RELWITHDEBINFO:STRING=-O2 -g -DNDEBUG
+CMAKE_CXX_COMPILER-ADVANCED:INTERNAL=1
+CMAKE_CXX_COMPILER:FILEPATH=/usr/bin/c++
+CMAKE_CXX_COMPILER_AR-ADVANCED:INTERNAL=1
+CMAKE_CXX_COMPILER_AR:FILEPATH=/usr/bin/gcc-ar-11
+CMAKE_CXX_COMPILER_RANLIB-ADVANCED:INTERNAL=1
+CMAKE_CXX_COMPILER_RANLIB:FILEPATH=/usr/bin/gcc-ranlib-11
+CMAKE_CXX_FLAGS-ADVANCED:INTERNAL=1
+CMAKE_CXX_FLAGS:STRING=
+CMAKE_CXX_FLAGS_DEBUG-ADVANCED:INTERNAL=1
+CMAKE_CXX_FLAGS_DEBUG:STRING=-g
+CMAKE_CXX_FLAGS_MINSIZEREL-ADVANCED:INTERNAL=1
+CMAKE_CXX_FLAGS_MINSIZEREL:STRING=-Os -DNDEBUG
+CMAKE_CXX_FLAGS_RELEASE-ADVANCED:INTERNAL=1
+CMAKE_CXX_FLAGS_RELEASE:STRING=-O3 -DNDEBUG
+CMAKE_CXX_FLAGS_RELWITHDEBINFO-ADVANCED:INTERNAL=1
+CMAKE_CXX_FLAGS_RELWITHDEBINFO:STRING=-O2 -g -DNDEBUG
+CMAKE_C_COMPILER-ADVANCED:INTERNAL=1
+CMAKE_C_COMPILER:FILEPATH=/usr/bin/cc
+CMAKE_C_COMPILER_AR-ADVANCED:INTERNAL=1
+CMAKE_C_COMPILER_AR:FILEPATH=/usr/bin/gcc-ar-11
+CMAKE_C_COMPILER_RANLIB-ADVANCED:INTERNAL=1
+CMAKE_C_COMPILER_RANLIB:FILEPATH=/usr/bin/gcc-ranlib-11
+CMAKE_C_FLAGS-ADVANCED:INTERNAL=1
+CMAKE_C_FLAGS:STRING=
+CMAKE_C_FLAGS_DEBUG-ADVANCED:INTERNAL=1
+CMAKE_C_FLAGS_DEBUG:STRING=-g
+CMAKE_C_FLAGS_MINSIZEREL-ADVANCED:INTERNAL=1
+CMAKE_C_FLAGS_MINSIZEREL:STRING=-Os -DNDEBUG
+CMAKE_C_FLAGS_RELEASE-ADVANCED:INTERNAL=1
+CMAKE_C_FLAGS_RELEASE:STRING=-O3 -DNDEBUG
+CMAKE_C_FLAGS_RELWITHDEBINFO-ADVANCED:INTERNAL=1
+CMAKE_C_FLAGS_RELWITHDEBINFO:STRING=-O2 -g -DNDEBUG
+CMAKE_DLLTOOL-ADVANCED:INTERNAL=1
+CMAKE_DLLTOOL:FILEPATH=CMAKE_DLLTOOL-NOTFOUND
+CMAKE_EXECUTABLE_FORMAT:INTERNAL=ELF
+CMAKE_EXE_LINKER_FLAGS-ADVANCED:INTERNAL=1
+CMAKE_EXE_LINKER_FLAGS:STRING=
+CMAKE_EXE_LINKER_FLAGS_DEBUG-ADVANCED:INTERNAL=1
+CMAKE_EXE_LINKER_FLAGS_DEBUG:STRING=
+CMAKE_EXE_LINKER_FLAGS_MINSIZEREL-ADVANCED:INTERNAL=1
+CMAKE_EXE_LINKER_FLAGS_MINSIZEREL:STRING=
+CMAKE_EXE_LINKER_FLAGS_RELEASE-ADVANCED:INTERNAL=1
+CMAKE_EXE_LINKER_FLAGS_RELEASE:STRING=
+CMAKE_EXE_LINKER_FLAGS_RELWITHDEBINFO-ADVANCED:INTERNAL=1
+CMAKE_EXE_LINKER_FLAGS_RELWITHDEBINFO:STRING=
+CMAKE_EXPORT_COMPILE_COMMANDS-ADVANCED:INTERNAL=1
+CMAKE_EXPORT_COMPILE_COMMANDS:BOOL=
+CMAKE_EXTRA_GENERATOR:INTERNAL=
+CMAKE_GENERATOR:INTERNAL=Ninja
+CMAKE_GENERATOR_INSTANCE:INTERNAL=
+CMAKE_GENERATOR_PLATFORM:INTERNAL=
+CMAKE_GENERATOR_TOOLSET:INTERNAL=
+CMAKE_HAVE_LIBC_PTHREAD:INTERNAL=1
+CMAKE_HAVE_PTHREAD_H:INTERNAL=1
+CMAKE_HOME_DIRECTORY:INTERNAL=/src
+CMAKE_INSTALL_BINDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_BINDIR:PATH=bin
+CMAKE_INSTALL_DATADIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_DATADIR:PATH=
+CMAKE_INSTALL_DATAROOTDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_DATAROOTDIR:PATH=share
+CMAKE_INSTALL_DOCDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_DOCDIR:PATH=
+CMAKE_INSTALL_INCLUDEDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_INCLUDEDIR:PATH=include
+CMAKE_INSTALL_INFODIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_INFODIR:PATH=
+CMAKE_INSTALL_LIBDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_LIBDIR:PATH=lib
+CMAKE_INSTALL_LIBEXECDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_LIBEXECDIR:PATH=libexec
+CMAKE_INSTALL_LOCALEDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_LOCALEDIR:PATH=
+CMAKE_INSTALL_LOCALSTATEDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_LOCALSTATEDIR:PATH=var
+CMAKE_INSTALL_MANDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_MANDIR:PATH=
+CMAKE_INSTALL_OLDINCLUDEDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_OLDINCLUDEDIR:PATH=/usr/include
+CMAKE_INSTALL_PREFIX:PATH=/usr/local
+CMAKE_INSTALL_RPATH:UNINITIALIZED=$ORIGIN
+CMAKE_INSTALL_RUNSTATEDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_RUNSTATEDIR:PATH=
+CMAKE_INSTALL_SBINDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_SBINDIR:PATH=sbin
+CMAKE_INSTALL_SHAREDSTATEDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_SHAREDSTATEDIR:PATH=com
+CMAKE_INSTALL_SO_NO_EXE:INTERNAL=1
+CMAKE_INSTALL_SYSCONFDIR-ADVANCED:INTERNAL=1
+CMAKE_INSTALL_SYSCONFDIR:PATH=etc
+CMAKE_LINKER-ADVANCED:INTERNAL=1
+CMAKE_LINKER:FILEPATH=/usr/bin/ld
+CMAKE_MAKE_PROGRAM-ADVANCED:INTERNAL=1
+CMAKE_MAKE_PROGRAM:FILEPATH=/usr/bin/ninja
+CMAKE_MODULE_LINKER_FLAGS-ADVANCED:INTERNAL=1
+CMAKE_MODULE_LINKER_FLAGS:STRING=
+CMAKE_MODULE_LINKER_FLAGS_DEBUG-ADVANCED:INTERNAL=1
+CMAKE_MODULE_LINKER_FLAGS_DEBUG:STRING=
+CMAKE_MODULE_LINKER_FLAGS_MINSIZEREL-ADVANCED:INTERNAL=1
+CMAKE_MODULE_LINKER_FLAGS_MINSIZEREL:STRING=
+CMAKE_MODULE_LINKER_FLAGS_RELEASE-ADVANCED:INTERNAL=1
+CMAKE_MODULE_LINKER_FLAGS_RELEASE:STRING=
+CMAKE_MODULE_LINKER_FLAGS_RELWITHDEBINFO-ADVANCED:INTERNAL=1
+CMAKE_MODULE_LINKER_FLAGS_RELWITHDEBINFO:STRING=
+CMAKE_NM-ADVANCED:INTERNAL=1
+CMAKE_NM:FILEPATH=/usr/bin/nm
+CMAKE_NUMBER_OF_MAKEFILES:INTERNAL=52
+CMAKE_OBJCOPY-ADVANCED:INTERNAL=1
+CMAKE_OBJCOPY:FILEPATH=/usr/bin/objcopy
+CMAKE_OBJDUMP-ADVANCED:INTERNAL=1
+CMAKE_OBJDUMP:FILEPATH=/usr/bin/objdump
+CMAKE_PLATFORM_INFO_INITIALIZED:INTERNAL=1
+CMAKE_PROJECT_DESCRIPTION:STATIC=
+CMAKE_PROJECT_HOMEPAGE_URL:STATIC=
+CMAKE_PROJECT_NAME:STATIC=llama.cpp
+CMAKE_RANLIB-ADVANCED:INTERNAL=1
+CMAKE_RANLIB:FILEPATH=/usr/bin/ranlib
+CMAKE_READELF-ADVANCED:INTERNAL=1
+CMAKE_READELF:FILEPATH=/usr/bin/readelf
+CMAKE_ROOT:INTERNAL=/usr/share/cmake-3.22
+CMAKE_SHARED_LINKER_FLAGS-ADVANCED:INTERNAL=1
+CMAKE_SHARED_LINKER_FLAGS:STRING=
+CMAKE_SHARED_LINKER_FLAGS_DEBUG-ADVANCED:INTERNAL=1
+CMAKE_SHARED_LINKER_FLAGS_DEBUG:STRING=
+CMAKE_SHARED_LINKER_FLAGS_MINSIZEREL-ADVANCED:INTERNAL=1
+CMAKE_SHARED_LINKER_FLAGS_MINSIZEREL:STRING=
+CMAKE_SHARED_LINKER_FLAGS_RELEASE-ADVANCED:INTERNAL=1
+CMAKE_SHARED_LINKER_FLAGS_RELEASE:STRING=
+CMAKE_SHARED_LINKER_FLAGS_RELWITHDEBINFO-ADVANCED:INTERNAL=1
+CMAKE_SHARED_LINKER_FLAGS_RELWITHDEBINFO:STRING=
+CMAKE_SKIP_INSTALL_RPATH-ADVANCED:INTERNAL=1
+CMAKE_SKIP_INSTALL_RPATH:BOOL=NO
+CMAKE_SKIP_RPATH-ADVANCED:INTERNAL=1
+CMAKE_SKIP_RPATH:BOOL=NO
+CMAKE_STATIC_LINKER_FLAGS-ADVANCED:INTERNAL=1
+CMAKE_STATIC_LINKER_FLAGS:STRING=
+CMAKE_STATIC_LINKER_FLAGS_DEBUG-ADVANCED:INTERNAL=1
+CMAKE_STATIC_LINKER_FLAGS_DEBUG:STRING=
+CMAKE_STATIC_LINKER_FLAGS_MINSIZEREL-ADVANCED:INTERNAL=1
+CMAKE_STATIC_LINKER_FLAGS_MINSIZEREL:STRING=
+CMAKE_STATIC_LINKER_FLAGS_RELEASE-ADVANCED:INTERNAL=1
+CMAKE_STATIC_LINKER_FLAGS_RELEASE:STRING=
+CMAKE_STATIC_LINKER_FLAGS_RELWITHDEBINFO-ADVANCED:INTERNAL=1
+CMAKE_STATIC_LINKER_FLAGS_RELWITHDEBINFO:STRING=
+CMAKE_STRIP-ADVANCED:INTERNAL=1
+CMAKE_STRIP:FILEPATH=/usr/bin/strip
+CMAKE_UNAME:INTERNAL=/usr/bin/uname
+CMAKE_VERBOSE_MAKEFILE-ADVANCED:INTERNAL=1
+CMAKE_VERBOSE_MAKEFILE:BOOL=FALSE
+CUDAToolkit_BIN_DIR:PATH=/usr/local/cuda/bin
+CUDAToolkit_NVCC_EXECUTABLE-ADVANCED:INTERNAL=1
+CUDAToolkit_NVCC_EXECUTABLE:FILEPATH=/usr/local/cuda/bin/nvcc
+CUDAToolkit_rt_LIBRARY-ADVANCED:INTERNAL=1
+CUDAToolkit_rt_LIBRARY:FILEPATH=/usr/lib/x86_64-linux-gnu/librt.a
+CUDA_CUDART-ADVANCED:INTERNAL=1
+CUDA_CUDART:FILEPATH=/usr/local/cuda/lib64/libcudart.so
+CUDA_OpenCL_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_OpenCL_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libOpenCL.so
+CUDA_cublasLt_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cublasLt_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcublasLt.so
+CUDA_cublasLt_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cublasLt_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcublasLt_static.a
+CUDA_cublas_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cublas_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcublas.so
+CUDA_cublas_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cublas_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcublas_static.a
+CUDA_cuda_driver_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cuda_driver_LIBRARY:FILEPATH=/usr/local/cuda/lib64/stubs/libcuda.so
+CUDA_cudart_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cudart_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcudart.so
+CUDA_cudart_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cudart_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcudart_static.a
+CUDA_cufft_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cufft_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcufft.so
+CUDA_cufft_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cufft_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcufft_static.a
+CUDA_cufftw_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cufftw_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcufftw.so
+CUDA_culibos_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_culibos_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libculibos.a
+CUDA_cupti_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cupti_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcupti.so
+CUDA_cupti_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cupti_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcupti_static.a
+CUDA_curand_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_curand_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcurand.so
+CUDA_curand_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_curand_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcurand_static.a
+CUDA_cusolver_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cusolver_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcusolver.so
+CUDA_cusolver_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cusolver_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcusolver_static.a
+CUDA_cusparse_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cusparse_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcusparse.so
+CUDA_cusparse_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_cusparse_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libcusparse_static.a
+CUDA_nppc_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppc_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppc.so
+CUDA_nppc_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppc_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppc_static.a
+CUDA_nppial_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppial_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppial.so
+CUDA_nppial_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppial_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppial_static.a
+CUDA_nppicc_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppicc_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppicc.so
+CUDA_nppicc_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppicc_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppicc_static.a
+CUDA_nppicom_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppicom_LIBRARY:FILEPATH=CUDA_nppicom_LIBRARY-NOTFOUND
+CUDA_nppicom_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppicom_static_LIBRARY:FILEPATH=CUDA_nppicom_static_LIBRARY-NOTFOUND
+CUDA_nppidei_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppidei_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppidei.so
+CUDA_nppidei_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppidei_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppidei_static.a
+CUDA_nppif_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppif_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppif.so
+CUDA_nppif_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppif_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppif_static.a
+CUDA_nppig_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppig_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppig.so
+CUDA_nppig_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppig_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppig_static.a
+CUDA_nppim_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppim_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppim.so
+CUDA_nppim_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppim_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppim_static.a
+CUDA_nppist_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppist_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppist.so
+CUDA_nppist_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppist_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppist_static.a
+CUDA_nppisu_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppisu_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppisu.so
+CUDA_nppisu_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppisu_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppisu_static.a
+CUDA_nppitc_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppitc_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppitc.so
+CUDA_nppitc_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nppitc_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnppitc_static.a
+CUDA_npps_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_npps_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnpps.so
+CUDA_npps_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_npps_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnpps_static.a
+CUDA_nvToolsExt_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nvToolsExt_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnvToolsExt.so
+CUDA_nvgraph_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nvgraph_LIBRARY:FILEPATH=CUDA_nvgraph_LIBRARY-NOTFOUND
+CUDA_nvgraph_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nvgraph_static_LIBRARY:FILEPATH=CUDA_nvgraph_static_LIBRARY-NOTFOUND
+CUDA_nvjpeg_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nvjpeg_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnvjpeg.so
+CUDA_nvjpeg_static_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nvjpeg_static_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnvjpeg_static.a
+CUDA_nvml_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nvml_LIBRARY:FILEPATH=/usr/local/cuda/lib64/stubs/libnvidia-ml.so
+CUDA_nvrtc_LIBRARY-ADVANCED:INTERNAL=1
+CUDA_nvrtc_LIBRARY:FILEPATH=/usr/local/cuda/lib64/libnvrtc.so
+FIND_PACKAGE_MESSAGE_DETAILS_CUDAToolkit:INTERNAL=[/usr/local/cuda/include][/usr/local/cuda/lib64/libcudart.so][/usr/local/cuda/bin][v12.8.93()]
+FIND_PACKAGE_MESSAGE_DETAILS_Git:INTERNAL=[/usr/bin/git][v2.34.1()]
+FIND_PACKAGE_MESSAGE_DETAILS_OpenMP:INTERNAL=[TRUE][TRUE][c ][v4.5()]
+FIND_PACKAGE_MESSAGE_DETAILS_OpenMP_C:INTERNAL=[-fopenmp][/usr/lib/gcc/x86_64-linux-gnu/11/libgomp.so][/usr/lib/x86_64-linux-gnu/libpthread.a][v4.5()]
+FIND_PACKAGE_MESSAGE_DETAILS_OpenMP_CXX:INTERNAL=[-fopenmp][/usr/lib/gcc/x86_64-linux-gnu/11/libgomp.so][/usr/lib/x86_64-linux-gnu/libpthread.a][v4.5()]
+FIND_PACKAGE_MESSAGE_DETAILS_Threads:INTERNAL=[TRUE][v()]
+GGML_ACCELERATE:BOOL=ON
+GGML_ALL_WARNINGS_3RD_PARTY:BOOL=OFF
+GGML_AMX_BF16:BOOL=OFF
+GGML_AMX_INT8:BOOL=OFF
+GGML_AMX_TILE:BOOL=OFF
+GGML_AVAILABLE_BACKENDS:INTERNAL=ggml-cpu-x64;ggml-cpu-sse42;ggml-cpu-sandybridge;ggml-cpu-ivybridge;ggml-cpu-piledriver;ggml-cpu-haswell;ggml-cpu-skylakex;ggml-cpu-cannonlake;ggml-cpu-cascadelake;ggml-cpu-icelake;ggml-cpu-cooperlake;ggml-cpu-zen4;ggml-cpu-alderlake;ggml-cpu-sapphirerapids;ggml-cuda
+GGML_AVX2:BOOL=ON
+GGML_AVX512:BOOL=OFF
+GGML_AVX512_BF16:BOOL=OFF
+GGML_AVX512_VBMI:BOOL=OFF
+GGML_AVX512_VNNI:BOOL=OFF
+GGML_AVX:BOOL=ON
+GGML_AVX_VNNI:BOOL=OFF
+GGML_BACKEND_DIR:PATH=
+GGML_BACKEND_DL:BOOL=ON
+GGML_BIN_INSTALL_DIR:PATH=bin
+GGML_BLAS:BOOL=OFF
+GGML_BLAS_VENDOR:STRING=Generic
+GGML_BMI2:BOOL=ON
+GGML_BUILD_EXAMPLES:BOOL=OFF
+GGML_BUILD_TESTS:BOOL=OFF
+GGML_CCACHE:BOOL=ON
+GGML_CCACHE_FOUND:FILEPATH=GGML_CCACHE_FOUND-NOTFOUND
+GGML_CPU:BOOL=ON
+GGML_CPU_ALL_VARIANTS:BOOL=ON
+GGML_CPU_ARM_ARCH:STRING=
+GGML_CPU_HBM:BOOL=OFF
+GGML_CPU_KLEIDIAI:BOOL=OFF
+GGML_CPU_POWERPC_CPUTYPE:STRING=
+GGML_CPU_REPACK:BOOL=ON
+GGML_CUDA:BOOL=ON
+GGML_CUDA_COMPRESSION_MODE-STRINGS:INTERNAL=none;speed;balance;size
+GGML_CUDA_COMPRESSION_MODE:STRING=size
+GGML_CUDA_FA:BOOL=ON
+GGML_CUDA_FA_ALL_QUANTS:BOOL=OFF
+GGML_CUDA_FORCE_CUBLAS:BOOL=OFF
+GGML_CUDA_FORCE_MMQ:BOOL=OFF
+GGML_CUDA_GRAPHS:BOOL=ON
+GGML_CUDA_NCCL:BOOL=OFF
+GGML_CUDA_NO_PEER_COPY:BOOL=OFF
+GGML_CUDA_NO_VMM:BOOL=OFF
+GGML_CUDA_PEER_MAX_BATCH_SIZE:STRING=128
+GGML_ET:BOOL=OFF
+GGML_ET_SYSEMU:BOOL=OFF
+GGML_F16C:BOOL=ON
+GGML_FMA:BOOL=ON
+GGML_GPROF:BOOL=OFF
+GGML_HEXAGON:BOOL=OFF
+GGML_HIP:BOOL=OFF
+GGML_HIP_EXPORT_METRICS:BOOL=OFF
+GGML_HIP_GRAPHS:BOOL=ON
+GGML_HIP_MMQ_MFMA:BOOL=ON
+GGML_HIP_NO_VMM:BOOL=ON
+GGML_HIP_RCCL:BOOL=OFF
+GGML_INCLUDE_INSTALL_DIR:PATH=include
+GGML_LASX:BOOL=ON
+GGML_LIB_INSTALL_DIR:PATH=lib
+GGML_LLAMAFILE:BOOL=ON
+GGML_LSX:BOOL=ON
+GGML_LTO:BOOL=OFF
+GGML_METAL:BOOL=OFF
+GGML_METAL_EMBED_LIBRARY:BOOL=OFF
+GGML_METAL_MACOSX_VERSION_MIN:STRING=
+GGML_METAL_NDEBUG:BOOL=OFF
+GGML_METAL_SHADER_DEBUG:BOOL=OFF
+GGML_METAL_STD:STRING=
+GGML_MUSA:BOOL=OFF
+GGML_MUSA_GRAPHS:BOOL=OFF
+GGML_MUSA_MUDNN_COPY:BOOL=OFF
+GGML_NATIVE:BOOL=OFF
+GGML_OPENCL:BOOL=OFF
+GGML_OPENCL_EMBED_KERNELS:BOOL=ON
+GGML_OPENCL_PROFILING:BOOL=OFF
+GGML_OPENCL_TARGET_VERSION:STRING=300
+GGML_OPENCL_USE_ADRENO_KERNELS:BOOL=ON
+GGML_OPENMP:BOOL=ON
+GGML_OPENMP_ENABLED:INTERNAL=ON
+GGML_OPENMP_FETCH:BOOL=OFF
+GGML_OPENVINO:BOOL=OFF
+GGML_RPC:BOOL=OFF
+GGML_RVV:BOOL=ON
+GGML_RV_ZFH:BOOL=ON
+GGML_RV_ZICBOP:BOOL=ON
+GGML_RV_ZIHINTPAUSE:BOOL=ON
+GGML_RV_ZVFBFWMA:BOOL=OFF
+GGML_RV_ZVFH:BOOL=ON
+GGML_SANITIZE_ADDRESS:BOOL=OFF
+GGML_SANITIZE_THREAD:BOOL=OFF
+GGML_SANITIZE_UNDEFINED:BOOL=OFF
+GGML_SCCACHE_FOUND:FILEPATH=GGML_SCCACHE_FOUND-NOTFOUND
+GGML_SCHED_MAX_COPIES:STRING=4
+GGML_SCHED_NO_REALLOC:BOOL=OFF
+GGML_SSE42:BOOL=ON
+GGML_STATIC:BOOL=OFF
+GGML_SYCL:BOOL=OFF
+GGML_SYCL_DEVICE_ARCH:STRING=
+GGML_SYCL_DNN:BOOL=ON
+GGML_SYCL_F16:BOOL=OFF
+GGML_SYCL_GRAPH:BOOL=ON
+GGML_SYCL_HOST_MEM_FALLBACK:BOOL=ON
+GGML_SYCL_SUPPORT_LEVEL_ZERO_API:BOOL=ON
+GGML_SYCL_TARGET:STRING=INTEL
+GGML_VIRTGPU:BOOL=OFF
+GGML_VIRTGPU_BACKEND:BOOL=OFF
+GGML_VULKAN:BOOL=OFF
+GGML_VULKAN_CHECK_RESULTS:BOOL=OFF
+GGML_VULKAN_DEBUG:BOOL=OFF
+GGML_VULKAN_MEMORY_DEBUG:BOOL=OFF
+GGML_VULKAN_RUN_TESTS:BOOL=OFF
+GGML_VULKAN_SHADERS_GEN_TOOLCHAIN:FILEPATH=
+GGML_VULKAN_SHADER_DEBUG_INFO:BOOL=OFF
+GGML_VULKAN_VALIDATE:BOOL=OFF
+GGML_VXE:BOOL=OFF
+GGML_WEBGPU:BOOL=OFF
+GGML_WEBGPU_CPU_PROFILE:BOOL=OFF
+GGML_WEBGPU_DEBUG:BOOL=OFF
+GGML_WEBGPU_GPU_PROFILE:BOOL=OFF
+GGML_WEBGPU_JSPI:BOOL=ON
+GGML_XTHEADVECTOR:BOOL=OFF
+GGML_ZDNN:BOOL=OFF
+GGML_ZENDNN:BOOL=OFF
+GIT_EXE:FILEPATH=/usr/bin/git
+GIT_EXECUTABLE-ADVANCED:INTERNAL=1
+GIT_EXECUTABLE:FILEPATH=/usr/bin/git
+LLAMA_ALL_WARNINGS:BOOL=ON
+LLAMA_ALL_WARNINGS_3RD_PARTY:BOOL=OFF
+LLAMA_BIN_INSTALL_DIR:PATH=bin
+LLAMA_BUILD_APP:BOOL=ON
+LLAMA_BUILD_COMMON:BOOL=ON
+LLAMA_BUILD_EXAMPLES:BOOL=ON
+LLAMA_BUILD_IS_DEV:BOOL=ON
+LLAMA_BUILD_MTMD:BOOL=OFF
+LLAMA_BUILD_SERVER:BOOL=ON
+LLAMA_BUILD_TESTS:BOOL=OFF
+LLAMA_BUILD_TOOLS:BOOL=ON
+LLAMA_BUILD_UI:BOOL=OFF
+LLAMA_CURL:UNINITIALIZED=OFF
+LLAMA_FATAL_WARNINGS:BOOL=OFF
+LLAMA_INCLUDE_INSTALL_DIR:PATH=include
+LLAMA_LIB_INSTALL_DIR:PATH=lib
+LLAMA_LLGUIDANCE:BOOL=OFF
+LLAMA_OPENSSL:BOOL=OFF
+LLAMA_SANITIZE_ADDRESS:BOOL=OFF
+LLAMA_SANITIZE_THREAD:BOOL=OFF
+LLAMA_SANITIZE_UNDEFINED:BOOL=OFF
+LLAMA_SUBPROCESS:BOOL=ON
+LLAMA_TESTS_INSTALL:BOOL=ON
+LLAMA_TOOLS_INSTALL:BOOL=ON
+LLAMA_UI_GZIP:BOOL=ON
+LLAMA_UI_HF_BUCKET:STRING=ggml-org/llama-ui
+LLAMA_USE_PREBUILT_UI:BOOL=OFF
+LLAMA_USE_SYSTEM_GGML:BOOL=OFF
+LLAMA_WASM_MEM64:BOOL=ON
+MTMD_VIDEO:BOOL=ON
+OPENSSL_NO_ASM:BOOL=ON
+OpenMP_COMPILE_RESULT_CXX_fopenmp:INTERNAL=TRUE
+OpenMP_COMPILE_RESULT_C_fopenmp:INTERNAL=TRUE
+OpenMP_CXX_FLAGS-ADVANCED:INTERNAL=1
+OpenMP_CXX_FLAGS:STRING=-fopenmp
+OpenMP_CXX_LIB_NAMES-ADVANCED:INTERNAL=1
+OpenMP_CXX_LIB_NAMES:STRING=gomp;pthread
+OpenMP_CXX_SPEC_DATE:INTERNAL=201511
+OpenMP_C_FLAGS-ADVANCED:INTERNAL=1
+OpenMP_C_FLAGS:STRING=-fopenmp
+OpenMP_C_LIB_NAMES-ADVANCED:INTERNAL=1
+OpenMP_C_LIB_NAMES:STRING=gomp;pthread
+OpenMP_C_SPEC_DATE:INTERNAL=201511
+OpenMP_SPECTEST_CXX_:INTERNAL=TRUE
+OpenMP_SPECTEST_C_:INTERNAL=TRUE
+OpenMP_gomp_LIBRARY-ADVANCED:INTERNAL=1
+OpenMP_gomp_LIBRARY:FILEPATH=/usr/lib/gcc/x86_64-linux-gnu/11/libgomp.so
+OpenMP_pthread_LIBRARY-ADVANCED:INTERNAL=1
+OpenMP_pthread_LIBRARY:FILEPATH=/usr/lib/x86_64-linux-gnu/libpthread.a
+ZENDNN_ROOT:BOOL=OFF
+_GNUInstallDirs_LAST_CMAKE_INSTALL_PREFIX:INTERNAL=/usr/local
+ggml_BINARY_DIR:STATIC=/src/build/ggml
+ggml_IS_TOP_LEVEL:STATIC=OFF
+ggml_SOURCE_DIR:STATIC=/src/ggml
+llama.cpp_BINARY_DIR:STATIC=/src/build
+llama.cpp_IS_TOP_LEVEL:STATIC=ON
+llama.cpp_SOURCE_DIR:STATIC=/src

recipe/scripts/runtime_build/cmake_flags.txt

@@ -0,0 +1,16 @@
+-DCMAKE_BUILD_TYPE=Release
+-DGGML_CUDA=ON
+-DCMAKE_CUDA_ARCHITECTURES=50-real;52-real;60-real;61-real;70-real;75-real;80-real;86-real;89-real;90-real;100-real;120-real
+-DGGML_NATIVE=OFF
+-DGGML_BACKEND_DL=ON
+-DGGML_CPU_ALL_VARIANTS=ON
+-DBUILD_SHARED_LIBS=ON
+-DGGML_CUDA_NCCL=OFF
+-DLLAMA_OPENSSL=OFF
+-DLLAMA_CURL=OFF
+-DLLAMA_BUILD_TESTS=OFF
+-DLLAMA_BUILD_UI=OFF
+-DLLAMA_USE_PREBUILT_UI=OFF
+-DCMAKE_CUDA_COMPILER_LAUNCHER=/recipe/nvcc_launcher.sh
+-DCMAKE_BUILD_WITH_INSTALL_RPATH=ON
+-DCMAKE_INSTALL_RPATH=$ORIGIN

recipe/scripts/runtime_build/docker-default-seccomp.json

@@ -0,0 +1,875 @@
+{
+	"defaultAction": "SCMP_ACT_ERRNO",
+	"defaultErrnoRet": 1,
+	"archMap": [
+		{
+			"architecture": "SCMP_ARCH_X86_64",
+			"subArchitectures": [
+				"SCMP_ARCH_X86",
+				"SCMP_ARCH_X32"
+			]
+		},
+		{
+			"architecture": "SCMP_ARCH_AARCH64",
+			"subArchitectures": [
+				"SCMP_ARCH_ARM"
+			]
+		},
+		{
+			"architecture": "SCMP_ARCH_MIPS64",
+			"subArchitectures": [
+				"SCMP_ARCH_MIPS",
+				"SCMP_ARCH_MIPS64N32"
+			]
+		},
+		{
+			"architecture": "SCMP_ARCH_MIPS64N32",
+			"subArchitectures": [
+				"SCMP_ARCH_MIPS",
+				"SCMP_ARCH_MIPS64"
+			]
+		},
+		{
+			"architecture": "SCMP_ARCH_MIPSEL64",
+			"subArchitectures": [
+				"SCMP_ARCH_MIPSEL",
+				"SCMP_ARCH_MIPSEL64N32"
+			]
+		},
+		{
+			"architecture": "SCMP_ARCH_MIPSEL64N32",
+			"subArchitectures": [
+				"SCMP_ARCH_MIPSEL",
+				"SCMP_ARCH_MIPSEL64"
+			]
+		},
+		{
+			"architecture": "SCMP_ARCH_S390X",
+			"subArchitectures": [
+				"SCMP_ARCH_S390"
+			]
+		},
+		{
+			"architecture": "SCMP_ARCH_RISCV64",
+			"subArchitectures": null
+		},
+		{
+			"architecture": "SCMP_ARCH_LOONGARCH64",
+			"subArchitectures": null
+		}
+	],
+	"syscalls": [
+		{
+			"names": [
+				"accept",
+				"accept4",
+				"access",
+				"adjtimex",
+				"alarm",
+				"bind",
+				"brk",
+				"cachestat",
+				"capget",
+				"capset",
+				"chdir",
+				"chmod",
+				"chown",
+				"chown32",
+				"clock_adjtime",
+				"clock_adjtime64",
+				"clock_getres",
+				"clock_getres_time64",
+				"clock_gettime",
+				"clock_gettime64",
+				"clock_nanosleep",
+				"clock_nanosleep_time64",
+				"close",
+				"close_range",
+				"connect",
+				"copy_file_range",
+				"creat",
+				"dup",
+				"dup2",
+				"dup3",
+				"epoll_create",
+				"epoll_create1",
+				"epoll_ctl",
+				"epoll_ctl_old",
+				"epoll_pwait",
+				"epoll_pwait2",
+				"epoll_wait",
+				"epoll_wait_old",
+				"eventfd",
+				"eventfd2",
+				"execve",
+				"execveat",
+				"exit",
+				"exit_group",
+				"faccessat",
+				"faccessat2",
+				"fadvise64",
+				"fadvise64_64",
+				"fallocate",
+				"fanotify_mark",
+				"fchdir",
+				"fchmod",
+				"fchmodat",
+				"fchmodat2",
+				"fchown",
+				"fchown32",
+				"fchownat",
+				"fcntl",
+				"fcntl64",
+				"fdatasync",
+				"fgetxattr",
+				"flistxattr",
+				"flock",
+				"fork",
+				"fremovexattr",
+				"fsetxattr",
+				"fstat",
+				"fstat64",
+				"fstatat64",
+				"fstatfs",
+				"fstatfs64",
+				"fsync",
+				"ftruncate",
+				"ftruncate64",
+				"futex",
+				"futex_requeue",
+				"futex_time64",
+				"futex_wait",
+				"futex_waitv",
+				"futex_wake",
+				"futimesat",
+				"getcpu",
+				"getcwd",
+				"getdents",
+				"getdents64",
+				"getegid",
+				"getegid32",
+				"geteuid",
+				"geteuid32",
+				"getgid",
+				"getgid32",
+				"getgroups",
+				"getgroups32",
+				"getitimer",
+				"getpeername",
+				"getpgid",
+				"getpgrp",
+				"getpid",
+				"getppid",
+				"getpriority",
+				"getrandom",
+				"getresgid",
+				"getresgid32",
+				"getresuid",
+				"getresuid32",
+				"getrlimit",
+				"get_robust_list",
+				"getrusage",
+				"getsid",
+				"getsockname",
+				"getsockopt",
+				"get_thread_area",
+				"gettid",
+				"gettimeofday",
+				"getuid",
+				"getuid32",
+				"getxattr",
+				"getxattrat",
+				"inotify_add_watch",
+				"inotify_init",
+				"inotify_init1",
+				"inotify_rm_watch",
+				"io_cancel",
+				"ioctl",
+				"io_destroy",
+				"io_getevents",
+				"io_pgetevents",
+				"io_pgetevents_time64",
+				"ioprio_get",
+				"ioprio_set",
+				"io_setup",
+				"io_submit",
+				"ipc",
+				"kill",
+				"landlock_add_rule",
+				"landlock_create_ruleset",
+				"landlock_restrict_self",
+				"lchown",
+				"lchown32",
+				"lgetxattr",
+				"link",
+				"linkat",
+				"listen",
+				"listmount",
+				"listxattr",
+				"listxattrat",
+				"llistxattr",
+				"_llseek",
+				"lremovexattr",
+				"lseek",
+				"lsetxattr",
+				"lstat",
+				"lstat64",
+				"madvise",
+				"map_shadow_stack",
+				"membarrier",
+				"memfd_create",
+				"memfd_secret",
+				"mincore",
+				"mkdir",
+				"mkdirat",
+				"mknod",
+				"mknodat",
+				"mlock",
+				"mlock2",
+				"mlockall",
+				"mmap",
+				"mmap2",
+				"mprotect",
+				"mq_getsetattr",
+				"mq_notify",
+				"mq_open",
+				"mq_timedreceive",
+				"mq_timedreceive_time64",
+				"mq_timedsend",
+				"mq_timedsend_time64",
+				"mq_unlink",
+				"mremap",
+				"mseal",
+				"msgctl",
+				"msgget",
+				"msgrcv",
+				"msgsnd",
+				"msync",
+				"munlock",
+				"munlockall",
+				"munmap",
+				"name_to_handle_at",
+				"nanosleep",
+				"newfstatat",
+				"_newselect",
+				"open",
+				"openat",
+				"openat2",
+				"pause",
+				"pidfd_open",
+				"pidfd_send_signal",
+				"pipe",
+				"pipe2",
+				"pkey_alloc",
+				"pkey_free",
+				"pkey_mprotect",
+				"poll",
+				"ppoll",
+				"ppoll_time64",
+				"prctl",
+				"pread64",
+				"preadv",
+				"preadv2",
+				"prlimit64",
+				"process_mrelease",
+				"pselect6",
+				"pselect6_time64",
+				"pwrite64",
+				"pwritev",
+				"pwritev2",
+				"read",
+				"readahead",
+				"readlink",
+				"readlinkat",
+				"readv",
+				"recv",
+				"recvfrom",
+				"recvmmsg",
+				"recvmmsg_time64",
+				"recvmsg",
+				"remap_file_pages",
+				"removexattr",
+				"removexattrat",
+				"rename",
+				"renameat",
+				"renameat2",
+				"restart_syscall",
+				"riscv_hwprobe",
+				"rmdir",
+				"rseq",
+				"rt_sigaction",
+				"rt_sigpending",
+				"rt_sigprocmask",
+				"rt_sigqueueinfo",
+				"rt_sigreturn",
+				"rt_sigsuspend",
+				"rt_sigtimedwait",
+				"rt_sigtimedwait_time64",
+				"rt_tgsigqueueinfo",
+				"sched_getaffinity",
+				"sched_getattr",
+				"sched_getparam",
+				"sched_get_priority_max",
+				"sched_get_priority_min",
+				"sched_getscheduler",
+				"sched_rr_get_interval",
+				"sched_rr_get_interval_time64",
+				"sched_setaffinity",
+				"sched_setattr",
+				"sched_setparam",
+				"sched_setscheduler",
+				"sched_yield",
+				"seccomp",
+				"select",
+				"semctl",
+				"semget",
+				"semop",
+				"semtimedop",
+				"semtimedop_time64",
+				"send",
+				"sendfile",
+				"sendfile64",
+				"sendmmsg",
+				"sendmsg",
+				"sendto",
+				"setfsgid",
+				"setfsgid32",
+				"setfsuid",
+				"setfsuid32",
+				"setgid",
+				"setgid32",
+				"setgroups",
+				"setgroups32",
+				"setitimer",
+				"setpgid",
+				"setpriority",
+				"setregid",
+				"setregid32",
+				"setresgid",
+				"setresgid32",
+				"setresuid",
+				"setresuid32",
+				"setreuid",
+				"setreuid32",
+				"setrlimit",
+				"set_robust_list",
+				"setsid",
+				"setsockopt",
+				"set_thread_area",
+				"set_tid_address",
+				"setuid",
+				"setuid32",
+				"setxattr",
+				"setxattrat",
+				"shmat",
+				"shmctl",
+				"shmdt",
+				"shmget",
+				"shutdown",
+				"sigaltstack",
+				"signalfd",
+				"signalfd4",
+				"sigprocmask",
+				"sigreturn",
+				"socketcall",
+				"socketpair",
+				"splice",
+				"stat",
+				"stat64",
+				"statfs",
+				"statfs64",
+				"statmount",
+				"statx",
+				"symlink",
+				"symlinkat",
+				"sync",
+				"sync_file_range",
+				"syncfs",
+				"sysinfo",
+				"tee",
+				"tgkill",
+				"time",
+				"timer_create",
+				"timer_delete",
+				"timer_getoverrun",
+				"timer_gettime",
+				"timer_gettime64",
+				"timer_settime",
+				"timer_settime64",
+				"timerfd_create",
+				"timerfd_gettime",
+				"timerfd_gettime64",
+				"timerfd_settime",
+				"timerfd_settime64",
+				"times",
+				"tkill",
+				"truncate",
+				"truncate64",
+				"ugetrlimit",
+				"umask",
+				"uname",
+				"unlink",
+				"unlinkat",
+				"uretprobe",
+				"utime",
+				"utimensat",
+				"utimensat_time64",
+				"utimes",
+				"vfork",
+				"vmsplice",
+				"wait4",
+				"waitid",
+				"waitpid",
+				"write",
+				"writev"
+			],
+			"action": "SCMP_ACT_ALLOW"
+		},
+		{
+			"names": [
+				"process_vm_readv",
+				"process_vm_writev",
+				"ptrace"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"minKernel": "4.8"
+			}
+		},
+		{
+			"names": [
+				"socket"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 38,
+					"op": "SCMP_CMP_LT"
+				}
+			]
+		},
+		{
+			"names": [
+				"socket"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 39,
+					"op": "SCMP_CMP_EQ"
+				}
+			]
+		},
+		{
+			"names": [
+				"socket"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 40,
+					"op": "SCMP_CMP_GT"
+				}
+			]
+		},
+		{
+			"names": [
+				"personality"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 0,
+					"op": "SCMP_CMP_EQ"
+				}
+			]
+		},
+		{
+			"names": [
+				"personality"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 8,
+					"op": "SCMP_CMP_EQ"
+				}
+			]
+		},
+		{
+			"names": [
+				"personality"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 131072,
+					"op": "SCMP_CMP_EQ"
+				}
+			]
+		},
+		{
+			"names": [
+				"personality"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 131080,
+					"op": "SCMP_CMP_EQ"
+				}
+			]
+		},
+		{
+			"names": [
+				"personality"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 4294967295,
+					"op": "SCMP_CMP_EQ"
+				}
+			]
+		},
+		{
+			"names": [
+				"sync_file_range2",
+				"swapcontext"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"arches": [
+					"ppc64le"
+				]
+			}
+		},
+		{
+			"names": [
+				"arm_fadvise64_64",
+				"arm_sync_file_range",
+				"sync_file_range2",
+				"breakpoint",
+				"cacheflush",
+				"set_tls"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"arches": [
+					"arm",
+					"arm64"
+				]
+			}
+		},
+		{
+			"names": [
+				"arch_prctl"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"arches": [
+					"amd64",
+					"x32"
+				]
+			}
+		},
+		{
+			"names": [
+				"modify_ldt"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"arches": [
+					"amd64",
+					"x32",
+					"x86"
+				]
+			}
+		},
+		{
+			"names": [
+				"s390_pci_mmio_read",
+				"s390_pci_mmio_write",
+				"s390_runtime_instr"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"arches": [
+					"s390",
+					"s390x"
+				]
+			}
+		},
+		{
+			"names": [
+				"riscv_flush_icache"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"arches": [
+					"riscv64"
+				]
+			}
+		},
+		{
+			"names": [
+				"open_by_handle_at"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_DAC_READ_SEARCH"
+				]
+			}
+		},
+		{
+			"names": [
+				"bpf",
+				"clone",
+				"clone3",
+				"fanotify_init",
+				"fsconfig",
+				"fsmount",
+				"fsopen",
+				"fspick",
+				"lookup_dcookie",
+				"lsm_get_self_attr",
+				"lsm_list_modules",
+				"lsm_set_self_attr",
+				"mount",
+				"mount_setattr",
+				"move_mount",
+				"open_tree",
+				"perf_event_open",
+				"quotactl",
+				"quotactl_fd",
+				"setdomainname",
+				"sethostname",
+				"setns",
+				"syslog",
+				"umount",
+				"umount2",
+				"unshare"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_ADMIN"
+				]
+			}
+		},
+		{
+			"names": [
+				"clone"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 0,
+					"value": 2114060288,
+					"op": "SCMP_CMP_MASKED_EQ"
+				}
+			],
+			"excludes": {
+				"caps": [
+					"CAP_SYS_ADMIN"
+				],
+				"arches": [
+					"s390",
+					"s390x"
+				]
+			}
+		},
+		{
+			"names": [
+				"clone"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [
+				{
+					"index": 1,
+					"value": 2114060288,
+					"op": "SCMP_CMP_MASKED_EQ"
+				}
+			],
+			"comment": "s390 parameter ordering for clone is different",
+			"includes": {
+				"arches": [
+					"s390",
+					"s390x"
+				]
+			},
+			"excludes": {
+				"caps": [
+					"CAP_SYS_ADMIN"
+				]
+			}
+		},
+		{
+			"names": [
+				"clone3"
+			],
+			"action": "SCMP_ACT_ERRNO",
+			"errnoRet": 38,
+			"excludes": {
+				"caps": [
+					"CAP_SYS_ADMIN"
+				]
+			}
+		},
+		{
+			"names": [
+				"reboot"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_BOOT"
+				]
+			}
+		},
+		{
+			"names": [
+				"chroot"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_CHROOT"
+				]
+			}
+		},
+		{
+			"names": [
+				"delete_module",
+				"init_module",
+				"finit_module"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_MODULE"
+				]
+			}
+		},
+		{
+			"names": [
+				"acct"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_PACCT"
+				]
+			}
+		},
+		{
+			"names": [
+				"kcmp",
+				"pidfd_getfd",
+				"process_madvise",
+				"process_vm_readv",
+				"process_vm_writev",
+				"ptrace"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_PTRACE"
+				]
+			}
+		},
+		{
+			"names": [
+				"iopl",
+				"ioperm"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_RAWIO"
+				]
+			}
+		},
+		{
+			"names": [
+				"settimeofday",
+				"stime",
+				"clock_settime",
+				"clock_settime64"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_TIME"
+				]
+			}
+		},
+		{
+			"names": [
+				"vhangup"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_TTY_CONFIG"
+				]
+			}
+		},
+		{
+			"names": [
+				"get_mempolicy",
+				"mbind",
+				"set_mempolicy",
+				"set_mempolicy_home_node"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYS_NICE"
+				]
+			}
+		},
+		{
+			"names": [
+				"syslog"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_SYSLOG"
+				]
+			}
+		},
+		{
+			"names": [
+				"bpf"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_BPF"
+				]
+			}
+		},
+		{
+			"names": [
+				"perf_event_open"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"includes": {
+				"caps": [
+					"CAP_PERFMON"
+				]
+			}
+		}
+	]
+}

recipe/scripts/runtime_build/fixed_pid.c

@@ -0,0 +1,27 @@
+/* The gpu-cuda recipe's process-id shim (MODEL-SETUP MS-PIN-3, "The build is reproducible").
+ *
+ * cudafe++ writes its process id into the module id that names every internal-linkage entity
+ * of the device code, and nvcc names its temporary files after its process id. Both then
+ * change from one build to the next, and so does the generated code. For those two programs
+ * only, getpid() returns FIXED_PID; every other program sees its real process id. nvcc_launcher.sh
+ * gives each object its own temporary folder, so a fixed id cannot make two compiles collide.
+ *
+ * Built inside the build container and loaded with LD_PRELOAD by nvcc_launcher.sh. It is a tool
+ * of the build, never part of the artifact.
+ */
+#define _GNU_SOURCE
+#include <errno.h>
+#include <string.h>
+#include <sys/syscall.h>
+#include <sys/types.h>
+#include <unistd.h>
+
+#define FIXED_PID 4242
+
+pid_t getpid(void) {
+    if (strcmp(program_invocation_short_name, "nvcc") == 0 ||
+        strcmp(program_invocation_short_name, "cudafe++") == 0) {
+        return FIXED_PID;
+    }
+    return (pid_t)syscall(SYS_getpid);
+}

recipe/scripts/runtime_build/nvcc_launcher.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+# The gpu-cuda recipe's CUDA compiler launcher (MODEL-SETUP MS-PIN-3, "The build is reproducible").
+#
+# CMake runs every nvcc compile as: nvcc_launcher.sh <nvcc command>. The launcher makes the
+# device code depend on the input alone:
+# - address-space randomization is off for the compiler (setarch -R), because NVVM's cicc
+#   generates different code for one input when its memory addresses move;
+# - nvcc and cudafe++ see a fixed process id (the shim named by NVCC_PID_SHIM), because
+#   cudafe++ writes its process id into the module id and nvcc names its temporary files by it;
+# - each object gets its own temporary folder, named after the object, so the fixed id cannot
+#   make two compiles collide;
+# - cicc's allocator (jemalloc) never returns memory on a timer, because under load its
+#   addresses, and so cicc's code, would follow timing (MALLOC_CONF; any inherited value is
+#   replaced).
+# Anything it cannot do is a refusal, never a compile that silently varies.
+set -euo pipefail
+
+shim="${NVCC_PID_SHIM:-}"
+if [ -z "$shim" ] || [ ! -f "$shim" ]; then
+    echo "nvcc launcher: NVCC_PID_SHIM does not name the fixed process id shim" >&2
+    exit 2
+fi
+object=""
+previous=""
+for argument in "$@"; do
+    if [ "$previous" = "-o" ]; then
+        object="$argument"
+    fi
+    previous="$argument"
+done
+if [ -z "$object" ]; then
+    echo "nvcc launcher: the command names no -o object" >&2
+    exit 2
+fi
+folder="${TMPDIR:-/tmp}/nvcc/$(printf '%s' "$object" | sha256sum | cut -c1-16)"
+rm -rf "$folder"
+mkdir -p "$folder"
+export TMPDIR="$folder"
+export LD_PRELOAD="$shim"
+export MALLOC_CONF="dirty_decay_ms:-1,muzzy_decay_ms:-1"
+exec setarch x86_64 -R "$@"

recipe/scripts/runtime_build/pin_source_times.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+# Every file of the checked-out source gets the pinned commit's time (MODEL-SETUP MS-PIN-3,
+# "The build is reproducible").
+#
+# cudafe++ mixes the source file's modification time into the module id that names the device
+# code's internal entities, and a checkout stamps every file with the time it ran, so two builds
+# on different days would differ. The commit's own timestamp is fixed by the commit. Links get
+# the time themselves (touch -h). A file left with any other time is a refusal.
+#
+# usage: pin_source_times.sh <git work tree>
+set -euo pipefail
+shopt -s inherit_errexit
+
+tree="${1:?usage: $0 <git work tree>}"
+tree="$(cd "$tree" && pwd)"
+epoch="$(git -C "$tree" log -1 --format=%ct)"
+if ! [[ "$epoch" =~ ^[0-9]+$ ]]; then
+    echo "refusing: $tree has no commit time" >&2
+    exit 1
+fi
+find "$tree" -path "$tree/.git" -prune -o -exec touch -h -d "@$epoch" {} +
+others="$(find "$tree" -path "$tree/.git" -prune -o -printf '%T@\t%p\n' \
+    | awk -F '\t' -v epoch="$epoch" 'n < 5 && $1 + 0 != epoch + 0 { print $2; n++ }')"
+if [ -n "$others" ]; then
+    echo "refusing: files in $tree still have another time: $others" >&2
+    exit 1
+fi
+echo "source times: $epoch"

recipe/scripts/runtime_build/seccomp.py

@@ -0,0 +1,56 @@
+"""The gpu-cuda recipe's build-container seccomp profile (MODEL-SETUP MS-PIN-3).
+
+Docker's own default profile, pinned by hash, plus one rule. The added rule allows
+personality(PER_LINUX | ADDR_NO_RANDOMIZE), which `setarch -R` needs to turn address
+randomization off for the CUDA compiler. The default refuses that value; nothing else changes.
+
+`docker-default-seccomp.json` is the profile Docker 29.8.1 builds in, unchanged: moby commit
+464cd50c3d9e92877d56940ea160de6fca7bea23, vendor/github.com/moby/profiles/seccomp/default.json.
+
+usage: python3 seccomp.py <output file>
+"""
+
+from __future__ import annotations
+
+import hashlib
+import json
+import sys
+from pathlib import Path
+
+DEFAULT = Path(__file__).with_name("docker-default-seccomp.json")
+DEFAULT_SHA256 = "536529b665dd0972c37bfb569f5d4ac8a53592e7b00752bc39ff063ca9864c74"
+PER_LINUX = 0x0000000
+ADDR_NO_RANDOMIZE = 0x0040000
+RULE = {
+    "names": ["personality"],
+    "action": "SCMP_ACT_ALLOW",
+    "args": [{"index": 0, "value": PER_LINUX | ADDR_NO_RANDOMIZE, "op": "SCMP_CMP_EQ"}],
+}
+
+
+def build_profile(default: bytes) -> dict:
+    """The pinned default profile with RULE added. A default that is not the pinned one is
+    refused, so the build never runs under a profile nobody reviewed."""
+    digest = hashlib.sha256(default).hexdigest()
+    if digest != DEFAULT_SHA256:
+        raise ValueError(f"the vendored Docker profile is not the pinned one (SHA-256 {digest})")
+    profile = json.loads(default)
+    profile["syscalls"].append(RULE)
+    return profile
+
+
+def main(argv: list[str]) -> int:
+    if len(argv) != 2:
+        print("usage: python3 seccomp.py <output file>", file=sys.stderr)
+        return 2
+    try:
+        profile = build_profile(DEFAULT.read_bytes())
+    except ValueError as error:
+        print(f"refusing: {error}", file=sys.stderr)
+        return 1
+    Path(argv[1]).write_text(json.dumps(profile, indent=1) + "\n", encoding="utf-8")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main(sys.argv))