Installing Software on Air-Gapped NVIDIA DGX-1 Systems

For security purposes, some installations require that systems be isolated from the internet or outside networks. Since most DGX-1 software updates are accomplished through an over-the-network process with NVIDIA servers, this section explains how updates can be made when using an over-the-network method is not an option. It includes a process for installing Docker containers as well.

Installing NVIDIA DGX-1 Software

One method for updating DGX-1 software on an air-gapped DGX-1 is to download the ISO image, copy it to removable media and then re-image the DGX-1 from the media. This method is available only for software versions that are available as ISO images for download.

Alternately, you can update the DGX-1 software by performing a network update from a local repository. This method is available only for software versions that are available for over-the-network updates.

Re-Imaging the System

Note:WARNING:This process destroys all data and software customizations that you have made on the DGX-1. Be sure to back up any data that you want to preserve, and push any Docker images that you want to keep to a trusted registry.
  1. Obtain the ISO image from the Enterprise Support site.
    1. Log on to the NVIDIA Enterprise Services site and click the Announcements tab to locate the DGX-1 Base OS Image ISO file.
    2. Download the image ISO file.
  2. Refer to the instructions in the Restoring the DGX-1 Software Image section for additional instructions.

Creating a Local Mirror of the NVIDIA and Canonical Repositories

Instructions for setting up a private repository or mirroring the NVIDIA and Canonical repositories are beyond the scope of this document. It is expected that users are knowledgeable about those processes.

  1. Create a private repository that mirrors the NVIDIA as well as the Canonical repositories.

    Consult /etc/apt/sources.list and the contents of /etc/apt.sources.list.d/ on your running DGX-1 for the repository locations.

  2. Modify /etc/apt/sources.list and appropriate contents of /etc/apt.sources.list.d/ to point to your private repository.
  3. Perform the update from the private repository, starting with Get the new package list step (sudo apt-get update) of the instructions found in the DGX-1 Software Release Notes and Upgrade Guide, which you can obtain from the Enterprise Support site.

Installing Docker Containers

This method applies to Docker containers hosted on the NVIDIA DGX Container Registry, and requires that you have an active DGX Cloud Services account.

  1. On a system with internet access, log in to the DGX Container Registry by entering the following command and credentials.
    $ docker login nvcr.io
    Username: $oauthtoken 
    Password: apikey

    Type “$oauthtoken” exactly as shown for the Username. This is a special username that enables API key authentication. In place of apikey, paste in the API Key text that you obtained from the Cloud Services website.

  2. Enter the docker pull command, specifying the image registry, image repository, and tag:
    $ docker pull nvcr.io/nvidia/repository:tag
  3. Verify the image is on your system using docker images.
    $ docker images
  4. Save the Docker image as an archive. .
    $ docker save nvcr.io/nvidia/repository:tag > framework.tar
  5. Transfer the image to the air-gapped system using removable media such as a USB flash drive.
  6. Load the NVIDIA Docker image.
     $ docker load –i framework.tar
  7. Verify the image is on your system.
    $ docker images