Difference between revisions of "GPU Software Bill Of Materials (SBOM)"

From Open-IOV
Jump to navigation Jump to search
m (Re-sync page from tracked wiki source: fix cross-document links and diagram; refresh status)
(Fix repository links to the cgit tree URLs)
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
{{About message}}
{{Superseded}}
= GPU Software Bill Of Materials (SBOM) =
= GPU Software Bill Of Materials (SBOM) =


<blockquote>'''This page is superseded.''' The previous content was an imported 2023 wiki survey of third-party GPU-virtualization components. The complete, repository-scoped SBOM now lives at:</blockquote>
<blockquote>'''This page is superseded.''' The previous content was an imported 2023 wiki survey of third-party GPU-virtualization components. The complete, repository-scoped SBOM now lives at:</blockquote>


* '''[https://git.vgpu.io/open-iov/blob/master/SBOM.md <code>SBOM.md</code>]''' — human-readable SBOM: primary component, first-party components, bundled third-party components with SHA-256 hashes, archived-documentation provenance, external build/run dependencies, dependency graph, license/redistribution terms, and the NTIA minimum-elements checklist.
* '''[https://git.vgpu.io/open-iov.git/tree/SBOM.md <code>SBOM.md</code>]''' — human-readable SBOM: primary component, first-party components, bundled third-party components with SHA-256 hashes, archived-documentation provenance, external build/run dependencies, dependency graph, license/redistribution terms, and the NTIA minimum-elements checklist.
* '''[https://git.vgpu.io/open-iov/blob/master/sbom/open-iov-0.1.0.cdx.json <code>sbom/open-iov-0.1.0.cdx.json</code>]''' — machine-readable CycloneDX 1.6 SBOM (serial <code>urn:uuid:e626c5a1-9697-4546-bb2b-5b4feb58e922</code>).
* '''[https://git.vgpu.io/open-iov.git/tree/sbom/open-iov-0.1.0.cdx.json <code>sbom/open-iov-0.1.0.cdx.json</code>]''' — machine-readable CycloneDX 1.6 SBOM (serial <code>urn:uuid:e626c5a1-9697-4546-bb2b-5b4feb58e922</code>).


The SBOM covers every file tracked in this repository plus the external components required to build, run and support it. NVIDIA drivers, GSP firmware and CUDA packages are documented but '''not distributed''' here.
The SBOM covers every file tracked in this repository plus the external components required to build, run and support it. NVIDIA drivers, GSP firmware and CUDA packages are documented but '''not distributed''' here.

Latest revision as of 04:41, 12 October 2026

An absence of critical technical documentation has historically slowed growth and adoption of developer ecosystems for GPU virtualization.

This CC-BY-4.0 licensed content can either be used with attribution, or used as inspiration for new documentation, created by GPU vendors for public commercial distribution as developer documentation.

Where possible, this documentation will clearly label dates and versions of observed-but-not-guaranteed behaviour vs. vendor-documented stable interfaces/behaviour with guarantees of forward or backward compatibility.

Superseded document. This page records an earlier analysis that the current implementation no longer follows. It is kept for the record; current documentation is linked at the top of the page or at Documentation.

GPU Software Bill Of Materials (SBOM)

This page is superseded. The previous content was an imported 2023 wiki survey of third-party GPU-virtualization components. The complete, repository-scoped SBOM now lives at:

  • SBOM.md — human-readable SBOM: primary component, first-party components, bundled third-party components with SHA-256 hashes, archived-documentation provenance, external build/run dependencies, dependency graph, license/redistribution terms, and the NTIA minimum-elements checklist.
  • sbom/open-iov-0.1.0.cdx.json — machine-readable CycloneDX 1.6 SBOM (serial urn:uuid:e626c5a1-9697-4546-bb2b-5b4feb58e922).

The SBOM covers every file tracked in this repository plus the external components required to build, run and support it. NVIDIA drivers, GSP firmware and CUDA packages are documented but not distributed here.