add uv

Author: Jyothirmaikottu

data/common-safety-ignorelist.json

@@ -2,8 +2,5 @@
     "51358": "Safety is not packaged with container, it is the result of security scanning process",
     "76769" : "A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Which was built with container and cannot be patched.",
     "76771" : "A vulnerability, which was classified as problematic, was found in Pytorch version 2.5.1 and prior. Which was built with container and cannot be patched.",
-    "78828" : "A DoS vulnerability in MKLDNN pooling implementation affecting PyTorch versions < 2.7.1-rc1. Container is PyTorch 2.6.0 and cannot be upgraded to 2.7.1.",
-    "85151": "Protobuf DoS vulnerability - upgrading to 6.x would break TensorFlow compatibility. Mitigated by input validation.",
-    "85691": "SageMaker SSL certificate validation issue - fixed in 2.256.0",
-    "85692": "SageMaker HMAC secret disclosure - fixed in 2.256.0"
+    "78828" : "A DoS vulnerability in MKLDNN pooling implementation affecting PyTorch versions < 2.7.1-rc1. Container is PyTorch 2.6.0 and cannot be upgraded to 2.7.1."
 }

tensorflow/training/docker/2.19/py3/Dockerfile.cpu

@@ -247,6 +247,10 @@ RUN apt-get update  \
  && rm -rf /var/lib/apt/lists/* \
  && apt-get clean
 
+# Install UV for faster package installation
+RUN curl -LsSf https://astral.sh/uv/install.sh | sh
+ENV PATH="/root/.cargo/bin:${PATH}"
+
 # https://github.com/yaml/pyyaml/issues/601
 # PyYaml less than 6.0.1 failes to build with cython v3 and above.
 # tf-models-official uses older versions, breaking the install.
@@ -255,31 +259,26 @@ RUN apt-get update  \
 # and this is fine since sagemaker is more important than the models and
 # the models still work on pyyaml 6 in this context.
 # Need to install wheel before we can fix the pyyaml issue below
-RUN pip install --no-cache-dir -U \
+RUN uv pip install --system --no-cache-dir \
     wheel \
     "cython<3" \
     "pyyaml<6" \
     --no-build-isolation
 
 # https://github.com/tensorflow/models/issues/9267
 # tf-models does not respect existing installations of TF and always installs open source TF
-RUN ${PIP} install \
-    --default-timeout=300 \
-    --retries 5 \
-    --no-cache-dir -U \
+RUN uv pip install --system --no-cache-dir \
     "tf-models-official==${TF_VERSION}.1" \
     "tensorflow-text==${TF_VERSION}.0" \
  && ${PIP} uninstall -y tensorflow tensorflow-gpu \
- && ${PIP} install --no-cache-dir -U \
+ && uv pip install --system --no-cache-dir \
     ${TF_URL} \
     "tensorflow-io==0.37.*" \
     tensorflow-datasets
 
-# Install rust and cargo
-RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
-ENV PATH="/root/.cargo/bin:${PATH}"
+# Rust/cargo already installed with UV
 
-RUN $PYTHON -m pip install --no-cache-dir -U \
+RUN uv pip install --system --no-cache-dir \
     numba \
     bokeh \
     imageio \
@@ -288,7 +287,7 @@ RUN $PYTHON -m pip install --no-cache-dir -U \
     seaborn \
     shap
 
-RUN $PYTHON -m pip install --no-cache-dir -U \
+RUN uv pip install --system --no-cache-dir \
     sagemaker \
     sagemaker-experiments \
     sagemaker-tensorflow-training \

tensorflow/training/docker/2.19/py3/Dockerfile.sagemaker.cpu.core_packages.json

@@ -1,7 +1,4 @@
 {
-  "setuptools": {
-    "version_specifier": ">=81.0.0"
-  },
   "awscli": {
     "version_specifier": "<2"
   },

tensorflow/training/docker/2.19/py3/cu125/Dockerfile.gpu

@@ -362,13 +362,13 @@ RUN $PYTHON -m pip install --no-cache-dir -U \
 
 RUN $PYTHON -m pip install --no-cache-dir -U \
     sagemaker \
-    sagemaker-experiments \
+    sagemaker-experiments==0.1.45 \
     sagemaker-tensorflow-training \
-    sagemaker-training \
+    sagemaker-training\
     y-py \
     sagemaker-studio-analytics-extension \
-    "sparkmagic<1" \
-    sagemaker-studio-sparkmagic-lib \
+    sparkmagic==0.22.0 \
+    sagemaker-studio-sparkmagic-lib==0.1.4 \
     smclarify
 
 # Re-pin numpy after all installs to ensure TF compatibility

tensorflow/training/docker/2.19/py3/cu125/Dockerfile.sagemaker.gpu.core_packages.json

@@ -1,7 +1,4 @@
 {
-  "setuptools": {
-    "version_specifier": ">=81.0.0"
-  },
   "awscli": {
     "version_specifier": "<2"
   },