fix: add RPM prefetch for Konflux hermetic builds of MPI images

Konflux hermetic builds inject cachi2 which disables remote dnf repos,
causing openssh-server and RDMA package installs to fail. Add rpms.in.yaml
and repo configs for RPM prefetching via cachi2.

CUDA: only openssh-server needed (RDMA packages already in base image).
ROCm: openssh-server, rdma-core, infiniband-diags needed. Lock file must
be generated on an entitled RHEL system.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: sutaakar

images/runtime/training/py312-cuda130-torch210-openmpi41/Dockerfile.konflux

@@ -48,20 +48,6 @@ RUN sed -i "s/#\(StrictModes \).*/\1no/g" /etc/ssh/sshd_config \
     && echo "StrictModes no" >> /etc/ssh/sshd_config \
     && echo "Port ${SSH_PORT}" >> /etc/ssh/sshd_config
 
-# Install InfiniBand and Mellanox RDMA user-space libraries.
-# libibverbs/librdmacm: base RDMA verbs and connection management.
-# libibumad: user MAD library required by some OpenMPI components.
-# libmlx5: Mellanox ConnectX-4/5/6/7 provider; activates rc_mlx5/dc_mlx5 UCX transports.
-# infiniband-diags: diagnostic tools (ibstat, ibstatus, iblinkinfo) for debugging IB connectivity.
-RUN dnf install -y \
-    rdma-core \
-    libibverbs \
-    librdmacm \
-    libibumad \
-    libmlx5 \
-    infiniband-diags \
-    && dnf clean all
-
 # User-level sshd config for running as non-root
 # OpenMPI MCA params file: read by every OpenMPI process regardless of environment variables,
 # so this reliably applies to orted and worker processes launched via SSH.

images/runtime/training/py312-cuda130-torch210-openmpi41/rpm-repos/ubi.repo

@@ -0,0 +1,62 @@
+[ubi-9-for-$basearch-baseos-rpms]
+name = Red Hat Universal Base Image 9 (RPMs) - BaseOS
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/baseos/os
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-for-$basearch-baseos-debug-rpms]
+name = Red Hat Universal Base Image 9 (Debug RPMs) - BaseOS
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/baseos/debug
+enabled = 0
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-for-$basearch-baseos-source-rpms]
+name = Red Hat Universal Base Image 9 (Source RPMs) - BaseOS
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/baseos/source/SRPMS
+enabled = 0
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-for-$basearch-appstream-rpms]
+name = Red Hat Universal Base Image 9 (RPMs) - AppStream
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/appstream/os
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-for-$basearch-appstream-debug-rpms]
+name = Red Hat Universal Base Image 9 (Debug RPMs) - AppStream
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/appstream/debug
+enabled = 0
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-for-$basearch-appstream-source-rpms]
+name = Red Hat Universal Base Image 9 (Source RPMs) - AppStream
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/appstream/source/SRPMS
+enabled = 0
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-for-$basearch-codeready-builder-rpms]
+name = Red Hat Universal Base Image 9 (RPMs) - CodeReady Builder
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/codeready-builder/os
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-for-$basearch-codeready-builder-debug-rpms]
+name = Red Hat Universal Base Image 9 (Debug RPMs) - CodeReady Builder
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/codeready-builder/debug
+enabled = 0
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-for-$basearch-codeready-builder-source-rpms]
+name = Red Hat Universal Base Image 9 (Source RPMs) - CodeReady Builder
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/$basearch/codeready-builder/source/SRPMS
+enabled = 0
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1

images/runtime/training/py312-cuda130-torch210-openmpi41/rpms.in.yaml

@@ -0,0 +1,12 @@
+contentOrigin:
+  repofiles:
+    - ./rpm-repos/ubi.repo
+
+packages:
+  - openssh-server
+
+arches:
+  - x86_64
+
+context:
+  containerfile: Dockerfile.konflux