---
title: "Building hermetic notebook images for Open Data Hub and Red Hat OpenShift AI"
description: "Open Data Hub and Red Hat OpenShift AI adopted hermetic container builds to eliminate network failures, satisfy Conforma compliance, and ensure reproducible notebook environments. Instead of pulling packages during image creation, dependencies are pinned in lockfiles, prefetched into a local cache using tools like Cachi2, and installed with the network disabled. The workflow relies on a unified Containerfile capable of running locally, within GitHub Actions, and on Konflux via Tekton tasks. To pass audit checks and avoid generic tarball downloads, the team packaged awkward binaries like ripgrep and Pandoc into multi-arch Python wheels while patching Node postinstall scripts that fetch files at install time. Upstream CentOS and downstream Red Hat Enterprise Linux dependencies are maintained in distinct lock trees to prevent subtle packaging mismatches."
---

# Building hermetic notebook images for Open Data Hub and Red Hat OpenShift AI

[Red Hat](https://yomu.fyi/company/red-hat) · Vath Sok · Aug 28, 2026

**Type:** Problem & solution

## Summary

Open Data Hub and Red Hat OpenShift AI adopted hermetic container builds to eliminate network failures, satisfy Conforma compliance, and ensure reproducible notebook environments. Instead of pulling packages during image creation, dependencies are pinned in lockfiles, prefetched into a local cache using tools like Cachi2, and installed with the network disabled. The workflow relies on a unified Containerfile capable of running locally, within GitHub Actions, and on Konflux via Tekton tasks. To pass audit checks and avoid generic tarball downloads, the team packaged awkward binaries like ripgrep and Pandoc into multi-arch Python wheels while patching Node postinstall scripts that fetch files at install time. Upstream CentOS and downstream Red Hat Enterprise Linux dependencies are maintained in distinct lock trees to prevent subtle packaging mismatches.

## Context

Container builds for Open Data Hub and Red Hat OpenShift AI faced failures due to drifting package mirrors, non-reproducible dependency trees, opaque tarball URLs in SBOMs, and strict Konflux network isolation and Conforma compliance requirements.

## Approach / What changed

The team implemented hermetic builds where dependencies are pinned in lockfiles, prefetched into a local cache via tools like Cachi2 and Hermeto, and installed with the network turned off across local environments, GitHub Actions, and Konflux. They prioritized typed package ecosystems over generic URL downloads, created multi-arch Python wheels for tools like ripgrep and Pandoc, patched postinstall download scripts, and separated upstream CentOS lockfiles from downstream RHEL lockfiles.

## Takeaways

- Hermetic builds decouple caching from image compilation by prefetching all dependencies into a local cache using tools like Cachi2 or Hermeto before running builds without network access.
- Typed package ecosystems such as rpm, pip, npm, and gomod are preferred over generic tarball downloads to produce verifiable SBOMs and meet Conforma compliance requirements.
- Upstream and downstream lock trees should remain separate to prevent incompatibilities between CentOS packages and subscribed Red Hat Enterprise Linux or AIPCC base images.

**Tags:** [CI/CD](https://yomu.fyi/topic/ci-cd), [Docker](https://yomu.fyi/topic/docker), [Open Source](https://yomu.fyi/topic/open-source), [Python](https://yomu.fyi/topic/python), [Reliability](https://yomu.fyi/topic/reliability)

- Source: [Red Hat](https://developers.redhat.com/articles/2026/08/28/hermetic-notebook-images-for-open-data-hub-and-red-hat-openshift-ai)
- Source URL: https://developers.redhat.com/articles/2026/08/28/hermetic-notebook-images-for-open-data-hub-and-red-hat-openshift-ai
- Ingested by Yomu: 2026-08-28T04:00:52.062Z

[Read original post](https://developers.redhat.com/articles/2026/08/28/hermetic-notebook-images-for-open-data-hub-and-red-hat-openshift-ai)