From 3e23994b4650fd60de1b457f7d93ecea28ade9bf Mon Sep 17 00:00:00 2001
From: Weimin Wang <301118019+weiminwang-nv@users.noreply.github.com>
Date: Mon, 17 Aug 2026 10:36:42 +0800
Subject: [PATCH 1/4] add git pull auth for docker image build job

Signed-off-by: Weimin Wang <301118019+weiminwang-nv@users.noreply.github.com>
---
 docker/Dockerfile.multi           | 10 +++++
 docker/Makefile                   |  8 ++++
 docker/common/github_auth.sh      | 61 +++++++++++++++++++++++++++++++
 docker/common/install_mooncake.sh |  3 ++
 docker/common/install_nixl.sh     |  3 ++
 docker/common/install_pytorch.sh  |  4 ++
 docker/common/install_ucx.sh      |  3 ++
 jenkins/BuildDockerImage.groovy   |  4 ++
 8 files changed, 96 insertions(+)
 create mode 100644 docker/common/github_auth.sh

diff --git a/docker/Dockerfile.multi b/docker/Dockerfile.multi
index 972742497dc6..f107604eb343 100644
--- a/docker/Dockerfile.multi
+++ b/docker/Dockerfile.multi
@@ -54,8 +54,10 @@ RUN --mount=type=bind,source=docker/common,target=/opt/docker/common \
     --mount=type=cache,target=/root/.cache/pip \
     --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    --mount=type=secret,id=github_clone_token \
     echo "Using GitHub mirror: ${GITHUB_MIRROR}" && \
     echo "Using Python version: ${PYTHON_VERSION}" && \
+    . /opt/docker/common/github_auth.sh && \
     GITHUB_MIRROR=${GITHUB_MIRROR} \
     PYTHON_VERSION=${PYTHON_VERSION} \
     CUDA_VER=${CUDA_VER} CUDNN_VER=${CUDNN_VER} \
@@ -81,6 +83,8 @@ RUN --mount=type=bind,source=docker/common,target=/opt/docker/common \
     --mount=type=cache,target=/root/.cache/pip \
     --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    --mount=type=secret,id=github_clone_token \
+    . /opt/docker/common/github_auth.sh && \
     GITHUB_MIRROR=${GITHUB_MIRROR} bash /opt/docker/common/install_ucx.sh && \
     GITHUB_MIRROR=${GITHUB_MIRROR} bash /opt/docker/common/install_nixl.sh && \
     bash /opt/docker/common/install_etcd.sh && \
@@ -114,6 +118,8 @@ COPY --from=triton /opt/tritonserver/caches /opt/tritonserver/caches
 
 # Install Triton deps, Mooncake, and CI tooling packages
 RUN --mount=type=bind,source=docker/common,target=/opt/docker/common \
+    --mount=type=secret,id=github_clone_token \
+    . /opt/docker/common/github_auth.sh && \
     GITHUB_MIRROR=${GITHUB_MIRROR} bash /opt/docker/common/install_triton.sh && \
     if [ -f /etc/redhat-release ]; then \
         echo "Rocky8 detected, skipping mooncake installation"; \
@@ -139,9 +145,13 @@ ARG GITHUB_MIRROR=""
 ARG BUILD_WHEEL_ARGS="--clean"
 ARG BUILD_WHEEL_SCRIPT="scripts/build_wheel.py"
 RUN --mount=type=cache,target=/root/.cache/pip --mount=type=cache,target=${CCACHE_DIR} \
+    --mount=type=secret,id=github_clone_token \
     if [ -n "$GITHUB_MIRROR" ]; then \
       export PIP_INDEX_URL="https://urm.nvidia.com/artifactory/api/pypi/pypi-remote/simple"; \
     fi && \
+    # Authenticates `git submodule update` and the CMake FetchContent clones
+    # (3rdparty/fetch_content.json) that this build pulls from github.com.
+    . docker/common/github_auth.sh && \
     TRTLLM_BUILD_SOURCE_COMMIT=${GIT_COMMIT} \
     GITHUB_MIRROR=${GITHUB_MIRROR} \
     python3 ${BUILD_WHEEL_SCRIPT} ${BUILD_WHEEL_ARGS}
diff --git a/docker/Makefile b/docker/Makefile
index 94af008c1cce..bc7375b00b5d 100644
--- a/docker/Makefile
+++ b/docker/Makefile
@@ -50,6 +50,13 @@ CUBLAS_VERSION     ?=
 GIT_COMMIT         ?= $(shell git rev-parse HEAD)
 TRT_LLM_VERSION    ?= $(shell grep '^__version__' ../tensorrt_llm/version.py | grep -o '=.*' | tr -d '= "')
 GITHUB_MIRROR      ?=
+# Optional GitHub token used to authenticate the github.com clones performed
+# during the build (see docker/common/github_auth.sh). Usually inherited from the
+# environment, never passed as a build arg -- build-arg values stay readable in
+# `docker history`. Empty means anonymous, rate-limited access.
+GITHUB_CLONE_TOKEN ?=
+COMMA              := ,
+GITHUB_SECRET_ARG  := $(if $(GITHUB_CLONE_TOKEN),--secret id=github_clone_token$(COMMA)env=GITHUB_CLONE_TOKEN)
 PYTHON_VERSION     ?=
 NGC_STAGING_REPO   ?= nvcr.io/nvstaging/tensorrt-llm
 NGC_REPO           ?= nvcr.io/nvidia/tensorrt-llm
@@ -87,6 +94,7 @@ base_pull:
 	@echo "Building docker image: $(IMAGE_WITH_TAG)"
 	docker buildx build $(DOCKER_BUILD_OPTS) $(DOCKER_BUILD_ARGS) \
 		--progress $(DOCKER_PROGRESS) \
+		$(GITHUB_SECRET_ARG) \
 		$(if $(BASE_IMAGE), --build-arg BASE_IMAGE=$(BASE_IMAGE)) \
 		$(if $(BASE_TAG), --build-arg BASE_TAG=$(BASE_TAG)) \
 		$(if $(TRITON_IMAGE), --build-arg TRITON_IMAGE=$(TRITON_IMAGE)) \
diff --git a/docker/common/github_auth.sh b/docker/common/github_auth.sh
new file mode 100644
index 000000000000..fa4aaa5930a9
--- /dev/null
+++ b/docker/common/github_auth.sh
@@ -0,0 +1,61 @@
+#!/bin/bash
+# Enable authenticated access to github.com for this shell and everything it
+# spawns: the `git clone`s in install_*.sh, `git submodule update` and the CMake
+# FetchContent clones of the wheel build, `pip install git+https://github.com/...`
+# and so on.
+#
+# GitHub meters anonymous requests per source IP and a whole CI pool shares very
+# few of them, so unauthenticated clones start getting throttled once the
+# pipeline is busy; requests carrying a token are metered per account instead.
+#
+# The token is optional -- without it everything falls back to anonymous access.
+# It is read from a BuildKit secret mount (`docker buildx build --secret
+# id=github_clone_token,env=GITHUB_CLONE_TOKEN`, wired up in docker/Makefile) or
+# straight from GITHUB_CLONE_TOKEN in the environment.
+#
+# The rewrite is published through GIT_CONFIG_* environment variables on purpose:
+# `git config --global` would write the token into $HOME/.gitconfig and bake it
+# into the image layer. Env config needs git >= 2.31; an older git ignores these
+# variables and simply stays anonymous.
+#
+# Source this file, do not execute it:
+#     . /opt/docker/common/github_auth.sh
+# Sourcing it more than once (a RUN layer that already set it up calling an
+# install script that sources it again) is a no-op -- the first one wins.
+setup_github_auth() {
+    # Keep the token out of the build log even under `set -x`.
+    local restore_x=""
+    case "$-" in *x*) restore_x=1 ;; esac
+    set +x
+
+    if [ -n "${GITHUB_AUTH_CONFIGURED:-}" ]; then
+        if [ -n "$restore_x" ]; then set -x; fi
+        return 0
+    fi
+    export GITHUB_AUTH_CONFIGURED=1
+
+    local token="${GITHUB_CLONE_TOKEN:-}"
+    local secret_file="${GITHUB_CLONE_TOKEN_FILE:-/run/secrets/github_clone_token}"
+    if [ -z "$token" ] && [ -r "$secret_file" ]; then
+        token=$(cat "$secret_file")
+    fi
+
+    if [ -n "$token" ]; then
+        # Append rather than overwrite, in case the caller already carries its own
+        # GIT_CONFIG_* entries. Per-repo mirrors (GITHUB_MIRROR, the GitLab mirrors
+        # configured on CI agents) keep winning over this catch-all rewrite: git
+        # resolves insteadOf by longest matching prefix.
+        local idx="${GIT_CONFIG_COUNT:-0}"
+        export "GIT_CONFIG_KEY_${idx}=url.https://x-access-token:${token}@github.com/.insteadOf"
+        export "GIT_CONFIG_VALUE_${idx}=https://github.com/"
+        export GIT_CONFIG_COUNT=$((idx + 1))
+        echo "[github_auth] Using authenticated github.com access."
+    else
+        echo "[github_auth] No GitHub token available, using anonymous github.com access."
+    fi
+
+    if [ -n "$restore_x" ]; then set -x; fi
+    return 0
+}
+
+setup_github_auth
diff --git a/docker/common/install_mooncake.sh b/docker/common/install_mooncake.sh
index badd5f0eb6f5..0935c7f31a2f 100644
--- a/docker/common/install_mooncake.sh
+++ b/docker/common/install_mooncake.sh
@@ -1,6 +1,9 @@
 #!/bin/bash
 set -ex
 
+# Authenticate the github.com clones below; no-op when no token is available.
+source "$(dirname "${BASH_SOURCE[0]}")/github_auth.sh"
+
 MOONCAKE_VERSION="v0.3.7.post2"
 MOONCAKE_REPO="https://github.com/kvcache-ai/Mooncake.git"
 MOONCAKE_INSTALL_PATH="/usr/local/Mooncake"
diff --git a/docker/common/install_nixl.sh b/docker/common/install_nixl.sh
index 316bc0b9a34e..c6f41141da75 100644
--- a/docker/common/install_nixl.sh
+++ b/docker/common/install_nixl.sh
@@ -1,6 +1,9 @@
 #!/bin/bash
 set -ex
 
+# Authenticate the github.com clone below; no-op when no token is available.
+source "$(dirname "${BASH_SOURCE[0]}")/github_auth.sh"
+
 GITHUB_URL="https://github.com"
 UCX_INSTALL_PATH="/usr/local/ucx/"
 CUDA_PATH="/usr/local/cuda"
diff --git a/docker/common/install_pytorch.sh b/docker/common/install_pytorch.sh
index 952a7898f138..e15506da7aac 100644
--- a/docker/common/install_pytorch.sh
+++ b/docker/common/install_pytorch.sh
@@ -2,6 +2,10 @@
 
 set -ex
 
+# Authenticate the github.com clones in the source install paths below; no-op
+# when no token is available.
+source "$(dirname "${BASH_SOURCE[0]}")/github_auth.sh"
+
 # Use latest stable version from https://pypi.org/project/torch/#history
 # and closest to the version specified in
 # https://docs.nvidia.com/deeplearning/frameworks/pytorch-release-notes/rel-26-05.html#rel-26-05
diff --git a/docker/common/install_ucx.sh b/docker/common/install_ucx.sh
index a6dce41eb51a..865071926fc5 100644
--- a/docker/common/install_ucx.sh
+++ b/docker/common/install_ucx.sh
@@ -1,6 +1,9 @@
 #!/bin/bash
 set -ex
 
+# Authenticate the github.com clone below; no-op when no token is available.
+source "$(dirname "${BASH_SOURCE[0]}")/github_auth.sh"
+
 UCX_VERSION="v1.22.x"
 UCX_COMMIT="8a6b06fb880accbb933a79cda893883872c68d9d"
 UCX_INSTALL_PATH="/usr/local/ucx/"
diff --git a/jenkins/BuildDockerImage.groovy b/jenkins/BuildDockerImage.groovy
index 4f3d26f07eaf..7dff24020349 100644
--- a/jenkins/BuildDockerImage.groovy
+++ b/jenkins/BuildDockerImage.groovy
@@ -876,6 +876,10 @@ pipeline {
     environment {
         CCACHE_DIR="${CCACHE_DIR}"
         PIP_INDEX_URL="https://urm.nvidia.com/artifactory/api/pypi/pypi-remote/simple"
+        // Picked up by docker/Makefile and handed to `docker buildx build` as a
+        // BuildKit secret, which authenticates the github.com clones inside the
+        // image build (docker/common/github_auth.sh).
+        GITHUB_CLONE_TOKEN = credentials('github_read_public_only_token')
     }
     stages {
         stage("Setup Environment") {

From 9cfd69eded63eec0db353bc5980f2ab8832c3a04 Mon Sep 17 00:00:00 2001
From: Weimin Wang <301118019+weiminwang-nv@users.noreply.github.com>
Date: Mon, 17 Aug 2026 11:17:04 +0800
Subject: [PATCH 2/4] add git version check

Signed-off-by: Weimin Wang <301118019+weiminwang-nv@users.noreply.github.com>
---
 docker/common/github_auth.sh | 51 ++++++++++++++++++++++++++++++++++--
 1 file changed, 49 insertions(+), 2 deletions(-)

diff --git a/docker/common/github_auth.sh b/docker/common/github_auth.sh
index fa4aaa5930a9..f6fa521c2287 100644
--- a/docker/common/github_auth.sh
+++ b/docker/common/github_auth.sh
@@ -1,4 +1,19 @@
 #!/bin/bash
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 # Enable authenticated access to github.com for this shell and everything it
 # spawns: the `git clone`s in install_*.sh, `git submodule update` and the CMake
 # FetchContent clones of the wheel build, `pip install git+https://github.com/...`
@@ -15,13 +30,36 @@
 #
 # The rewrite is published through GIT_CONFIG_* environment variables on purpose:
 # `git config --global` would write the token into $HOME/.gitconfig and bake it
-# into the image layer. Env config needs git >= 2.31; an older git ignores these
-# variables and simply stays anonymous.
+# into the image layer. Env config needs git >= 2.31, which is checked up front
+# (see git_env_config_supported below).
 #
 # Source this file, do not execute it:
 #     . /opt/docker/common/github_auth.sh
 # Sourcing it more than once (a RUN layer that already set it up calling an
 # install script that sources it again) is a no-op -- the first one wins.
+
+# git only reads GIT_CONFIG_COUNT / GIT_CONFIG_KEY_n / GIT_CONFIG_VALUE_n from
+# the environment since 2.31 (2021-03). An older git silently ignores them, so
+# an intended authenticated clone would quietly degrade to an anonymous one --
+# detect that here and say so rather than letting it happen unnoticed.
+git_env_config_supported() {
+    local version major minor
+    command -v git >/dev/null 2>&1 || return 1
+    version=$(git --version 2>/dev/null | sed -n 's/^git version \([0-9][0-9.]*\).*/\1/p')
+    [ -n "$version" ] || return 1
+    major="${version%%.*}"
+    minor="${version#*.}"
+    minor="${minor%%.*}"
+    case "$major$minor" in *[!0-9]*|"") return 1 ;; esac
+    if [ "$major" -gt 2 ]; then
+        return 0
+    fi
+    if [ "$major" -eq 2 ] && [ "$minor" -ge 31 ]; then
+        return 0
+    fi
+    return 1
+}
+
 setup_github_auth() {
     # Keep the token out of the build log even under `set -x`.
     local restore_x=""
@@ -34,6 +72,15 @@ setup_github_auth() {
     fi
     export GITHUB_AUTH_CONFIGURED=1
 
+    if ! git_env_config_supported; then
+        local git_desc
+        git_desc=$(git --version 2>/dev/null) || git_desc="git not found"
+        echo "[github_auth] ${git_desc}: no GIT_CONFIG_* environment support" \
+             "(needs git >= 2.31), using anonymous github.com access."
+        if [ -n "$restore_x" ]; then set -x; fi
+        return 0
+    fi
+
     local token="${GITHUB_CLONE_TOKEN:-}"
     local secret_file="${GITHUB_CLONE_TOKEN_FILE:-/run/secrets/github_clone_token}"
     if [ -z "$token" ] && [ -r "$secret_file" ]; then

From 212118a7faf6095245718b36f6d4095b40383162 Mon Sep 17 00:00:00 2001
From: Weimin Wang <301118019+weiminwang-nv@users.noreply.github.com>
Date: Mon, 17 Aug 2026 13:39:48 +0800
Subject: [PATCH 3/4] refine git fetch and use urm pypi index

Signed-off-by: Weimin Wang <301118019+weiminwang-nv@users.noreply.github.com>
---
 docker/Dockerfile.multi          |  3 +++
 docker/common/github_auth.sh     | 26 ++++++++++++++------------
 docker/common/install_pytorch.sh |  4 ++++
 docker/common/install_ucx.sh     | 16 ++++++++++++----
 4 files changed, 33 insertions(+), 16 deletions(-)

diff --git a/docker/Dockerfile.multi b/docker/Dockerfile.multi
index f107604eb343..d41af1949a7f 100644
--- a/docker/Dockerfile.multi
+++ b/docker/Dockerfile.multi
@@ -70,6 +70,9 @@ RUN --mount=type=bind,source=docker/common,target=/opt/docker/common \
 COPY constraints.txt /tmp/constraints.txt
 # constraints.txt is also consumed as a pip constraint file, which forbids extras.
 RUN --mount=type=cache,target=/root/.cache/pip \
+    if [ -n "$GITHUB_MIRROR" ]; then \
+      export PIP_INDEX_URL="https://urm.nvidia.com/artifactory/api/pypi/pypi-remote/simple"; \
+    fi && \
     pip3 uninstall -y tornado black nbconvert pillow nvidia-cutlass-dsl nvidia-cutlass-dsl-libs-base \
         nvidia-cutlass-dsl-libs-core nvidia-cutlass-dsl-libs-cu12 nvidia-cutlass-dsl-libs-cu13 numpy wandb || true && \
     # Remove any leftover namespace dirs or dist-info that pip missed
diff --git a/docker/common/github_auth.sh b/docker/common/github_auth.sh
index f6fa521c2287..5c81b4d21aa9 100644
--- a/docker/common/github_auth.sh
+++ b/docker/common/github_auth.sh
@@ -70,7 +70,6 @@ setup_github_auth() {
         if [ -n "$restore_x" ]; then set -x; fi
         return 0
     fi
-    export GITHUB_AUTH_CONFIGURED=1
 
     if ! git_env_config_supported; then
         local git_desc
@@ -87,20 +86,23 @@ setup_github_auth() {
         token=$(cat "$secret_file")
     fi
 
-    if [ -n "$token" ]; then
-        # Append rather than overwrite, in case the caller already carries its own
-        # GIT_CONFIG_* entries. Per-repo mirrors (GITHUB_MIRROR, the GitLab mirrors
-        # configured on CI agents) keep winning over this catch-all rewrite: git
-        # resolves insteadOf by longest matching prefix.
-        local idx="${GIT_CONFIG_COUNT:-0}"
-        export "GIT_CONFIG_KEY_${idx}=url.https://x-access-token:${token}@github.com/.insteadOf"
-        export "GIT_CONFIG_VALUE_${idx}=https://github.com/"
-        export GIT_CONFIG_COUNT=$((idx + 1))
-        echo "[github_auth] Using authenticated github.com access."
-    else
+    if [ -z "$token" ]; then
         echo "[github_auth] No GitHub token available, using anonymous github.com access."
+        if [ -n "$restore_x" ]; then set -x; fi
+        return 0
     fi
 
+    # Append rather than overwrite, in case the caller already carries its own
+    # GIT_CONFIG_* entries. Per-repo mirrors (GITHUB_MIRROR, the GitLab mirrors
+    # configured on CI agents) keep winning over this catch-all rewrite: git
+    # resolves insteadOf by longest matching prefix.
+    local idx="${GIT_CONFIG_COUNT:-0}"
+    export "GIT_CONFIG_KEY_${idx}=url.https://x-access-token:${token}@github.com/.insteadOf"
+    export "GIT_CONFIG_VALUE_${idx}=https://github.com/"
+    export GIT_CONFIG_COUNT=$((idx + 1))
+    export GITHUB_AUTH_CONFIGURED=1
+    echo "[github_auth] Using authenticated github.com access."
+
     if [ -n "$restore_x" ]; then set -x; fi
     return 0
 }
diff --git a/docker/common/install_pytorch.sh b/docker/common/install_pytorch.sh
index e15506da7aac..773e20028393 100644
--- a/docker/common/install_pytorch.sh
+++ b/docker/common/install_pytorch.sh
@@ -6,6 +6,10 @@ set -ex
 # when no token is available.
 source "$(dirname "${BASH_SOURCE[0]}")/github_auth.sh"
 
+if [ -n "${GITHUB_MIRROR}" ]; then
+  export PIP_INDEX_URL="https://urm.nvidia.com/artifactory/api/pypi/pypi-remote/simple"
+fi
+
 # Use latest stable version from https://pypi.org/project/torch/#history
 # and closest to the version specified in
 # https://docs.nvidia.com/deeplearning/frameworks/pytorch-release-notes/rel-26-05.html#rel-26-05
diff --git a/docker/common/install_ucx.sh b/docker/common/install_ucx.sh
index 865071926fc5..8ce155abce77 100644
--- a/docker/common/install_ucx.sh
+++ b/docker/common/install_ucx.sh
@@ -13,12 +13,20 @@ UCX_REPO="https://github.com/openucx/ucx.git"
 mkdir -p /third-party-source
 
 rm -rf ${UCX_INSTALL_PATH}
-git clone -b ${UCX_VERSION} ${UCX_REPO}
-cd ucx
-git checkout ${UCX_COMMIT}
-cd ..
+
+# Fetch just the pinned commit rather than cloning the whole history
+rm -rf ucx
+git init -q ucx
+git -C ucx remote add origin ${UCX_REPO}
+git -C ucx fetch -q --depth 1 origin ${UCX_COMMIT}
+git -C ucx checkout -q FETCH_HEAD
+
 tar -czf /third-party-source/ucx-${UCX_VERSION}.tar.gz ucx
 cd ucx
+# Pull external/gpunetio shallow, for the same reason: autogen.sh below does a
+# full-history `git submodule update --init` on it. With the submodule already
+# at the recorded commit that call does nothing.
+git submodule update --init --depth 1
 ./autogen.sh
 ./contrib/configure-release       \
   --prefix=${UCX_INSTALL_PATH}    \

From cf5936f7083746a316c4bcca286d416f328dbf98 Mon Sep 17 00:00:00 2001
From: Weimin Wang <301118019+weiminwang-nv@users.noreply.github.com>
Date: Mon, 31 Aug 2026 14:20:27 +0800
Subject: [PATCH 4/4] update current_image_tags.properties

Signed-off-by: Weimin Wang <301118019+weiminwang-nv@users.noreply.github.com>
---
 jenkins/current_image_tags.properties | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/jenkins/current_image_tags.properties b/jenkins/current_image_tags.properties
index b883aec89d79..cb73c547d6f0 100644
--- a/jenkins/current_image_tags.properties
+++ b/jenkins/current_image_tags.properties
@@ -13,8 +13,8 @@
 #     images are adopted from PostMerge pipelines, the abbreviated commit hash is used instead.
 IMAGE_NAME=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm
 
-LLM_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:pytorch-26.05-py3-x86_64-ubuntu24.04-skip-tritondevel-202608271702-17084
-LLM_SBSA_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:pytorch-26.05-py3-sbsa-ubuntu24.04-skip-tritondevel-202608271702-17084
-LLM_ROCKYLINUX8_PY310_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:cuda-13.2.1-devel-rocky8-x86_64-rocky8-py310-skip-tritondevel-202608271702-17084
-LLM_ROCKYLINUX8_PY312_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:cuda-13.2.1-devel-rocky8-x86_64-rocky8-py312-skip-tritondevel-202608271702-17084
-LLM_SBSA_WHEEL_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:cuda-13.2.1-devel-ubuntu24.04-sbsa-ubuntu24.04-py312-skip-tritondevel-202608271702-17084
+LLM_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:pytorch-26.05-py3-x86_64-ubuntu24.04-skip-tritondevel-202608311413-17788
+LLM_SBSA_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:pytorch-26.05-py3-sbsa-ubuntu24.04-skip-tritondevel-202608311413-17788
+LLM_ROCKYLINUX8_PY310_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:cuda-13.2.1-devel-rocky8-x86_64-rocky8-py310-skip-tritondevel-202608311413-17788
+LLM_ROCKYLINUX8_PY312_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:cuda-13.2.1-devel-rocky8-x86_64-rocky8-py312-skip-tritondevel-202608311413-17788
+LLM_SBSA_WHEEL_DOCKER_IMAGE=artifactory.nvidia.com/sw-tensorrt-llm-docker-local/tensorrt-llm:cuda-13.2.1-devel-ubuntu24.04-sbsa-ubuntu24.04-py312-skip-tritondevel-202608311413-17788