Skip to content

Conversation

@cheshirekow
Copy link
Collaborator

@cheshirekow cheshirekow commented Nov 7, 2025

Description

This change simply adds a new markdown document 3rdparty/README.md that describes the process developers should follow when adding dependencies to the C++ build.

The process described here attempts to strike a balance between:

  1. A streamlined experience for developers adding new dependencies
  2. Clear visibility for reviewers into the fact that new dependencies are being added, along with the ability to verify the compliance and security processes are followed.
  3. Enabling future machine-automation of process elements that will consume information about third party dependencies.

A separate change will convert existing third party dependencies to follow this documented process.

Summary by CodeRabbit

  • Documentation
    • Added comprehensive guide for adding and integrating C++ dependencies, including installation strategies for various package types, dependency source management, patch handling and application, license tracking, and security review workflows.

Test Coverage

This changes simply adds a new markdown file and there is no relevant testing to be done.

PR Checklist

Please review the following before submitting your PR:

  • PR description clearly explains what and why. If using CodeRabbit's summary, please make sure it makes sense.

  • PR Follows TRT-LLM CODING GUIDELINES to the best of your knowledge.

  • Test cases are provided for new code paths (see test instructions)

  • Any new dependencies have been scanned for license and vulnerabilities

  • CODEOWNERS updated if ownership changes

  • Documentation updated as needed

  • Update tava architecture diagram if there is a significant design change in PR.

  • The reviewers assigned automatically/manually are appropriate for the PR.

  • Please check this after reviewing the above items as appropriate for this PR.

GitHub Bot Help

/bot [-h] ['run', 'kill', 'skip', 'reuse-pipeline'] ...

Provide a user friendly way for developers to interact with a Jenkins server.

Run /bot [-h|--help] to print this help message.

See details below for each supported subcommand.

run [--reuse-test (optional)pipeline-id --disable-fail-fast --skip-test --stage-list "A10-PyTorch-1, xxx" --gpu-type "A30, H100_PCIe" --test-backend "pytorch, cpp" --add-multi-gpu-test --only-multi-gpu-test --disable-multi-gpu-test --post-merge --extra-stage "H100_PCIe-TensorRT-Post-Merge-1, xxx" --detailed-log --debug(experimental)]

Launch build/test pipelines. All previously running jobs will be killed.

--reuse-test (optional)pipeline-id (OPTIONAL) : Allow the new pipeline to reuse build artifacts and skip successful test stages from a specified pipeline or the last pipeline if no pipeline-id is indicated. If the Git commit ID has changed, this option will be always ignored. The DEFAULT behavior of the bot is to reuse build artifacts and successful test results from the last pipeline.

--disable-reuse-test (OPTIONAL) : Explicitly prevent the pipeline from reusing build artifacts and skipping successful test stages from a previous pipeline. Ensure that all builds and tests are run regardless of previous successes.

--disable-fail-fast (OPTIONAL) : Disable fail fast on build/tests/infra failures.

--skip-test (OPTIONAL) : Skip all test stages, but still run build stages, package stages and sanity check stages. Note: Does NOT update GitHub check status.

--stage-list "A10-PyTorch-1, xxx" (OPTIONAL) : Only run the specified test stages. Examples: "A10-PyTorch-1, xxx". Note: Does NOT update GitHub check status.

--gpu-type "A30, H100_PCIe" (OPTIONAL) : Only run the test stages on the specified GPU types. Examples: "A30, H100_PCIe". Note: Does NOT update GitHub check status.

--test-backend "pytorch, cpp" (OPTIONAL) : Skip test stages which don't match the specified backends. Only support [pytorch, cpp, tensorrt, triton]. Examples: "pytorch, cpp" (does not run test stages with tensorrt or triton backend). Note: Does NOT update GitHub pipeline status.

--only-multi-gpu-test (OPTIONAL) : Only run the multi-GPU tests. Note: Does NOT update GitHub check status.

--disable-multi-gpu-test (OPTIONAL) : Disable the multi-GPU tests. Note: Does NOT update GitHub check status.

--add-multi-gpu-test (OPTIONAL) : Force run the multi-GPU tests in addition to running L0 pre-merge pipeline.

--post-merge (OPTIONAL) : Run the L0 post-merge pipeline instead of the ordinary L0 pre-merge pipeline.

--extra-stage "H100_PCIe-TensorRT-Post-Merge-1, xxx" (OPTIONAL) : Run the ordinary L0 pre-merge pipeline and specified test stages. Examples: --extra-stage "H100_PCIe-TensorRT-Post-Merge-1, xxx".

--detailed-log (OPTIONAL) : Enable flushing out all logs to the Jenkins console. This will significantly increase the log volume and may slow down the job.

--debug (OPTIONAL) : Experimental feature. Enable access to the CI container for debugging purpose. Note: Specify exactly one stage in the stage-list parameter to access the appropriate container environment. Note: Does NOT update GitHub check status.

For guidance on mapping tests to stage names, see docs/source/reference/ci-overview.md
and the scripts/test_to_stage_mapping.py helper.

kill

kill

Kill all running builds associated with pull request.

skip

skip --comment COMMENT

Skip testing for latest commit on pull request. --comment "Reason for skipping build/test" is required. IMPORTANT NOTE: This is dangerous since lack of user care and validation can cause top of tree to break.

reuse-pipeline

reuse-pipeline

Reuse a previous pipeline to validate current commit. This action will also kill all currently running builds associated with the pull request. IMPORTANT NOTE: This is dangerous since lack of user care and validation can cause top of tree to break.

@cheshirekow cheshirekow requested a review from a team as a code owner November 7, 2025 20:34
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 7, 2025

📝 Walkthrough

Walkthrough

A new comprehensive documentation file is added at 3rdparty/README.md detailing best practices and procedures for adding and integrating C++ dependencies. It covers decision points, installation strategies, build phases, package management tools, source integration methods, license tracking, and security workflows.

Changes

Cohort / File(s) Summary
Third-party dependency documentation
3rdparty/README.md
New documentation covering workflows for integrating C++ dependencies including build phase decisions, Debian/Python/tarball package installation, conan integration, CMake source integration, FetchContent, ExternalProject, attribution management, license tracking, and security review procedures

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

  • Verify documentation accuracy and completeness of dependency integration workflows
  • Confirm examples and code snippets are syntactically correct
  • Check consistency with existing project conventions and practices

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title follows the required template with Jira ticket, type, and clear summary. It directly describes the main change: documenting the C++ dependency process.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check ✅ Passed The PR description clearly explains what the change does, why it's needed, acknowledges no testing is required, and includes a completed checklist.
✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 6

🧹 Nitpick comments (1)
3rdparty/README.md (1)

62-62: Minor wordiness improvements (optional)

LanguageTool flagged several phrases that could be more concise. Consider these optional refinements for clarity:

  • Line 62: "prior to" → "before"
  • Line 118: "absolutely required" → "required"
  • Line 131: "outside of CMake" → "outside CMake"

Also applies to: 118-118, 131-131

📜 Review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 748c56a and e6cbe6b.

📒 Files selected for processing (1)
  • 3rdparty/README.md (1 hunks)
🧰 Additional context used
🧠 Learnings (5)
📓 Common learnings
Learnt from: venkywonka
Repo: NVIDIA/TensorRT-LLM PR: 6029
File: .github/pull_request_template.md:45-53
Timestamp: 2025-08-27T17:50:13.264Z
Learning: For PR templates in TensorRT-LLM, avoid suggesting changes that would increase developer overhead, such as converting plain bullets to mandatory checkboxes. The team prefers guidance-style bullets that don't require explicit interaction to reduce friction in the PR creation process.
📚 Learning: 2025-09-09T18:31:44.336Z
Learnt from: venkywonka
Repo: NVIDIA/TensorRT-LLM PR: 7658
File: .github/CODEOWNERS:160-164
Timestamp: 2025-09-09T18:31:44.336Z
Learning: The teams NVIDIA/trt-llm-release-nim-branch-approval and NVIDIA/trt-llm-release-branch-approval exist in the NVIDIA organization and are valid for use in .github/CODEOWNERS files, even if they may not be accessible via external API queries due to permissions.

Applied to files:

  • 3rdparty/README.md
📚 Learning: 2025-08-18T09:08:07.687Z
Learnt from: tongyuantongyu
Repo: NVIDIA/TensorRT-LLM PR: 6984
File: cpp/tensorrt_llm/CMakeLists.txt:297-299
Timestamp: 2025-08-18T09:08:07.687Z
Learning: In the TensorRT-LLM project, artifacts are manually copied rather than installed via `cmake --install`, so INSTALL_RPATH properties are not needed - only BUILD_RPATH affects the final artifacts.

Applied to files:

  • 3rdparty/README.md
📚 Learning: 2025-08-01T15:14:45.673Z
Learnt from: yibinl-nvidia
Repo: NVIDIA/TensorRT-LLM PR: 6506
File: examples/models/core/mixtral/requirements.txt:3-3
Timestamp: 2025-08-01T15:14:45.673Z
Learning: In TensorRT-LLM, examples directory can have different dependency versions than the root requirements.txt file. Version conflicts between root and examples dependencies are acceptable because examples are designed to be standalone and self-contained.

Applied to files:

  • 3rdparty/README.md
📚 Learning: 2025-09-16T09:30:09.716Z
Learnt from: tongyuantongyu
Repo: NVIDIA/TensorRT-LLM PR: 7763
File: cpp/tensorrt_llm/CMakeLists.txt:297-301
Timestamp: 2025-09-16T09:30:09.716Z
Learning: In the TensorRT-LLM project, NCCL libraries are loaded earlier by PyTorch libraries or the bindings library, so the main shared library doesn't need NCCL paths in its RPATH - the libraries will already be available in the process address space when needed.

Applied to files:

  • 3rdparty/README.md
🪛 LanguageTool
3rdparty/README.md

[grammar] ~20-~20: Ensure spelling is correct
Context: ... the name of your package there. NOTE: nspect tooling will automatically detect the i...

(QB_NEW_EN_ORTHOGRAPHY_ERROR_IDS_1)


[style] ~62-~62: ‘prior to’ might be wordy. Consider a shorter alternative.
Context: ...ring virtual environment initialization prior to configuring the build with cmake. Inclu...

(EN_WORDINESS_PREMIUM_PRIOR_TO)


[style] ~118-~118: ‘absolutely required’ might be wordy. Consider a shorter alternative.
Context: ...d below don't work and git-submodule is absolutely required, please add the submodule under the 3rd...

(EN_WORDINESS_PREMIUM_ABSOLUTELY_REQUIRED)


[style] ~131-~131: This phrase is redundant. Consider using “outside”.
Context: ...equiring an additional step managed outside of CMake. 2. The fetch, patch, and build...

(OUTSIDE_OF)


[style] ~175-~175: This phrase is redundant. Consider using “outside”.
Context: ...dd_library/find_file/find_path` outside of a find module the pckage. Please add i...

(OUTSIDE_OF)

🪛 markdownlint-cli2 (0.18.1)
3rdparty/README.md

72-72: Fenced code blocks should have a language specified

(MD040, fenced-code-language)


86-86: Link and image reference definitions should be needed
Unused link or image reference definition: "7"

(MD053, link-image-reference-definitions)


155-155: Fenced code blocks should have a language specified

(MD040, fenced-code-language)


205-205: Hard tabs
Column: 2

(MD010, no-hard-tabs)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)
  • GitHub Check: Pre-commit Check

@cheshirekow cheshirekow force-pushed the thirdparty-cpp-process branch from e6cbe6b to c1622db Compare November 12, 2025 17:42
@cheshirekow
Copy link
Collaborator Author

/bot run

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24326 [ run ] triggered by Bot. Commit: c1622db

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24326 [ run ] completed with state FAILURE. Commit: c1622db
/LLM/main/L0_MergeRequest_PR pipeline #18355 completed with status: 'FAILURE'

@cheshirekow
Copy link
Collaborator Author

/bot run

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24334 [ run ] triggered by Bot. Commit: c1622db

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24334 [ run ] completed with state SUCCESS. Commit: c1622db
/LLM/main/L0_MergeRequest_PR pipeline #18363 completed with status: 'FAILURE'

@cheshirekow cheshirekow force-pushed the thirdparty-cpp-process branch from c1622db to fa9400e Compare November 12, 2025 22:13
@cheshirekow
Copy link
Collaborator Author

/bot run

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24338 [ run ] triggered by Bot. Commit: fa9400e

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24338 [ run ] completed with state SUCCESS. Commit: fa9400e
/LLM/main/L0_MergeRequest_PR pipeline #18367 completed with status: 'FAILURE'

@cheshirekow cheshirekow force-pushed the thirdparty-cpp-process branch from fa9400e to 030c06a Compare November 13, 2025 18:24
@cheshirekow
Copy link
Collaborator Author

/bot run

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24492 [ run ] triggered by Bot. Commit: 030c06a

This change simply adds a new markdown document 3rdparty/README.md that
describes the process developers should follow when adding dependencies
to the C++ build.

The process described here attempts to strike a balance between:

1. A streamlined experience for developers adding new dependencies
2. Clear visibility for reviewers into the fact that new dependencies are
   being added, along with the ability to verify the compliance and
   security processes are followed.
3. Enabling future machine-automation of process elements that will
   consume information about third party dependencies.

A separate change will convert existing third party dependencies to
follow this documented process.

Signed-off-by: Josh Bialkowski <[email protected]>
@cheshirekow cheshirekow force-pushed the thirdparty-cpp-process branch from 030c06a to 326f007 Compare November 13, 2025 20:04
@tensorrt-cicd
Copy link
Collaborator

PR_Github #24492 [ run ] completed with state SUCCESS. Commit: 030c06a
/LLM/main/L0_MergeRequest_PR pipeline #18487 completed with status: 'FAILURE'

@cheshirekow
Copy link
Collaborator Author

/bot run

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24565 [ run ] triggered by Bot. Commit: 326f007

@tensorrt-cicd
Copy link
Collaborator

PR_Github #24565 [ run ] completed with state SUCCESS. Commit: 326f007
/LLM/main/L0_MergeRequest_PR pipeline #18542 completed with status: 'FAILURE'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants