Issue: The Ubuntu 26.04 (resolute) base image ships /usr/bin/pebble (Canonical's service
manager), which is built against a vulnerable golang.org/x/net (CVE-2026-39821).
Solution : This container's entrypoint is nvidia-driver, so pebble is never used,delete pebble to address the CVE. delete pebble
Issue: The Ubuntu 26.04 (resolute) base image ships /usr/bin/pebble (Canonical's service
manager), which is built against a vulnerable golang.org/x/net (CVE-2026-39821).
Solution : This container's entrypoint is nvidia-driver, so pebble is never used,delete pebble to address the CVE. delete pebble