DeepStream SDK delivers a complete streaming analytics toolkit for AI based video and image understanding and multi-sensor processing. This container is for NVIDIA Enterprise GPUs.
What Is DeepStream?
DeepStream is NVIDIA's GPU-accelerated toolkit for building real-time video, image, and sensor analytics pipelines. This page hosts the DeepStream containers for x86, ARM SBSA, DGX Spark, and Jetson.
For the full picture across the release, see the DeepStream SDK Collection.
Learn about DeepStream Skills. Reusable building blocks for perception, tracking, and reasoning. Paired with DeepStream coding agents, Skills take vision AI development from weeks to hours.
Available containers
| Container | Platforms | Inference backend | Best for |
|---|---|---|---|
deepstream:9.1-triton-multiarch |
x86 + Jetson | Triton (PyTorch, ONNX, TensorRT) | Development and deployment |
deepstream:9.1-samples-multiarch |
x86 + Jetson | TensorRT | Deployment |
deepstream:9.1-triton-sbsa-dgx-spark |
ARM SBSA, DGX Spark | Triton | Deployment |
Read the DeepStream 9.1 Release Notes for the full list of features in this release.
Note. DeepStream containers derived from previous releases (before DeepStream 6.1) need to update their CUDA GPG key to perform software updates. See the CUDA Linux repository key rotation notice for details.
Getting Started
Choose your platform below. The pull command is the same for every platform; only the run flags differ.
Prerequisites
| Component | Details |
|---|---|
| nvidia-container-toolkit | Docker 29.3.0 with the latest nvidia-container-toolkit. Usage of nvidia-docker2 packages with prior Docker versions is deprecated. |
| NVIDIA GPU Driver | Use version 595.58.03 for production deployments. |
| JetPack 7.2 (Jetson only) | A Jetson device running L4T BSP r39.2. The NVIDIA Container Runtime is bundled with JetPack. |
| Codecs script | DeepStream containers no longer include libraries for some multimedia operations (audio parsing, CPU decode/encode). Run this script inside the container to add them:/opt/nvidia/deepstream/deepstream/user_additional_install.sh |
Pull the container
-
From the top-right of this page, select the pull-down Get Container and copy the URL for the default container. Or click View all tags to select a different container.
-
Pull the container. Ensure the pull completes before continuing:
docker pull nvcr.io/nvidia/deepstream:9.1-triton-multiarchRun the container
First, allow external applications to connect to the host's X display:
xhost +Then run the container using the block matching your platform.
On x86:
docker run --gpus all -it --rm --network=host --privileged -v /tmp/.X11-unix:/tmp/.X11-unix -e DISPLAY=$DISPLAY -w /opt/nvidia/deepstream/deepstream-9.1 nvcr.io/nvidia/deepstream:9.1-triton-multiarchOn Jetson:
docker run -it --rm --runtime=nvidia --network=host -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix -w /opt/nvidia/deepstream/deepstream-9.1 nvcr.io/nvidia/deepstream:9.1-triton-multiarchAdditional arguments for cameras on Jetson:
- CSI camera:
-v /tmp/argus_socket:/tmp/argus_socket - USB camera:
--device /dev/video<N>
On ARM SBSA and DGX Spark:
docker run -it --rm --runtime=nvidia --network=host -e NVIDIA_DRIVER_CAPABILITIES=compute,utility,video,graphics --gpus all --privileged -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix -v /etc/X11:/etc/X11 nvcr.io/nvidia/deepstream:9.1-triton-sbsa-dgx-sparkDocker command line options explained:
| Option | Description |
|---|---|
-it |
Run the container in interactive mode. |
--gpus |
Make GPUs accessible inside the container (used on x86 and ARM SBSA). You can also specify a device (e.g. --gpus device=0). |
--runtime=nvidia |
Use the NVIDIA container runtime. Required on Jetson and ARM SBSA. |
--rm |
Delete the container when it exits. |
--privileged |
Grant the container access to host resources. |
-v |
Mount a directory from the host into the container. Commonly used to mount the host's X11 display for video output. You can mount additional directories (e.g. -v /home:/home) to expose configs, models, and other files. |
--cap-add SYSLOG |
Enables nvds_logger functionality inside the container. |
-p |
Map a network port from container to host. Needed to enable incoming connections for RTSP out (e.g. -p 8554:8554). |
Notes:
General (applies to all platforms):
-
Refer to
/opt/nvidia/deepstream/deepstream-9.1/READMEinside the container for details ondeepstream-appusage. -
Using the Triton docker as a base image. For creating a base image using the Triton docker as a baseline, one approach is to use an entry point with a combined script so end users can run a specific script for their application. Add the following to your Dockerfile:
ENTRYPOINT ["/bin/sh", "-c", "/opt/nvidia/deepstream/deepstream-9.1/entrypoint.sh && <custom command>"]- For Triton samples, while running
/opt/nvidia/deepstream/deepstream-9.1/samples/prepare_classification_test_video.sh, the FFMPEG package along with additional dependent libs need to be installed using the command below. For additional information refer to section 1.2 (codecs: DIFFERENCES SINCE DEEPSTREAM 6.1 AND ABOVE) and section 1.3 for BREAKING CHANGES in the Release Notes.
apt-get install --reinstall libmp3lame0 libxvidcore4 ffmpegOn Jetson:
-
These containers use the NVIDIA Container Runtime for Jetson. The runtime exposes device-specific BSP resources to the container so DeepStream can access the hardware it needs at runtime.
-
JetPack 6.0 and newer. The NVIDIA Container Runtime no longer mounts user-level libraries (CUDA, cuDNN, TensorRT) from the host. These libraries are installed inside the DeepStream container instead.
-
Building custom Jetson containers. See the Docker Containers section of the DeepStream Developer Guide.
Technical Support
DeepStream Support is available via:
| Method | Available to | |
|---|---|---|
| Forums | All developers | |
| Direct Support | NVIDIA AI Enterprise License holders |
Known Limitations
DeepStream 9.1 Triton containers (x86 and SBSA) have the following known CVEs:
| CVE | Description |
|---|---|
| CVE-2025-3887 | GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. This impacts Gstreamer H265 parser on Ubuntu 24.04. There is no publicly available fix for Ubuntu 24.04. Users can opt for Ubuntu Pro which has this fix included from Canonical. |
| GHSA-8rrh-rw8j-w5fx | The vulnerability exists in how the unpack function handles file
permissions after extraction. Wheel is affected by Arbitrary File
Permission Modification via Path Traversal in wheel unpack. As a fix, users can install setuptools as prerequisites, generate a wheel file that passes internal hash validation and run the exploit. This exploit works against the unpack function imported from setuptools._vendor.wheel.cli.unpack. DeepStream installs packages from a fixed list and is not affected. Users should follow the recommended fix guidance. |
| GHSA-58pv-8j8x-9vj2 | There is a Zip Slip path traversal vulnerability in the
jaraco.context package. This vulnerability may allow attackers to
extract files outside the intended extraction directory when malicious
tar archives are processed. As a fix, removing the custom filter is not feasible given backward compatibility issues. Users can use a safer filter strip_first_component that skips or sanitizes ../ character sequences. Since DeepStream does not install malicious or unknown tarballs, we are not affected. Users should follow the remediation guidance. |
License
The following licenses apply to the DeepStream SDK assets:
| Asset | Applicable EULA | Notes |
|---|---|---|
| SDK | DeepStream SDK EULA | A copy of the license is available on the following folder of the
SDK: /opt/nvidia/deepstream/deepstream-9.1/LicenseAgreement.pdf |
| Containers | DeepStream NGC License | License grants redistribution rights allowing developers to build applications on top of the DeepStream containers. |
| Development Containers | DeepStream NGC Development License | A development-only license. Does not allow redistribution of the container. |
| TAO Models | NVIDIA AI Product License | All TAO pre-trained models included in the DeepStream SDK are covered by the NVIDIA AI Product License. |
| DeepStream on GitHub | DeepStream OSS License | Applies to the DeepStream source, tools, and skills hosted on GitHub. |
NOTE: By pulling, downloading, or using the DeepStream SDK, you accept
the terms and conditions of the EULA licenses listed above.
This project will download and install additional third-party open
source software projects. Review the license terms of these open source
projects before use.
Please note that all container images come with the following packages installed:
-
autoconf ( license and license exception )
The software listed below is provided under the terms of GPLv3.
To obtain source code for software provided under licenses that require redistribution of source code, including the GNU General Public License (GPL) and GNU Lesser General Public License (LGPL), available under DeepStream Resources 9.1_3rd_party_oss. This offer is valid for a period of three (3) years from the date of the distribution of this product by NVIDIA CORPORATION.
| Component | License |
|---|---|
| autoconf | GPL 3.0 |
| libtool | GPL 3.0 |
| libglvnd-dev | GPL 3.0 |
| libgl1-mesa-dev | GPL 3.0 |
| libegl1-mesa-dev | GPL 3.0 |
| libgles2-mesa-dev | GPL 3.0 |
Get Help
Enterprise Support
Get access to knowledge base articles and support cases or submit a ticket.
Ethical AI
NVIDIA’s platforms and application frameworks enable developers to build a wide array of AI applications. Consider potential algorithmic bias when choosing or creating the models being deployed. Work with the model’s developer to ensure that it meets the requirements for the relevant industry and use case; that the necessary instruction and documentation are provided to understand error rates, confidence intervals, and results; and that the model is being used under the conditions and in the manner intended.