Generate spec file with 644 permissions

Signed-off-by: Evan Lezar <elezar@nvidia.com>

CHANGELOG.md

@@ -4,6 +4,7 @@
 
 * Add support for updating containerd configs to the `nvidia-ctk runtime configure` command.
 * Create file in `etc/ld.so.conf.d` with permissions `644` to support non-root containers.
+* Generate CDI specification files with `644` permissions to allow rootless applications (e.g. podman)
 
 ## v1.13.1
 

cmd/nvidia-ctk/cdi/generate/generate.go

@@ -251,6 +251,7 @@ func (m command) generateSpec(cfg *config) (spec.Interface, error) {
 		spec.WithDeviceSpecs(deviceSpecs),
 		spec.WithEdits(*commonEdits.ContainerEdits),
 		spec.WithFormat(cfg.format),
+		spec.WithPermissions(0644),
 	)
 }