UniqAI/nvidia-container-toolkit
1
0
Fork 0
mirror of https://github.com/NVIDIA/nvidia-container-toolkit synced 2025-02-03 19:45:36 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

Merge commit from fork

Browse Source 
Disable mounting of compat libs from container by default
This commit is contained in:
Evan Lezar 2025-01-23 10:56:32 +01:00 committed by GitHub
commit 7ae5c2901f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cmd/nvidia-container-runtime-hook/main.go
View File

@ -114,6 +114,9 @@ func doPrestart() {
} }
args = append(args, "configure") args = append(args, "configure")
if !hook.Features.AllowCUDACompatLibsFromContainer.IsEnabled() {
args = append(args, "--no-cntlibs")
}
if ldconfigPath := cli.NormalizeLDConfigPath(); ldconfigPath != "" { if ldconfigPath := cli.NormalizeLDConfigPath(); ldconfigPath != "" {
args = append(args, fmt.Sprintf("--ldconfig=%s", ldconfigPath)) args = append(args, fmt.Sprintf("--ldconfig=%s", ldconfigPath))
} }

3
internal/config/features.go
View File

@ -18,6 +18,9 @@ package config
// features specifies a set of named features. // features specifies a set of named features.
type features struct { type features struct {
// AllowCUDACompatLibsFromContainer allows CUDA compat libs from a container
// to override certain driver library mounts from the host.
AllowCUDACompatLibsFromContainer *feature `toml:"allow-cuda-compat-libs-from-container,omitempty"`
// AllowLDConfigFromContainer allows non-host ldconfig paths to be used. // AllowLDConfigFromContainer allows non-host ldconfig paths to be used.
// If this feature flag is not set to 'true' only host-rooted config paths // If this feature flag is not set to 'true' only host-rooted config paths
// (i.e. paths starting with an '@' are considered valid) // (i.e. paths starting with an '@' are considered valid)

2
third_party/libnvidia-container vendored

@ -1 +1 @@
Subproject commit 16f37fcafcbdaf67525135104d60d98d36688ba9 Subproject commit f23e5e55ea27b3680aef363436d4bcf7659e0bfc