diff --git a/pkg/container_config.go b/pkg/container_config.go index d91fccd1..c6901974 100644 --- a/pkg/container_config.go +++ b/pkg/container_config.go @@ -295,8 +295,7 @@ func getDevices(hookConfig *HookConfig, env map[string]string, mounts []Mount, p return devices } - // Error out otherwise - log.Panicln("insufficient privileges to read device list from NVIDIA_VISIBLE_DEVICES envvar") + log.Printf("Ignoring devices specified in NVIDIA_VISIBLE_DEVICES (privileged=%v, config.accept-nvidia-visible-devices-envvar-when-unprivileged=%v) ", privileged, hookConfig.AcceptEnvvarUnprivileged) return nil } diff --git a/pkg/container_test.go b/pkg/container_test.go index e5f0302e..4fec7dc3 100644 --- a/pkg/container_test.go +++ b/pkg/container_test.go @@ -540,7 +540,6 @@ func TestDeviceListSourcePriority(t *testing.T) { acceptUnprivileged bool acceptMounts bool expectedDevices *string - expectedPanic bool }{ { description: "Mount devices, unprivileged, no accept unprivileged", @@ -567,7 +566,7 @@ func TestDeviceListSourcePriority(t *testing.T) { privileged: false, acceptUnprivileged: false, acceptMounts: true, - expectedPanic: true, + expectedDevices: nil, }, { description: "No mount devices, privileged, no accept unprivileged", @@ -621,7 +620,7 @@ func TestDeviceListSourcePriority(t *testing.T) { privileged: false, acceptUnprivileged: false, acceptMounts: false, - expectedPanic: true, + expectedDevices: nil, }, } for _, tc := range tests { @@ -638,12 +637,6 @@ func TestDeviceListSourcePriority(t *testing.T) { devices = getDevices(&hookConfig, env, tc.mountDevices, tc.privileged, false) } - // For any tests that are expected to panic, make sure they do. - if tc.expectedPanic { - mustPanic(t, getDevices) - return - } - // For all other tests, just grab the devices and check the results getDevices() if !reflect.DeepEqual(devices, tc.expectedDevices) {