UniqAI/nvidia-container-toolkit
1
0
Fork 0
mirror of https://github.com/NVIDIA/nvidia-container-toolkit synced 2025-06-26 18:18:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
2,462 Commits 20 Branches 81 Tags
main
Commit Graph

2 Commits

Author SHA1 Message Date
Evan Lezar
39975fc77b [no-relnote] Refactor ldconfig hooks 
Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2025-06-24 13:53:20 +02:00
Evan Lezar
ec29b602c3 Run update-ldcache in isolated namespaces 
This change uses the reexec package to run the update of the
ldcache in a container in a process with isolated namespaces.
Since the hook is invoked as a createContainer hook, these
namespaces are cloned from the container's namespaces.

In the reexec handler, we further isolate the proc filesystem,
mount the host ldconfig to a tmpfs, and pivot into the containers
root.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
 2025-05-15 12:45:49 +02:00