Commit Graph

7 Commits

Author SHA1 Message Date
Evan Lezar
c42e0ac27f Move SafeExec logic to utils package
Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-02-28 14:38:02 +02:00
Evan Lezar
2cb81c0cf9 Move CreateLdsoconfdFile to ContainerRoot
Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-02-28 14:29:52 +02:00
Evan Lezar
2c878e653e Move containerRoot to utils package
Move the containerRoot type to a utils package so that this can be
shared between hooks.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-02-28 14:14:28 +02:00
Evan Lezar
52b9631333 Use libcontainer execseal to run ldconfig
This change copies ldconfig into a memfd before executing it from
the createContainer hook.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-02-27 13:52:27 +02:00
Evan Lezar
9429fbac5f [no-relnote] Move root to separate file
Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-02-27 13:48:29 +02:00
Evan Lezar
4f0de9f1ef Increase priority of ld.so.conf.d config file
This change ensures that the created /etc/ld.so.conf.d file
has a higher priority to ensure that the injected libraries
take precendence over non-compat libraries.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2024-06-13 13:49:14 +02:00
Avi Deitcher
179d8655f9 Move nvidia-ctk hook command into own binary
This change creates an nvidia-cdi-hook binary for implementing
CDI hooks. This allows for these hooks to be separated from the
nvidia-ctk command which may, for example, require libnvidia-ml
to support other functionality.

The nvidia-ctk hook subcommand is maintained as an alias for the
time being to allow for existing CDI specifications referring to
this path to work as expected.

Signed-off-by: Avi Deitcher <avi@deitcher.net>
2024-05-21 12:19:44 +02:00