nvidia-container-toolkit/cmd/nvidia-container-runtime-hook
Evan Lezar 7c758c97b8
Add ignore-imex-channel-requests feature flag
This allows the NVIDIA Container Toolkit to ignore IMEX channel requests
through the NVIDIA_IMEX_CHANNELS envvar or volume mounts and ensures that
the NVIDIA Container Toolkit cannot be used to provide out-of-band access
to an IMEX channel by simply specifying an environment variable, possibly
bypassing other checks by an orchestration system such as kubernetes.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-02-28 17:54:11 +02:00
..
capabilities.go Refactor handling of DriverCapabilities 2023-08-14 10:40:42 +02:00
container_config_test.go [no-relnote] Refactor config handling for hook 2024-11-26 13:37:00 +01:00
container_config.go Add ignore-imex-channel-requests feature flag 2025-02-28 17:54:11 +02:00
hook_config_test.go [no-relnote] Refactor config handling for hook 2024-11-26 13:37:00 +01:00
hook_config.go [no-relnote] Refactor config handling for hook 2024-11-26 13:37:00 +01:00
hook_test.go Rename -toolkit executable to -runtime-hook 2022-07-08 12:09:11 +02:00
main.go Add allow-cuda-compat-libs-from-container feature flag 2025-01-23 10:59:52 +01:00