nvidia-container-toolkit/cmd/nvidia-container-runtime-hook
Evan Lezar 352b55c8ce
Add ignore-imex-channel-requests feature flag
This allows the NVIDIA Container Toolkit to ignore IMEX channel requests
through the NVIDIA_IMEX_CHANNELS envvar or volume mounts and ensures that
the NVIDIA Container Toolkit cannot be used to provide out-of-band access
to an IMEX channel by simply specifying an environment variable, possibly
bypassing other checks by an orchestration system such as kubernetes.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-02-26 17:46:36 +02:00
..
capabilities.go Refactor handling of DriverCapabilities 2023-08-14 10:40:42 +02:00
container_config_test.go [no-relnote] Refactor config handling for hook 2024-11-22 13:19:05 +01:00
container_config.go Add ignore-imex-channel-requests feature flag 2025-02-26 17:46:36 +02:00
hook_config_test.go [no-relnote] Refactor config handling for hook 2024-11-22 13:19:05 +01:00
hook_config.go [no-relnote] Refactor config handling for hook 2024-11-22 13:19:05 +01:00
hook_test.go Rename -toolkit executable to -runtime-hook 2022-07-08 12:09:11 +02:00
main.go Add allow-cuda-compat-libs-from-container feature flag 2025-01-22 17:34:20 +01:00