nvidia-container-toolkit/cmd
Evan Lezar ac9146832b
Run update-ldcache in isolated namespaces
This change uses the reexec package to run the update of the
ldcache in a container in a process with isolated namespaces.
Since the hook is invoked as a createContainer hook, these
namespaces are cloned from the container's namespaces.

In the reexec handler, we further isolate the proc filesystem,
mount the host ldconfig to a tmpfs, and pivot into the containers
root.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-05-15 12:51:13 +02:00
..
nvidia-cdi-hook Run update-ldcache in isolated namespaces 2025-05-15 12:51:13 +02:00
nvidia-container-runtime Rename test folder to tests 2025-02-28 17:24:22 +02:00
nvidia-container-runtime-hook Add cuda-compat-mode config option 2025-05-13 21:52:01 +02:00
nvidia-container-runtime.cdi Add nvidia-container-runtime.cdi executable 2023-02-13 16:09:46 +01:00
nvidia-container-runtime.legacy Add nvidia-container-runtime.legacy executable 2023-02-13 16:09:46 +01:00
nvidia-ctk Allow container runtime executable path to be specified 2025-04-08 17:51:54 +02:00