mirror of
https://github.com/NVIDIA/nvidia-container-toolkit
synced 2025-06-12 17:41:02 +00:00
ec29b602c3
This change uses the reexec package to run the update of the ldcache in a container in a process with isolated namespaces. Since the hook is invoked as a createContainer hook, these namespaces are cloned from the container's namespaces. In the reexec handler, we further isolate the proc filesystem, mount the host ldconfig to a tmpfs, and pivot into the containers root. Signed-off-by: Evan Lezar <elezar@nvidia.com> |
||
|---|---|---|
| .. | ||
| cpuguy83/go-md2man/v2 | ||
| cyphar/filepath-securejoin | ||
| davecgh/go-spew | ||
| fsnotify/fsnotify | ||
| google/uuid | ||
| moby/sys | ||
| NVIDIA | ||
| opencontainers | ||
| pelletier/go-toml | ||
| pmezard/go-difflib | ||
| russross/blackfriday/v2 | ||
| sirupsen/logrus | ||
| stretchr/testify | ||
| syndtr/gocapability | ||
| urfave/cli/v2 | ||
| xrash/smetrics | ||