nvidia-container-toolkit/cmd
Evan Lezar ec29b602c3
Run update-ldcache in isolated namespaces
This change uses the reexec package to run the update of the
ldcache in a container in a process with isolated namespaces.
Since the hook is invoked as a createContainer hook, these
namespaces are cloned from the container's namespaces.

In the reexec handler, we further isolate the proc filesystem,
mount the host ldconfig to a tmpfs, and pivot into the containers
root.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-05-15 12:45:49 +02:00
..
nvidia-cdi-hook Run update-ldcache in isolated namespaces 2025-05-15 12:45:49 +02:00
nvidia-container-runtime Rename test folder to tests 2025-01-23 11:46:14 +01:00
nvidia-container-runtime-hook Add cuda-compat-mode config option 2025-05-13 21:49:53 +02:00
nvidia-container-runtime.cdi Add nvidia-container-runtime.cdi executable 2023-02-13 16:09:46 +01:00
nvidia-container-runtime.legacy Add nvidia-container-runtime.legacy executable 2023-02-13 16:09:46 +01:00
nvidia-ctk Allow container runtime executable path to be specified 2025-04-07 17:28:11 +02:00
nvidia-ctk-installer Add cuda-compat-mode config option 2025-05-13 21:49:53 +02:00