Go to file
Evan Lezar f6b1b1afad Ignore NVIDIA_VISIBLE_DEVICES for containers with insufficent privileges
This change ignores the value of NVIDIA_VISIBLE_DEVICES instead of
raising an error when launching a container with insufficient permissions.

This changes the behaviour under the following conditions:

NVIDIA_VISIBLE_DEVICES is set
and

accept-nvidia-visible-devices-envvar-when-unprivileged = false (default: true)

or

privileged = false (default: false)

This means that a user need not explicitly clear the NVIDIA_VISIBLE_DEVICES
environment variable if no GPUs are to be used in unprivileged containers.
Note that this envvar is set to 'all' by default in many CUDA images that
are used as base images.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2021-01-22 15:34:52 +01:00
config Refactor accepting device lists from volume mounts as a boolean 2020-08-07 16:30:19 +00:00
docker Fix repo listed in changelog for debian distributions 2020-07-08 16:22:01 +00:00
packaging Bump version to 1.4.0 2020-12-11 18:05:49 +00:00
pkg Ignore NVIDIA_VISIBLE_DEVICES for containers with insufficent privileges 2021-01-22 15:34:52 +01:00
.dockerignore Add binary target and use go mod 2020-04-11 17:18:14 -07:00
.gitignore Init 2019-10-22 14:36:22 -07:00
.gitlab-ci.yml Generalize CI variables 2020-07-24 14:01:39 +00:00
CONTRIBUTING.md Ensure LICENSE and CONTRIBUTING.md files are present 2019-10-31 12:56:46 -07:00
docker.mk Update build system to accept a TAG variable for things like rc.x 2020-07-24 19:54:29 +00:00
go.mod Rename github.com/NVIDIA/container-toolkit to nvidia-container-toolkit 2020-07-24 11:40:45 +00:00
go.sum Update vendored packages 2020-06-03 21:25:13 +00:00
LICENSE Ensure LICENSE and CONTRIBUTING.md files are present 2019-10-31 12:56:46 -07:00
Makefile Bump version to 1.4.0 2020-12-11 18:05:49 +00:00
oci-nvidia-hook Init 2019-10-22 14:36:22 -07:00
oci-nvidia-hook.json Init 2019-10-22 14:36:22 -07:00