Files
Luis Capelo 5ce7a41e5f nvproxy: don't pass privileged driver caps to nvidia-container-cli
Setting NVIDIA_DRIVER_CAPABILITIES=all with
--nvproxy-allowed-driver-capabilities=all,profiling crashed runsc on
startup (exit status 2): NVIDIAFlags() panicked on CapProfiling, which
has no nvidia-container-cli flag.

Privileged caps (CapProfiling, CapFabricIMEXManagement) are enforced
internally by nvproxy, so NVIDIAFlags() now skips them instead of
panicking. Adds a regression test.
2026-06-09 14:44:52 +00:00

30 lines
519 B
Python

load("//tools:defs.bzl", "go_library", "go_test")
package(default_applicable_licenses = ["//:license"])
licenses(["notice"])
go_library(
name = "nvconf",
srcs = [
"caps.go",
"hostsettings.go",
"nvconf.go",
"version.go",
],
visibility = [
"//pkg/sentry:internal",
"//tools:__subpackages__",
],
deps = [
"//pkg/log",
],
)
go_test(
name = "nvconf_test",
size = "small",
srcs = ["caps_test.go"],
library = ":nvconf",
)