[lxc-devel] [lxc/lxc] 4a0a5e: hooks: fix nvidia hook when running under the lxc-...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 4a0a5e89e1b77056ee1564861e502bd7dba59656
      https://github.com/lxc/lxc/commit/4a0a5e89e1b77056ee1564861e502bd7dba59656
  Author: Felix Abecassis <fabecassis at nvidia.com>
  Date:   2018-03-19 (Mon, 19 Mar 2018)

  Changed paths:
    M hooks/nvidia

  Log Message:
  -----------
  hooks: fix nvidia hook when running under the lxc-start AppArmor profile

For a reason that I don't understand, the profile transition needs to
be done on the current process. Changing the attributes for a
subsequent execve(2) (with /proc/self/attr/exec) will cause the kernel
to set AT_SECURE in the auxiliary vector and thus secure_getenv(3)
inside libnvidia-container will return NULL.

Signed-off-by: Felix Abecassis <fabecassis at nvidia.com>


  Commit: 89f1ef110e727919d7f2bf591732fb20d6a8951a
      https://github.com/lxc/lxc/commit/89f1ef110e727919d7f2bf591732fb20d6a8951a
  Author: Felix Abecassis <fabecassis at nvidia.com>
  Date:   2018-03-19 (Mon, 19 Mar 2018)

  Changed paths:
    M hooks/nvidia

  Log Message:
  -----------
  hooks: implement passthrough for latest features of libnvidia-container

The "display" driver capability will expose /dev/nvidia-modeset:
https://github.com/NVIDIA/libnvidia-container/commit/9398d41d9f571578d6543703d287b014bcf1bb8c

The "--ldcache" argument allows overriding the location of the DSO cache:
https://github.com/NVIDIA/libnvidia-container/commit/41656bf9ed71448972f3254a10ceb3c53225a4e6

The "--root" argument allows nvidia-container-cli to execute in a different rootfs:
https://github.com/NVIDIA/libnvidia-container/commit/019fdc14e325eea55fbe0397a581bda9d0c4c5b1

Signed-off-by: Felix Abecassis <fabecassis at nvidia.com>


  Commit: 4c6fb19b30e5edaa632ee07df0838e3bf2122551
      https://github.com/lxc/lxc/commit/4c6fb19b30e5edaa632ee07df0838e3bf2122551
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2018-03-19 (Mon, 19 Mar 2018)

  Changed paths:
    M hooks/nvidia

  Log Message:
  -----------
  Merge pull request #2225 from flx42/nvidia-hook-fixes

NVIDIA hook improvements


Compare: https://github.com/lxc/lxc/compare/14f16c417147...4c6fb19b30e5