Comment on Keylogger discovered in image generator extensionparentComments−creata2yAre you giving it access to /dev/dri, or doing some fancier sandboxing?(Would you even need anything fancier? I think /dev/dri is supposed to isolate users.)−nsingh22yNvidia provides a toolkit to do this [1], getting a GPU into a container is as easy as running `podman run --device nvidia.com/gpu=all`. The process is similar for Docker, but rootless Docker requires some extra steps IIRC.[1] https://docs.nvidia.com/datacenter/cloud-native/container-to...
Comments
Are you giving it access to /dev/dri, or doing some fancier sandboxing?
(Would you even need anything fancier? I think /dev/dri is supposed to isolate users.)
Nvidia provides a toolkit to do this [1], getting a GPU into a container is as easy as running `podman run --device nvidia.com/gpu=all`. The process is similar for Docker, but rootless Docker requires some extra steps IIRC.
[1] https://docs.nvidia.com/datacenter/cloud-native/container-to...