From 551ba1389ce9e3e2b564b57b29e55c471dd25a33 Mon Sep 17 00:00:00 2001 From: Botir Khaltaev Date: Thu, 27 Aug 2026 17:54:30 +0000 Subject: [PATCH] nvproxy: include CapNGX in AllContainerDriverCaps nvidia-container-toolkit's SupportedDriverCapabilities includes ngx, so NVIDIA_DRIVER_CAPABILITIES=all should pass --ngx to nvidia-container-cli and inject libnvidia-ngx. Assisted-by: Cursor --- pkg/sentry/devices/nvproxy/nvconf/caps.go | 2 +- pkg/sentry/devices/nvproxy/nvconf/caps_test.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/sentry/devices/nvproxy/nvconf/caps.go b/pkg/sentry/devices/nvproxy/nvconf/caps.go index ec9a754ca33..e4046191ea8 100644 --- a/pkg/sentry/devices/nvproxy/nvconf/caps.go +++ b/pkg/sentry/devices/nvproxy/nvconf/caps.go @@ -62,7 +62,7 @@ const ( // enabled when enabling "all" capabilities is requested, which excludes // "privileged" capabilities that are usually not intended. Similar to // nvidia-container-toolkit/internal/config/image/capabilities.go:SupportedDriverCapabilities. - AllContainerDriverCaps = CapCompute | CapUtility | CapGraphics | CapVideo + AllContainerDriverCaps = CapCompute | CapUtility | CapGraphics | CapVideo | CapNGX // DefaultDriverCaps is the set of driver capabilities that are enabled by // default in the absence of any other configuration. See diff --git a/pkg/sentry/devices/nvproxy/nvconf/caps_test.go b/pkg/sentry/devices/nvproxy/nvconf/caps_test.go index 4152599e90f..c552723ab02 100644 --- a/pkg/sentry/devices/nvproxy/nvconf/caps_test.go +++ b/pkg/sentry/devices/nvproxy/nvconf/caps_test.go @@ -38,7 +38,7 @@ func TestNVIDIAFlagsSkipsPrivilegedCaps(t *testing.T) { { name: "all_plus_profiling", caps: AllContainerDriverCaps | CapProfiling, - want: []string{"--compute", "--graphics", "--utility", "--video"}, + want: []string{"--compute", "--graphics", "--ngx", "--utility", "--video"}, }, { name: "profiling_only",