do_sandbox only when gpu

golemfactory · Sep 3, 2024 · 783299f · 783299f
1 parent 01f5e2f
commit 783299f
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/runtime/Cargo.toml b/runtime/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "ya-runtime-vm"
-version = "0.4.1"
+version = "0.4.2"
 authors = ["Golem Factory <[email protected]>"]
 edition = "2021"
 license = "GPL-3.0"

diff --git a/runtime/conf/ya-runtime-vm.json b/runtime/conf/ya-runtime-vm.json
@@ -1,7 +1,7 @@
 [
   {
     "name": "vm",
-    "version": "0.4.1",
+    "version": "0.4.2",
     "supervisor-path": "exe-unit",
     "runtime-path": "ya-runtime-vm/ya-runtime-vm",
     "description": "vm runtime",

diff --git a/runtime/init-container/src/init.c b/runtime/init-container/src/init.c
@@ -838,7 +838,7 @@ static noreturn void child_wrapper(int parent_pipe[2],
                 case CAP_LEASE:
                 case CAP_LINUX_IMMUTABLE:
                 // case CAP_MKNOD:
-                // cas CAP_NET_ADMIN:
+                // case CAP_NET_ADMIN:
                 case CAP_NET_BIND_SERVICE:
                 case CAP_NET_BROADCAST:
                 case CAP_NET_RAW:
@@ -2241,7 +2241,7 @@ int main(int argc, char **argv) {
                 MS_NODEV | MS_NOSUID | MS_NOEXEC,
                 NULL));
 
-    bool do_sandbox = true;
+    bool do_sandbox = nvidia_loaded;
     for (int i = 1; i < argc; ++i) {
         fprintf(stderr, "Command line argument: %s\n", argv[i]);
         if (strcmp(argv[i], "sandbox=yes") == 0) {