Are you giving it access to /dev/dri, or doing some fancier sandboxing? (Would y... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		creata on June 9, 2024 \| parent \| context \| favorite \| on: Keylogger discovered in image generator extension Are you giving it access to /dev/dri, or doing some fancier sandboxing? (Would you even need anything fancier? I think /dev/dri is supposed to isolate users.)

nsingh2 on June 9, 2024 [–]

Nvidia provides a toolkit to do this [1], getting a GPU into a container is as easy as running `podman run --device nvidia.com/gpu=all`. The process is similar for Docker, but rootless Docker requires some extra steps IIRC.

[1] https://docs.nvidia.com/datacenter/cloud-native/container-to...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact