interfaces/opengl: enable use of nvidia container toolkit CDI config …

…generation (#13847) The nvidia container toolkit needs to traverse the top level libs directory in order to discover the libraries and generate a CDI config.
snapcore · Apr 23, 2024 · 2cb62c4 · 2cb62c4
1 parent 61572ad
commit 2cb62c4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/interfaces/builtin/opengl.go b/interfaces/builtin/opengl.go
@@ -48,6 +48,9 @@ const openglConnectedPlugAppArmor = `
 # libdrm data files
 /usr/share/libdrm/amdgpu.ids r,
 
+# The nvidia container toolkit needs to traverse the top level libs directory
+# in order to discover the libraries and generate a CDI config
+/var/lib/snapd/hostfs/{,usr/}lib{,32,64,x32}/{,@{multiarch}/} r,
 # Bi-arch distribution nvidia support
 /var/lib/snapd/hostfs/{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcuda*.so{,.*} rm,
 /var/lib/snapd/hostfs/{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnvidia*.so{,.*} rm,