bottlerocket-os / bottlerocket-os/bottlerocket
Expose enable-cuda-compat as an API under `nvidia-container-runtime`
Open
status/needs-triage
type/enhancement
- Dominant language
- Rust
- Stars
- 9.7k
- Forks
- 586
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 11
Description
**What I'd like:**
I would like to expose an API that allows users to opt-in or opt-out from the `enable-cuda-compat` feature provided by the NVIDIA Container Toolkit and the Kubernetes Device Plugin, given the [recent security findings] around the feature.
The API should be used both in the NVIDIA Container Runtime configuration file, and in the NVIDIA k8s Device Plugin, to disable using the hook while generating the CDI specifications.
[recent security findings]: https://www.wiz.io/blog/nvidia-ai-vulnerability-cve-2025-23266-nvidiascape
Contributor guide
Assessment
This issue has not been assessed yet.