5 Commits

Include renames

Author	SHA1	Message	Date
Evan Lezar	0c0f3e32e1	feat(docker): enable CDI GPU sandboxes (#1036)	2026-04-30 13:23:57 -07:00
Evan Lezar	182cbc6750	fix(docker): set apparmor=unconfined on sandbox containers (#1078) ... Docker's default AppArmor profile blocks mount(2) with MS_SHARED even when SYS_ADMIN is granted, which prevents ip-netns from creating network namespaces required for proxy-mode network isolation. The sandbox enforces its own isolation (seccomp, Landlock, network namespaces), so the host AppArmor profile provides no meaningful additional defence inside a container that already holds SYS_ADMIN.	2026-04-30 13:23:36 -07:00
Drew Newberry	24724742a8	ci(rust): enforce -D warnings on clippy (#1008)	2026-04-29 12:12:53 -07:00
vince-brisebois	2adddaa6b2	feat: Adding qemu vm driver support with GPU pass-through (#992) ... * Adding qemu vm driver support with GPU pass-through Signed-off-by: Vincent Caux-Brisebois <vcauxbrisebo@nvidia.com> * Add GPU rootfs variant, harden VFIO binding, and fix networking and supervisor reliability issues discovered during GPU VM bring-up. Signed-off-by: Vincent Caux-Brisebois <vcauxbrisebo@nvidia.com> --------- Signed-off-by: Vincent Caux-Brisebois <vcauxbrisebo@nvidia.com>	2026-04-29 09:18:27 -07:00
Drew Newberry	5975805424	feat(server): add bundled docker compute driver (#888)	2026-04-27 17:38:02 -07:00