Evan Lezar db12abe128 docs(gpu): document CDI-derived GPU sandbox policy ...

Describe how Docker GPU sandboxes derive filesystem access from the
selected CDI devices, which CDI mounts are rejected, the NVIDIA MPS pipe
directory exception, missing additionalGids handling on Docker releases
before 29.5, and SELinux requirements for the projected spec
directories. Add cluster debugging entries for CDI projection,
admission, probe and restart failures, and document the CDI context in
the core, sandbox and Docker driver READMEs.

Signed-off-by: Evan Lezar <elezar@nvidia.com>

2026-10-16 00:01:05 +02:00

..

debug-inference

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

debug-openshell-cluster

docs(gpu): document CDI-derived GPU sandbox policy

2026-10-16 00:01:05 +02:00

generate-sandbox-policy

fix(policy): share endpoint path matching between Rust and Rego (#4336)

2026-10-08 23:52:46 +00:00

openshell-cli

refactor(runtime): extract portable driver and isolation foundations (#4106)

2026-10-14 03:07:31 +00:00