From 6d9b4059f54c2b27dba5c3089b01626106d0dee6 Mon Sep 17 00:00:00 2001 From: Zvonko Kaiser Date: Tue, 28 Oct 2025 23:22:00 +0000 Subject: [PATCH 1/2] gpu: Add libs for CC In the case of CC we need additional libraries in the rootfs. Add them conditionally if type == confidential. Signed-off-by: Zvonko Kaiser --- tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh b/tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh index bdf2da90df..6d50c3ee3d 100644 --- a/tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh +++ b/tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh @@ -209,6 +209,8 @@ chisseled_compute() { cp -a "${stage_one}/${libdir}"/libcom_err.so.2* "${libdir}"/. cp -a "${stage_one}/${libdir}"/libkeyutils.so.1* "${libdir}"/. + [[ "${type}" == "confidential" ]] && cp -a "${stage_one}/${libdir}"/libnvidia-pkcs11* "${libdir}"/. + [[ ${machine_arch} == "aarch64" ]] && libdir="lib" [[ ${machine_arch} == "x86_64" ]] && libdir="lib64" From 5ff218823c05afdfa95c6299a7d4470fd503aaa8 Mon Sep 17 00:00:00 2001 From: Zvonko Kaiser Date: Tue, 28 Oct 2025 23:22:48 +0000 Subject: [PATCH 2/2] gpu: Remove unneeded libraries The libs in question were added when moving to developer.nvidia.com but switching back to ubuntu only based builds they are not needed. Remove them to keep the rootfs as minimal as possible. Signed-off-by: Zvonko Kaiser --- tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh | 8 -------- 1 file changed, 8 deletions(-) diff --git a/tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh b/tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh index 6d50c3ee3d..120427d77d 100644 --- a/tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh +++ b/tools/osbuilder/rootfs-builder/nvidia/nvidia_rootfs.sh @@ -200,14 +200,6 @@ chisseled_compute() { cp -a "${stage_one}/${libdir}"/libc.so.6* "${libdir}"/. cp -a "${stage_one}/${libdir}"/libm.so.6* "${libdir}"/. cp -a "${stage_one}/${libdir}"/librt.so.1* "${libdir}"/. - # nvidia-persitenced dependencies, needs to be vetted for v590 - cp -a "${stage_one}/${libdir}"/libtirpc.so.3* "${libdir}"/. - cp -a "${stage_one}/${libdir}"/libgssapi_krb5.so.2* "${libdir}"/. - cp -a "${stage_one}/${libdir}"/libkrb5.so.3* "${libdir}"/. - cp -a "${stage_one}/${libdir}"/libkrb5support.so.0* "${libdir}"/. - cp -a "${stage_one}/${libdir}"/libk5crypto.so.3* "${libdir}"/. - cp -a "${stage_one}/${libdir}"/libcom_err.so.2* "${libdir}"/. - cp -a "${stage_one}/${libdir}"/libkeyutils.so.1* "${libdir}"/. [[ "${type}" == "confidential" ]] && cp -a "${stage_one}/${libdir}"/libnvidia-pkcs11* "${libdir}"/.