github/kata-containers
1
0
Fork 2
mirror of https://github.com/kata-containers/kata-containers.git synced 2026-07-10 07:05:51 +00:00
Code Issues Projects Releases Wiki Activity

fixup! build: ship CoCo addon component manifest in addon image

Browse Source
This commit is contained in:
Fabiano Fidêncio
2026-06-15 11:22:47 +02:00
parent b32e74170a
commit a6e5d97fee
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh
View File

@@ -672,7 +672,15 @@ select = "${attester_variant}"
[process.variants.nvidia]
path = "usr/local/bin/attestation-agent-nv"
env = { LD_LIBRARY_PATH = "${addon_root}/usr/local/lib" }
# attestation-agent-nv links libnvat.so (bundled in this CoCo addon under
# usr/local/lib), which dlopens libnvidia-ml.so.1 at runtime to collect GPU
# attestation evidence. NVML ships in the GPU addon, mounted by NVRC at the
# well-known /run/kata-addons/gpu with its driver libraries under usr/lib, so
# both dirs must be on the loader path. The nvidia variant only runs when the
# GPU addon is present, so referencing its mount path here is safe; without
# the GPU lib dir NVML init fails ("NVAT Error 500: NVML Initialization
# Failed") and the RCAR handshake never produces GPU evidence.
env = { LD_LIBRARY_PATH = "${addon_root}/usr/local/lib:/run/kata-addons/gpu/usr/lib" }
[[process]]
id = "confidential-data-hub"