mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-11 09:07:49 +00:00
Run the non-confidential NVIDIA runtime-rs CI path with the EROFS snapshotter. Use a memory-backed writable layer and dm-verity for lower-layer integrity. Disable filesystem sharing for the runtime-rs handler and use block-plain emptyDirs for NIM caches. Keep the Go runtime on its existing hostPath manifests and select the emptyDir variants for non-TEE runtime-rs tests. Signed-off-by: Manuel Huber <manuelh@nvidia.com> Assisted-by: OpenAI Codex <codex@openai.com>