···

       
146
       
146
       
 
       
          CapabilityBoundingSet = "";

     

       
147
       
147
       
 
       
          DeviceAllow = if builtins.elem options.device [ "cuda" "auto" ] then [

     

       
148
       
148
       
 
       
            # https://docs.nvidia.com/dgx/pdf/dgx-os-5-user-guide.pdf

     

       
149
       
149
       
+
       
            # CUDA not working? Check DeviceAllow and PrivateDevices first!

     

       
150
       
150
       
+
       
            "/dev/nvidia0"

     

       
149
       
151
       
 
       
            "/dev/nvidia1"

     

       
150
       
152
       
 
       
            "/dev/nvidia2"

     

       
151
       
153
       
 
       
            "/dev/nvidia3"

     
···

       
160
       
162
       
 
       
          DevicePolicy = "closed";

     

       
161
       
163
       
 
       
          LockPersonality = true;

     

       
162
       
164
       
 
       
          MemoryDenyWriteExecute = true;

     

       
163
       
163
       
-
       
          PrivateDevices = true;

     

       
164
       
165
       
 
       
          PrivateUsers = true;

     

       
165
       
166
       
 
       
          ProtectHome = true;

     

       
166
       
167
       
 
       
          ProtectHostname = true;