build(deps): bump github.com/NVIDIA/nvidia-container-toolkit from 1.15.0 to 1.17.6

[dependabot]

Bumps github.com/NVIDIA/nvidia-container-toolkit from 1.15.0 to 1.17.6.

Release notes

Sourced from github.com/NVIDIA/nvidia-container-toolkit's releases.

v1.17.6

NOTE: This release is a unified release of the NVIDIA Container Toolkit that consists of the following packages:

• libnvidia-container 1.17.6
• nvidia-container-toolkit 1.17.6

The packages for this release are published to the libnvidia-container package repositories.

What's Changed

Changes in the Toolkit Container

• Allow container runtime executable path to be specified when configuring containerd.
• Bump CUDA base image version to 12.8.1

Changes in libnvidia-container

• Skip files when user has insufficient permissions. This prevents errors when discovering IPC sockets when the nvidia-container-cli is run as a non-root user.

Full Changelog: NVIDIA/nvidia-container-toolkit@v1.17.5...v1.17.6

v1.17.5

NOTE: This release is a unified release of the NVIDIA Container Toolkit that consists of the following packages:

• libnvidia-container 1.17.5
• nvidia-container-toolkit 1.17.5

The packages for this release are published to the libnvidia-container package repositories.

What's Changed

• Allow the enabled-cuda-compat hook to be skipped when generating CDI specifications. This improves compatibility with older NVIDIA Container Toolkit installations. The hook is explicitly ignored for management CDI specifications.
• Add IMEX binaries to CDI discovery. This includes the IMEX Daemon and IMEX Control binaries in containers.
• Fix bug that may overwrite docker feature flags when configuring CDI from the nvidia-ctk runtime configure command.
• Add an ignore-imex-channel-requests feature flag. This ensures that the NVIDIA Container Runtime can be configured to ignore IMEX channel requests when these should be managed by another component.
• Update the update-ldcache hook to run the host ldconfig from a MEMFD.
• Add support for CUDA Forward Compatibility (removed by default in v1.17.4) using a dedicated enable-cuda-compat hook. This can be disabled using a disable-cuda-compat-lib-hook feature flag.
• Disable nvsandboxutils in the nvcdi API. This prevents a segmentation violation with NVIDIA GPU Drivers from the 565 branch.
• Fix a bug where cdi mode would not work with the --gpus flag even if the NVIDIA Container Runtime was used.

Changes in the Toolkit Container

• Enable CDI in container engine (Containerd, Cri-o, Docker) if CDI_ENABLED is set.
• Bump CUDA base image version to 12.8.0

Full Changelog: NVIDIA/nvidia-container-toolkit@v1.17.4...v1.17.5

v1.17.5-rc.1

This release is intended to allow the k8s-dra-driver-gpu and k8s-device-plugin to import the nvcdi package at a specific tag.

v1.17.4

NOTE: This release is a unified release of the NVIDIA Container Toolkit that consists of the following packages:

• libnvidia-container 1.17.4

... (truncated)

Changelog

Sourced from github.com/NVIDIA/nvidia-container-toolkit's changelog.

v1.17.6

Changes in the Toolkit Container

• Allow container runtime executable path to be specified when configuring containerd.
• Bump CUDA base image version to 12.8.1

Changes in libnvidia-container

• Skip files when user has insufficient permissions. This prevents errors when discovering IPC sockets when the nvidia-container-cli is run as a non-root user.
• Fix building with Go 1.24
• Fix some typos in text.

v1.17.5

• Allow the enabled-cuda-compat hook to be skipped when generating CDI specifications. This improves compatibility with older NVIDIA Container Toolkit installations. The hook is explicitly ignored for management CDI specifications.
• Add IMEX binaries to CDI discovery. This includes the IMEX Daemon and IMEX Control binaries in containers.
• Fix bug that may overwrite docker feature flags when configuring CDI from the nvidia-ctk runtime configure command.
• Remove the unused Set() function from engine config API.
• Add an EnableCDI() method to engine config API.
• Add an ignore-imex-channel-requests feature flag. This ensures that the NVIDIA Container Runtime can be configured to ignore IMEX channel requests when these should be managed by another component.
• Update the update-ldcache hook to run the host ldconfig from a MEMFD.
• Add support for CUDA Forward Compatibility (removed by default in v1.17.4) using a dedicated enable-cuda-compat hook. This can be disabled using a disable-cuda-compat-lib-hook feature flag.
• Disable nvsandboxutils in the nvcdi API. This prevents a segmentation violation with NVIDIA GPU Drivers from the 565 branch.
• Fix a bug where cdi mode would not work with the --gpus flag even if the NVIDIA Container Runtime was used.

Changes in the Toolkit Container

• Enable CDI in container engine (Containerd, Cri-o, Docker) if CDI_ENABLED is set.
• Bump CUDA base image version to 12.8.0

v1.17.4

• Disable mounting of compat libs from container by default
• Add allow-cuda-compat-libs-from-container feature flag
• Skip graphics modifier in CSV mode
• Properly pass configSearchPaths to a Driver constructor
• Add support for containerd version 3 config
• Add string TOML source

Changes in libnvidia-container

• Add no-cntlibs CLI option to nvidia-container-cli

Changes in the Toolkit Container

• Bump CUDA base image version to 12.6.3

v1.17.3

• Only allow host-relative LDConfig paths by default.

Changes in libnvidia-container

• Create virtual copy of host ldconfig binary before calling fexecve()

... (truncated)

Commits

• e627eb2 Merge pull request #1022 from NVIDIA/dependabot/docker/deployments/devel/rele...
• 24859f5 Merge pull request #1044 from elezar/bump-release-v1.17.6
• 8676b56 Bump version for v1.17.6 release
• 6bb4a5c Merge pull request #1043 from elezar/bump-libnvidia-container-a198166
• a8e7ffc Bump third_party/libnvidia-container from 95d3e86 to a198166
• 58f54b9 Merge pull request #1029 from elezar/allow-runtime-path
• 8176ac4 Allow container runtime executable path to be specified
• 01e5546 [no-relnote] Remove unused runtimeConfigOverideJSON variable
• 3436b5b Bump golang from 1.23.5 to 1.23.8 in /deployments/devel
• c4f46e7 Merge pull request #1005 from NVIDIA/dependabot/go_modules/release-1.17/githu...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)