Add ability to disable CDI hooks in jit-cdi mode

[cdesiniotis]

The nvcdi package has a disabledHooks option for disabling CDI hooks. The nvidia-ctk cdi generate CLI exposes this option via a --disable-hooks flag.

This PR adds the ability to disable CDI hooks in the CDI spec that gets generated by nvidia-container-runtime when it runs in jit-cdi mode.

Testing

$ grep -A1 "nvidia-container-runtime.modes.jit-cdi" /etc/nvidia-container-runtime/config.toml
[nvidia-container-runtime.modes.jit-cdi]
nvcdi-disable-hooks = ["disable-device-node-modification"]

$ docker run -it --rm --runtime=nvidia -e NVIDIA_VISIBLE_DEVICES=all ubuntu /bin/bash -c "grep 'ModifyDeviceFile' /proc/driver/nvidia/params"
ModifyDeviceFiles: 1

$ sudo sed -i 's/nvcdi-disable-hooks/#nvcdi-disable-hooks/' /etc/nvidia-container-runtime/config.toml

$ docker run -it --rm --runtime=nvidia -e NVIDIA_VISIBLE_DEVICES=all ubuntu /bin/bash -c "grep 'ModifyDeviceFile' /proc/driver/nvidia/params"
ModifyDeviceFiles: 0

[coveralls]

Coverage Report for CI Build 26549762496

Coverage increased (+0.004%) to 43.5%

Details

• Coverage increased (+0.004%) from the base build.
• Patch coverage: 1 of 1 lines across 1 file are fully covered (100%).
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	14977
Covered Lines:	6515
Line Coverage:	43.5%
Coverage Strength:	0.48 hits per line

---

💛 - Coveralls

[cdesiniotis]

Or should this be nvcdi-disable-hooks?

[cdesiniotis]

I have updated this to nvcdi-disable-hooks to align the name here with the --disable-hooks flag for the nvidia-ctk cdi generate command.