container: Do not mount KMS nodes

Because we never draw directly to the screen, there is no need to expose
the KMS nodes to the container.

diff --git a/tools/actions/container_manager.py b/tools/actions/container_manager.py
index bcefc08eeaf5a77dbf0b4a3e2ee1d960081f59b1..257945de275c23e77d63f4c0d5b5c105318e44ef 100644 (file)
--- a/tools/actions/container_manager.py
+++ b/tools/actions/container_manager.py
@@ -80,12 +80,13 @@ def set_permissions(args, perm_list=None, mode="777"):
             "/dev/mtk_cmdq",
 
             # Graphics
-            "/dev/dri",
             "/dev/graphics",
             "/dev/pvr_sync",
             "/dev/ion",
         ]
 
+        # DRM render nodes
+        perm_list.extend(glob.glob("/dev/dri/renderD*"))
         # Framebuffers
         perm_list.extend(glob.glob("/dev/fb*"))
         # Videos

diff --git a/tools/helpers/lxc.py b/tools/helpers/lxc.py
index c2ca4e7bf77fc1f127ddd88cfd3859ad08c3edcb..3a8edf89333485facab0432ff213e06bbdd6561b 100644 (file)
--- a/tools/helpers/lxc.py
+++ b/tools/helpers/lxc.py
@@ -55,9 +55,8 @@ def generate_nodes_lxc_config(args):
     make_entry("/dev/pvr_sync")
     make_entry("/dev/pmsg0")
     make_entry("/dev/dxg")
-    render, card = tools.helpers.gpu.getDriNode(args)
+    render, _ = tools.helpers.gpu.getDriNode(args)
     make_entry(render, "dev/dri/renderD128")
-    make_entry(card, "dev/dri/card0")
 
     for n in glob.glob("/dev/fb*"):
         make_entry(n)