In reply to@mkiefel:matrix.org
Hi! I trying to get an application to work with libGL on a Jetson Orin AGX (with Ubuntu as host linux). For context, I am trying to get a camera image from a device with libargus (which requires GL). I'm not on the latest from unstable; maybe that is the issue. I've already tried pre-loading various GL libs from the base image of Jetpack but to no avail. Does anybody have some pointers for me, please?

In reply to @connorbaker:matrix.org

Ah, okay.
The think addDriverRunpath.driverLink links to is /run/opengl-driver. That is in turn a symlink, created by this: https://github.com/NixOS/nixpkgs/blob/c82d9d313d5107c6ad3a92fc7d20343f45fa5ace/nixos/modules/hardware/graphics.nix#L5-L8
That derivation isn't expose except as a path, used here:
https://github.com/NixOS/nixpkgs/blob/c82d9d313d5107c6ad3a92fc7d20343f45fa5ace/nixos/modules/hardware/graphics.nix#L112-L121
I updated my nixos config as follows, and it seems to work.

{
  programs.nix-required-mounts = {
    enable = true;
    presets.nvidia-gpu.enable = true;
    allowedPatterns.nvidia-gpu = {
      onFeatures = [
        "gpu"
        "nvidia-gpu"
        "opengl"
        "cuda"
      ];
      # It exposes these paths in the sandbox:
      paths =
        let
          inherit (pkgs.addOpenGLRunpath) driverLink;
          thingDriverLinkLinksTo =
            config.systemd.tmpfiles.settings.graphics-driver."/run/opengl-driver"."L+".argument;
        in
        [
          driverLink
          thingDriverLinkLinksTo
          "/dev/dri"
          "/dev/nvidia*"
        ];
    };
  };
}

Of course, that same process would need to be repeated for anything in there which is in turn a symlink (which is the purpose of unsafeFollowSymlinks, I suppose), but I'm not getting that odd systemd bin error any more.

In reply to @mkiefel:matrix.org
Man, I got it. Somehow the wrong libEGL_nvidia.so got picked up. With the right one it works. This kept me busy this afternoon. :) In any case, thanks so much for the great work on the cuda packages! I really appreciate all the work that you folks put into this.

In reply to@ss:someonex.net
Thanks. Could you still tell us which libegl was the wrong one and which one is the right?

services.ollama = {
  enable = true;
  acceleration = "rocm";
};

curl http://localhost:11434/api/generate -d '{
  "model": "gemma",
  "prompt":"Why is the sky blue?"
}'

services.ollama = {
  enable = true;
  acceleration = "rocm";
};

systemd.services.ollama.serviceConfig = {
  DeviecPolicy = "closed";
  DeviceAllow = [
    "/dev/dri/renderD128"
    "/dev/dri/renderD129"
    "/dev/dri/renderD130"
    "/dev/dri/renderD131"
    /dev/kfd"
  };
};

services.ollama = {
  enable = true;
  acceleration = "rocm";
};

systemd.services.ollama.serviceConfig = {
  DeviecPolicy = "closed";
  DeviceAllow = [
    "/dev/dri/renderD128"
    "/dev/dri/renderD129"
    "/dev/dri/renderD130"
    "/dev/dri/renderD131"
    "/dev/kfd"
  };
};