test(core): cover CDI policy generation from NVIDIA specs

Signed-off-by: Evan Lezar <elezar@nvidia.com>

Author: elezar

crates/openshell-core/src/cdi_linux.rs

@@ -445,6 +445,59 @@ mod tests {
             .then_some(CdiPathKind::CharacterDevice)
     }
 
+    #[derive(serde::Serialize)]
+    struct CdiRequirementsBaseline<'a> {
+        device_node_paths: &'a [String],
+        read_only_paths: &'a [String],
+        read_write_mount_paths: &'a [String],
+        additional_gids: &'a [u32],
+    }
+
+    fn assert_cdi_spec_matches_derived_requirements_baseline(spec: &str, expected: &str) {
+        let dir = tempfile::tempdir().unwrap();
+        write_spec(dir.path(), "nvidia.yaml", spec);
+
+        let requirements = resolve_with_kind(
+            &context(dir.path(), &["nvidia.com/gpu=all"]),
+            &[],
+            fake_device_node,
+        )
+        .unwrap();
+        let baseline = CdiRequirementsBaseline {
+            device_node_paths: &requirements.device_node_paths,
+            read_only_paths: &requirements.read_only_paths,
+            read_write_mount_paths: &requirements.read_write_mount_paths,
+            additional_gids: &requirements.additional_gids,
+        };
+        let generated = serde_json::to_string_pretty(&baseline).unwrap() + "\n";
+
+        assert_eq!(generated, expected);
+    }
+
+    #[test]
+    fn orin_cdi_spec_matches_derived_requirements_baseline() {
+        assert_cdi_spec_matches_derived_requirements_baseline(
+            include_str!("../testdata/orin-nvidia.yaml"),
+            include_str!("../testdata/orin-nvidia-policy-baseline.json"),
+        );
+    }
+
+    #[test]
+    fn spark_cdi_spec_matches_derived_requirements_baseline() {
+        assert_cdi_spec_matches_derived_requirements_baseline(
+            include_str!("../testdata/spark-nvidia.yaml"),
+            include_str!("../testdata/spark-nvidia-policy-baseline.json"),
+        );
+    }
+
+    #[test]
+    fn multi_gpu_cdi_spec_matches_derived_requirements_baseline() {
+        assert_cdi_spec_matches_derived_requirements_baseline(
+            include_str!("../testdata/multi-gpu-nvidia.yaml"),
+            include_str!("../testdata/multi-gpu-nvidia-policy-baseline.json"),
+        );
+    }
+
     #[test]
     fn resolves_native_single_device_requirements() {
         let dir = tempfile::tempdir().unwrap();

crates/openshell-core/testdata/multi-gpu-nvidia-policy-baseline.json

@@ -0,0 +1,39 @@
+{
+  "device_node_paths": [
+    "/dev/nvidia-modeset",
+    "/dev/nvidia-uvm",
+    "/dev/nvidia-uvm-tools",
+    "/dev/nvidia0",
+    "/dev/nvidia1",
+    "/dev/nvidiactl"
+  ],
+  "read_only_paths": [
+    "/etc/OpenCL/vendors/nvidia.icd",
+    "/etc/vulkan/icd.d/nvidia_icd.json",
+    "/etc/vulkan/implicit_layer.d/nvidia_layers.json",
+    "/lib/firmware/nvidia/615.71.09/gsp_ga10x.bin",
+    "/lib/firmware/nvidia/615.71.09/gsp_tu10x.bin",
+    "/run/nvidia-persistenced/socket",
+    "/run/nvidia/driver/lib/firmware/nvidia/615.71.09/gsp_ga10x.bin",
+    "/run/nvidia/driver/lib/firmware/nvidia/615.71.09/gsp_tu10x.bin",
+    "/usr/bin/nvidia-cuda-mps-control",
+    "/usr/bin/nvidia-cuda-mps-server",
+    "/usr/bin/nvidia-debugdump",
+    "/usr/bin/nvidia-imex",
+    "/usr/bin/nvidia-imex-ctl",
+    "/usr/bin/nvidia-persistenced",
+    "/usr/bin/nvidia-smi",
+    "/usr/bin/nvidia-xconfig",
+    "/usr/lib/x86_64-linux-gnu",
+    "/usr/lib/x86_64-linux-gnu/vdpau",
+    "/usr/share/egl/egl_external_platform.d/09_nvidia_wayland2.json",
+    "/usr/share/egl/egl_external_platform.d/10_nvidia_wayland.json",
+    "/usr/share/egl/egl_external_platform.d/15_nvidia_gbm.json",
+    "/usr/share/egl/egl_external_platform.d/20_nvidia_xcb.json",
+    "/usr/share/egl/egl_external_platform.d/20_nvidia_xlib.json",
+    "/usr/share/glvnd/egl_vendor.d/10_nvidia.json",
+    "/usr/share/nvidia/nvoptix.bin"
+  ],
+  "read_write_mount_paths": [],
+  "additional_gids": []
+}