Error when using RUN --device

[oisinturbittcx1]

Contributing guidelines

• I've read the contributing guidelines and wholeheartedly agree

I've found a bug and checked that ...

• ... the documentation does not mention anything about my problem
• ... there are no open or closed issues that are related to my problem

Description

I have been following the current documentation for how to use RUN --device within a Dockerfile but I am running into the following error when building the image with docker build -f Dockerfile .:

ERROR: failed to build: failed to solve: failed to load LLB: device nvidia.com/gpu=all is requested by the build but not allowed

If trying to allow the builder to access the device using docker build --allow=device=nvidia.com/gpu=all -f Dockerfile ., I get the following error:

ERROR: failed to build: failed to solve: granting entitlement device is not allowed by build daemon configuration

I can see in my output of docker buildx inspect (see below) that the GPU I have configured has not been automatically allowed to be used. Is this a bug? Or can the documentation for the GPU example of RUN --device be clarified to show how to allow the GPU?

docker buildx inspect default
Name:          default
Driver:        docker
Last Activity: 2025-07-04 08:34:31 +0000 UTC

Nodes:
Name:             default
Endpoint:         default
Status:           running
BuildKit version: v0.23.2
Platforms:        linux/amd64, linux/amd64/v2, linux/amd64/v3, linux/386
Labels:
 org.mobyproject.buildkit.worker.moby.host-gateway-ip: 172.17.0.1
Devices:
 Name:                  nvidia.com/gpu=0
 Automatically allowed: false
 Name:                  nvidia.com/gpu=GPU-cf7e763a-628e-84d7-d146-62824b805c1f
 Automatically allowed: false
 Name:                  nvidia.com/gpu=all
 Automatically allowed: false
GC Policy rule#0:
 All:            false
 Filters:        type==source.local,type==exec.cachemount,type==source.git.checkout
 Keep Duration:  48h0m0s
 Max Used Space: 4.375GiB
GC Policy rule#1:
 All:            false
 Keep Duration:  1440h0m0s
 Reserved Space: 31.66GiB
 Max Used Space: 4.657GiB
 Min Free Space: 15.83GiB
GC Policy rule#2:
 All:            false
 Reserved Space: 31.66GiB
 Max Used Space: 4.657GiB
 Min Free Space: 15.83GiB
GC Policy rule#3:
 All:            true
 Reserved Space: 31.66GiB
 Max Used Space: 4.657GiB
 Min Free Space: 15.83GiB

The CDI configuration was created by running: sudo nvidia-ctk cdi generate --output=/etc/cdi/nvidia.json

Expected behaviour

For docker build -f Dockerfile . command to run with the Dockerfile without any errors.

Actual behaviour

Getting the following error:

ERROR: failed to build: failed to solve: failed to load LLB: device nvidia.com/gpu=all is requested by the build but not allowed

Buildx version

github.com/docker/buildx v0.25.0 faaea65

Docker info

Client: Docker Engine - Community
 Version:    28.3.1
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.25.0
    Path:     /usr/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v2.38.1
    Path:     /usr/libexec/docker/cli-plugins/docker-compose

Server:
 Containers: 2
  Running: 2
  Paused: 0
  Stopped: 0
 Images: 8
 Server Version: 28.3.1
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Using metacopy: false
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: systemd
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Discovered Devices:
  cdi: nvidia.com/gpu=0
  cdi: nvidia.com/gpu=GPU-cf7e763a-628e-84d7-d146-62824b805c1f
  cdi: nvidia.com/gpu=all
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 nvidia runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 05044ec0a9a75232cad458027ca83437aae3f4da
 runc version: v1.2.5-0-g59923ef
 init version: de40ad0
 Security Options:
  apparmor
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 6.8.0-1031-aws
 Operating System: Ubuntu 24.04.2 LTS
 OSType: linux
 Architecture: x86_64
 CPUs: 8
 Total Memory: 30.98GiB
 Name: ip-10-200-3-199
 ID: 89391cb8-ae75-4089-859f-472af634ad22
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Experimental: false
 Insecure Registries:
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false

Builders list

NAME/NODE     DRIVER/ENDPOINT   STATUS    BUILDKIT   PLATFORMS
default*      docker                                 
 \_ default    \_ default       running   v0.23.2    linux/amd64 (+3), linux/386

Configuration

# syntax=docker/dockerfile:1.17-labs
FROM nvidia/cuda:12.9.1-cudnn-runtime-ubuntu24.04

RUN --device=nvidia.com/gpu=all nvidia-smi

Build logs

Additional info

No response

[crazy-max]

I can see in my output of docker buildx inspect (see below) that the GPU I have configured has not been automatically allowed to be used. Is this a bug?

Oh good catch we forgot to document the org.mobyproject.buildkit.device.autoallow annotation: https://github.com/moby/buildkit/blob/d5a40ad2a177b3d1141e83d4969831398abac83e/solver/llbsolver/cdidevices/manager.go#L20. I will open a PR on docs repo.

So in your case you need to either set this annotation in your CDI specification similar to https://github.com/moby/buildkit/blob/d5a40ad2a177b3d1141e83d4969831398abac83e/solver/llbsolver/cdidevices/fixtures/vendor1-device.yaml#L8-L9

Or you can set the opt-in way using the --allow flag: https://docs.docker.com/reference/cli/docker/buildx/build/#allow:

(Needs to add documentation for this flag as well cc @ArthurFlag)

--allow device grants access to any device.
--allow device=kind|name grants access to specific device.
--allow device=kind|name,alias=kind|name allows mapping kind to a specific device or one device to another. Alias is the name requested by the build and device is the actual device that is being enabled.

For example to allow any device:

docker build -f Dockerfile --allow device .

[oisinturbittcx1]

Thank you very much for the comment, the help is much appreciated!

So I tried method 1 and got this error: ERROR: failed to build: failed to solve: granting entitlement device is not allowed by build daemon configuration. That will mean that the default Docker builder instance can't be used here?

Have also tried method 2, and while the output of docker buildx inspect (see below) shows that the GPUs are now allowed, when actually running the build command it is still failing at the RUN --device=nvidia.com/gpu=all nvidia-smi step due to not picking up the Nvidia drivers: NVIDIA-SMI couldn't find libnvidia-ml.so library in your system. Please make sure that the NVIDIA Display Driver is properly installed and present in your system.

Also, if anyone else stumbles across this, the CDI specification created by nvidia-ctk is v0.5.0 so the version field on the YAML spec needs to be manually changed to 0.6.0 to allow for the annotations field or else Docker won't load the specification.

Name:          default
Driver:        docker
Last Activity: 2025-07-04 15:05:07 +0000 UTC

Nodes:
Name:             default
Endpoint:         default
Status:           running
BuildKit version: v0.23.2
Platforms:        linux/amd64, linux/amd64/v2, linux/amd64/v3, linux/386
Labels:
 org.mobyproject.buildkit.worker.moby.host-gateway-ip: 172.17.0.1
Devices:
 Name:                  nvidia.com/gpu=0
 Automatically allowed: true
 Annotations:
                        org.mobyproject.buildkit.device.autoallow: true
 Name:                  nvidia.com/gpu=GPU-cf7e763a-628e-84d7-d146-62824b805c1f
 Automatically allowed: true
 Annotations:
                        org.mobyproject.buildkit.device.autoallow: true
 Name:                  nvidia.com/gpu=all
 Automatically allowed: true
 Annotations:
  org.mobyproject.buildkit.device.autoallow: true
GC Policy rule#0:
 All:            false
 Filters:        type==source.local,type==exec.cachemount,type==source.git.checkout
 Keep Duration:  48h0m0s
 Max Used Space: 4.375GiB
GC Policy rule#1:
 All:            false
 Keep Duration:  1440h0m0s
 Reserved Space: 31.66GiB
 Max Used Space: 4.657GiB
 Min Free Space: 15.83GiB
GC Policy rule#2:
 All:            false
 Reserved Space: 31.66GiB
 Max Used Space: 4.657GiB
 Min Free Space: 15.83GiB
GC Policy rule#3:
 All:            true
 Reserved Space: 31.66GiB
 Max Used Space: 4.657GiB
 Min Free Space: 15.83GiB

[oisinturbittcx1]

Also, just to confirm, running docker run --rm --runtime=nvidia nvidia/cuda:12.9.1-base-ubuntu22.04 nvidia-smi is able to correctly pick up the GPU.

[oisinturbittcx1]

I have tried docker buildx create --use --bootstrap --name gpu-builder --buildkitd-flags '--allow-insecure-entitlement device' which resulted in the error below. Appears to not allow for the --allow-insecure-entitlement device' flag.

 > [internal] booting buildkit:                                                        
18.98 time="2025-07-04T15:37:32Z" level=info msg="found worker \"jdpy0jn4glj9yrk5rkentime="2025-07-04T15:37:32Z" level=info msg="found worker \"jdpy0jn4glj9yrk5rkens8ntime="2025-07-04T15:37:32Z" level=info msg="found worker \"jdpy0jn4glj9yrk5rkens8nmm\", labels=map[org.mobyproject.buildkit.worker.executor:oci org.mobyproject.buildkit.worker.hostname:02c07f72cf11 org.mobyproject.buildkit.worker.network:host org.mobyproject.buildkit.worker.oci.process-mode:sandbox org.mobyproject.buildkit.worker.selinux.enabled:false org.mobyproject.buildkit.worker.snapshotter:overlayfs], platforms=[linux/amd64 linux/amd64/v2 linux/amd64/v3 linux/386]"
18.98 time="2025-07-04T15:37:32Z" level=warning msg="currently, only the default worker can be used."
18.98 (buildkitd: invalid entitletime="2025-07-04T15:37:32Z" level=warning msg="currently, only the default worker can be used."
18.98 time="2025-07-04T15:37:32Z" level=warning msg="currently, only the default worker can be used."
18.98   /src/cmd/buildkitd/main.go:368
18.98 # /src/cmd/buildk /src/cmd/buildkitd/main.go:368
18.98 github.com/urfave/cli.(*App).Run
18.98 github.com/urfave/cli.(*App).Run
18.98 . /srcgithub.com/urfave/cli.(*App).Run
18.98   /usr/local/go/src/runtime/proc. /usr/local/g    /usr/local/go/src/runti/usr/local/go/stime="2025-07-0time="2025-07-04T15:37:33Z" level=info msg="time="2025-07-04T15:37:33Z" level=info msg="auto snapshotter: using overlayfs"
18.98 time="2025-07-04T15:37:33Z" level=warning msg="skipping containerd worker, as \"/rtime="2025-07-04T15:37:33Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 dtime="2025-07-04T15:37:33Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 `time="2025-07-04T15:37:33Z" level=warning msg="currently, only the default worker can be used."
18.98 (buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:368
18.98 #github.com/urtime="2025-07-04T15:37:33Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/mainbuildkitd: invalid entitlement : device
18.98 github.com/urfavgithub.com/urfave/cli.HandleActigithub.com/urfave/cli.HandleAction
18.98   /src/vendor/github.com/urfave/cli/app.go:286
18.98   /src/vendor/github.com/urfave/cl        /src/vendor/github.com/urfave/cli/app.go:286
18.98 runtime.maruntime.main
18.98 ' /usr/localruntime.main
18.98   /usr/local/go/src/runtime/asm_amd64.s:  /usr/local/go/  /usr/local/go/src/runtime/asm_amd64.s:1700
18.98 time="2025-07-04T15:37:33Z" level=info msg="found worker \"jdpy0jn4glj9yrk5rkentime="2025-07-04T15:37:33Z" level=info msg="found worker \"jdpy0jn4glj9yrk5rkens8ntime="2025-07-04T15:37:33Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 `time="2025-07-04T15:37:33Z" level=warning msg="currently, only the default worker can be used."
18.98 (buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:368
18.98 #github.com/urfave/cli.HandleAction
18.98 . /src/vendor/github.com/urfave/cli/app.go:524
18.98 !github.com/urfave/cli.(*App).Run
18.98 . /src/vendor/time="2025-07-04T15:37:33Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 `time="2025-07-04T15:37time="2025-07-04T15:37:33Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:368
18.98 #github.com/urfave/cli.HandleActimain.main.func3
18.98   /src/cmd/buildkmain.main.func3
18.98   /src/vendor/github.com/urfave/c /src/vendor/github.com/urfave/cli/      /src/vendor/github.com/urfave/cli/app.go:524
18.98 main.main
18.98   /src/cmd/buildmain.main
18.98   /src/cmd/buildkitd/main.go:main.main
18.98   /usr/local/go/src/runtime/proc. /usr/local/g    /usr/local/go/src/runtime/proc.go:283
18.98 time="2025-07-0time="2025-07-04T15:37:34Z" level=info msg="time="2025-07-04T15:37:34Z" level=info msg="auto snapshotter: using overlayfs"
18.98 time="2025-07-04T15:37:34Z" level=warning msg="failed to enable cgroup controller time="2025-07-04T15:37:34Z" level=warning msg="failed to enable cgroup controller \"cpu\": write /sys/fs/cgroup/cgroup.subtree_control: device or resource busy"
18.98 time="2025-07-04T15:37:34Z" level=warning msg="failed to enable cgroup controller \"memory\": write /sys/fs/cgroup/cgroup.subtree_control: device or resource bustime="2025-07-04T15:37:34Z" level=warning msg="failed to enable cgroup controller \"memory\": write /sys/fs/cgroup/cgroup.subtree_control: device or resource butime="2025-07-04T15:37:34Z" level=warning msg="failed to enable cgroup controller \"memory\": write /sys/fs/cgroup/cgroup.subtree_control: device or resource busy"
18.98 time="2025-07-04T15:37:34Z" level=warning msg="failed to enable cgroup controller \"rdma\": write /sys/fs/cgroup/cgroup.subtree_control: device or resource busy"
18.98 time="2025-07-04T15:37:34Z" level=warning msg="failed to enable cgroup controller \"rdma\": write /sys/fs/cgroup/cgroup.subtree_control: device or resource busy"
18.98 time="2025-07-04T15:37:34Z" level=warning msg="failed to enable cgroup controller \"rdma\": write /sys/fs/cgroup/cgroup.subtree_control: device or resource busy"
18.98 time="2025-07-04T15:37:34Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 dtime="2025-07-04T15:37:34Z"time="2025-07-04T15:37:34Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 dtime="2025-07-04T15:37:34Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 `time="2025-07-04T15:37:34Z" level=warning msg="currently, only the default worker can be used."
18.98 (buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98 time="2025-07-04T15:37:34Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98 buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98 buildkitd: invalid entit  /src/vendor/github.com/urfave/c /src/vendor/github.com/urfave/cli/      /src/vendor/github.com/urfave/cli/app.go:524
18.98 main.main
18.98   /src/cmd/buildmain.main
18.98   /src/cmd/buildkitd/main.go:main.main
18.98   /usr/local/go/src/runtime/proc. /usr/local/g    /usr/local/go/src/runtime/proc.go:283
18.98 time="2025-07-0time="2025-07-04T15:37:35Z" level=info msg="time="2025-07-04T15:37:35Z" level=info msg="auto snapshotter: using overlayfs"
18.98 time="2025-07-04T15:37:35Z" level=warning msg="skipping containerd worker, as \"/rtime="2025-07-04T15:37:35Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 dtime="2025-07-04T15:37:35Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 `time="2025-07-04T15:37:35Z" level=warning msg="currently, only the default worker can be used."
18.98 (buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:368
18.98 #github.com/urtime="2025-07-04T15:37:35Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/mainbuildkitd: invalid entitlement : device
18.98 github.com/urfavgithub.com/urfave/cli.HandleActigithub.com/urfave/cli.HandleAction
18.98   /src/vendor/github.com/urfave/cli/app.go:286
18.98   /src/vendor/github.com/urfave/cl        /src/vendor/github.com/urfave/cli/app.go:286
18.98 runtime.maruntime.main
18.98 ' /usr/localruntime.main
18.98   /usr/local/go/src/runtime/asm_amd64.s:  /usr/local/go/  /usr/local/go/src/runtime/asm_amd64.s:1700
18.98 time="2025-07-04T15:37:36Z" level=info msg="found worker \"jdpy0jn4glj9yrk5rkentime="2025-07-04T15:37:36Z" level=info msg="found worker \"jdpy0jn4glj9yrk5rkens8ntime="2025-07-04T15:37:36Z" level=info msg="found worker \"jdpy0jn4glj9yrk5rkens8nmm\", labels=map[org.mobyproject.buildkit.worker.executor:oci org.mobyproject.buildkit.worker.hostname:02c07f72cf11 org.mobyproject.buildkit.worker.network:host org.mobyproject.buildkit.worker.oci.process-mode:sandbox org.mobyproject.buildkit.worker.selinux.enabled:false org.mobyproject.buildkit.worker.snapshotter:overlayfs], platforms=[linux/amd64 linux/amd64/v2 linux/amd64/v3 linux/386]"
18.98 time="2025-07-04T15:37:36Z" level=warning msg="currently, only the default worker can be used."
18.98 (buildkitd: invalid entitletime="2025-07-04T15:37:36Z" level=warning msg="currently, only the default worker can be used."
18.98 time="2025-07-04T15:37:36Z" level=warning msg="currently, only the default worker can be used."
18.98   /src/cmd/buildkitd/main.go:368
18.98 # /src/cmd/buildk /src/cmd/buildkitd/main.go:368
18.98 github.com/urfave/cli.(*App).Run
18.98 github.com/urfave/cli.(*App).Run
18.98 . /srcgithub.com/urfave/cli.(*App).Run
18.98   /src/cmd/buildkitd/main.go:412
runtim  /src/cmd/       /src/cmd/buildkitd/main.go:412
18.98 runtime.goexiruntime.goexit
18.98 , /usr/local/go/sruntime.goexit
18.98 time="2025-07-04T15:37:40Z" level=warning mstime="2025-07-04T15:37:40Z" level=warning msg="using host network as the defaultime="2025-07-04T15:37:40Z" level=warning msg="using host network as the default"
18.98 time="2025-07-04T15:37:40Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 `time="2025-07-04T15:37:40Z" level=warning msg="currently, only the default worker can be used."
18.98 (buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:368
18.98 #github.com/urfave/cli.HandleAction
18.98 . /src/vendor/github.com/urfave/cli/app.go:524
18.98 !github.com/urfave/cli.(*App).Run
18.98 . /src/vendor/time="2025-07-04T15:37:40Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 `time="2025-07-04T15:37time="2025-07-04T15:37:40Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:368
18.98 #github.com/urfave/cli.HandleActimain.main.func3
18.98   /src/cmd/buildkmain.main.func3
18.98   /src/vendor/github.com/urfave/c /src/vendor/github.com/urfave/cli/      /src/vendor/github.com/urfave/cli/app.go:524
18.98 main.main
18.98   /src/cmd/buildmain.main
18.98   /src/cmd/buildkitd/main.go:main.main
18.98   /usr/local/go/src/runtime/proc. /usr/local/g    /usr/local/go/src/runtime/proc.go:283
18.98 time="2025-07-0time="2025-07-04T15:37:47Z" level=info msg="time="2025-07-04T15:37:47Z" level=info msg="auto snapshotter: using overlayfs"
18.98 time="2025-07-04T15:37:47Z" level=warning msg="skipping containerd worker, as \"/rtime="2025-07-04T15:37:47Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 dtime="2025-07-04T15:37:47Z" level=info msg="found 1 workers, default=\"jdpy0jn4glj9yrk5rkens8nmm\""
18.98 `time="2025-07-04T15:37:47Z" level=warning msg="currently, only the default worker can be used."
18.98 (buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:368
18.98 #github.com/urtime="2025-07-04T15:37:47Z" level=warning msg="skipping containerd worker, as \"/run/containerd/containerd.sock\" does not exist"
18.98 buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/main.go:buildkitd: invalid entitlement : device
18.98 main.main.func3
18.98   /src/cmd/buildkitd/mainbuildkitd: invalid entitlement : device
18.98 github.com/urfavgithub.com/urfave/cli.HandleActigithub.com/urfave/cli.HandleAction
18.98   /src/vendor/github.com/urfave/cli/app.go:286
18.98   /src/vendor/github.com/urfave/cl        /src/vendor/github.com/urfave/cli/app.go:286
18.98 runtime.maruntime.main
18.98 ' /usr/localruntime.main
18.98   /usr/local/go/src/runtime/asm_amd64.s:  /usr/local/go/  /usr/local/go/src/runtime/asm_amd64.s:1700
------
ERROR: Error response from daemon: Container 02c07f72cf1114a36e9974e545863fd2ef208d788110b9437e3433af751ec63a is restarting, wait until the container is running