Disable privileged in docker datalore agents

Problems and bugs
1

Hello,

I am running into an issue with multiple GPUs being assigned to the agent even if the count is set to 1 or deviceId is set. After running some tests I think it’s because docker privileged is set to true.

When I run ‘ls /dev’ inside the docker container I can see all the host devices. The container is a notebook created by datalore using the web UI

The following command shows the container is running in privileged mode.

docker inspect intelligent_dubinsky | jq '.[].HostConfig.Privileged'

I created a container using the following compose file and it’s showing the proper GPU count and devices.

services:
  test:
    image:  jetbrains/datalore-agent:2023.6
    command: ls /dev
    deploy:
      resources:
        reservations:
          devices:
          - driver: nvidia
            device_ids: ['1']
            capabilities: [gpu]```