Function check_gpu_privileges

crates/openshell-driver-vm/src/driver.rs:3126–3135

()

#[cfg(target_os = "linux")]
fn check_gpu_privileges() -> Result<(), String> {
    if !rustix::process::geteuid().is_root() {
        return Err(
            "GPU support requires root privileges for VFIO bind/unbind and TAP networking. \
             Run with sudo or ensure CAP_SYS_ADMIN + CAP_NET_ADMIN capabilities are set."
                .to_string(),
        );
    }
    Ok(())
}

// `tonic::Status` is ~176 bytes; it's the standard error type across the
// gRPC API surface, so boxing here would diverge from every other handler.