Gvisor doesn't inject the icd file for nvidia, as is done by nvidia container toolkit

[Champ-Goblem]

Description

Currently, gVisor does not inject nvidia_icd.json even when nvproxy-allowed-driver-capabilities = "all" is set.

When running with the nvidia container toolkit, this file injection is handled automatically, which allows vulkan to correctly detect the graphics card, instead of falling back to the CPU pipeline.

Steps to reproduce

Run a workload with gVisor, such as ubuntu:latest.
Install vulkan-tools, and run vulkaninfo --summary 2>/dev/null | grep -E "deviceName|deviceType|driverName", see that it outputs:

        deviceType         = PHYSICAL_DEVICE_TYPE_CPU
        deviceName         = llvmpipe (LLVM 15.0.7, 256 bits)
        driverName         = llvmpipe

Try find / -name "nvidia_icd.json" which returns no results.

runsc version

release-20260309.0

docker version (if using docker)

uname

No response

kubectl (if using Kubernetes)

repo state (if built from source)

No response

runsc debug logs (if available)

[ayushr2]

PRs appreciated!