Fix a typo in the orchestrator, and push the new version of the base

image.

With this, we now have GPUs in the container!

Bug: 298933839
Change-Id: Ic0c12290e7f677a8eb72e819d0c578f2d74ea2e2

WORKSPACE

@@ -264,7 +264,7 @@ oci_pull(
 
 oci_pull(
     name = "oak_containers_nvidia_sysimage_base",
-    digest = "sha256:6c84579fbe5f0b8f9b311313f84d82065fa5922ce2ab134dfd98b515d673e7ca",
+    digest = "sha256:fdec1e1dff19a21899c40f5004fc2d9b8e1f047a4605657eea6119e387168611",
     image = "europe-west2-docker.pkg.dev/oak-ci/oak-containers-sysimage-base/oak-containers-nvidia-sysimage-base",
 )
 

oak_containers_orchestrator/src/container_runtime.rs

@@ -57,7 +57,7 @@ pub async fn run(
                     && entry.path().extension().unwrap_or_default() == OsStr::new("json")
                 {
                     let cdi_spec = crate::cdi::CdiSpec::new(entry.path())?;
-                    if cdi_spec.kind() != "nvidia.com/gpu" {
+                    if cdi_spec.kind() == "nvidia.com/gpu" {
                         cdi_spec.inject("all", &mut spec)?;
                     }
                 }