fix(nvidia-validator): don't leak PATH from container to chroot env

[sinanmohd]

fixes nvidia-validator on NixOS, TALOS, etc...

tested on NixOS with k3s and

helm install --wait --generate-name \
    -n gpu-operator --create-namespace \
    nvidia/gpu-operator \
    --version=v25.3.0 \
    --set driver.enabled=false \
    --set toolkit.env[0].name=CONTAINERD_CONFIG \
    --set toolkit.env[0].value=/var/lib/rancher/k3s/agent/etc/containerd/config.toml \
    --set toolkit.env[1].name=CONTAINERD_SOCKET \
    --set toolkit.env[1].value=/run/k3s/containerd/containerd.sock \

replaced the validator image with k9s edit, built the binary using

FROM golang:1.24.3
COPY ./ /app
WORKDIR /app
RUN go build ./cmd/nvidia-validator/
FROM  nvcr.io/nvidia/cloud-native/gpu-operator-validator:v25.3.0
COPY --from=0 /app/nvidia-validator /usr/bin/nvidia-validator

Closes: #1687

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.