Opensuse Leap 15.4 + LXD, nvida GPU, "Failed to initialize NVML: Insufficient Permissions"

No, I have not set that flag. For the time being I have just run chown root:video on the video devices, but that isn’t persistent. Will I need to install nvidia runtime on the host, in the container, or both?