[device manager] Add args to customize commit_device_access_changes b…

…ehavior.

Currently, commit_device_access_changes always checkpoints the
device manager state **and** configures the bpf programs for the cgroup
based on its device access state.

We add an argument to commit_device_access_changes for the caller to
determine whether they want the state to be checkpointed along with
attaching the ebpf program.

Review: https://reviews.apache.org/r/75148/

src/slave/containerizer/device_manager/device_manager.cpp

@@ -256,16 +256,20 @@ class DeviceManagerProcess : public process::Process<DeviceManagerProcess>
     return Nothing();
   }
 
-  Try<Nothing> commit_device_access_changes(const string& cgroup) const
+  Try<Nothing> commit_device_access_changes(
+      const string& cgroup,
+      bool write_checkpoint = true) const
   {
-    Try<Nothing> status = checkpoint();
+    if (write_checkpoint) {
+      Try<Nothing> status = checkpoint();
 
-    if (status.isError()) {
-      return Error("Failed to checkpoint device access state: "
-                   + status.error());
+      if (status.isError()) {
+        return Error("Failed to checkpoint device access state: "
+                    + status.error());
+      }
     }
 
-    status = cgroups2::devices::configure(
+    Try<Nothing> status = cgroups2::devices::configure(
         cgroup,
         device_access_per_cgroup.at(cgroup).allow_list,
         device_access_per_cgroup.at(cgroup).deny_list);