Difference: CmsSingularity (7 vs. 8)

Revision 82017-12-20 - BrianBockelman

Line: 1 to 1
 
META TOPICPARENT name="BrianBockelman"

CMS Singularity Support

Line: 22 to 22
  Install the RPM using the OSG instructions. That page includes instructions for instead enabling unprivileged singularity; that's good to do for the future, but CMS pilots do not yet support unprivileged singularity so at this point the rpm is still needed. The same RPM is also available in the WLCG yum repository which is probably more convenient for those who get their Linux distribution from CERN.
Changed:
<
<
The configuration file is in /etc/singularity/singularity.conf; no changes are necessary to support CMS. CMS does not use loopback-based image mounts, so it is OK to disable them as described in the OSG instructions.
>
>
The configuration file is in /etc/singularity/singularity.conf; no changes are necessary to support CMS.

One way to minimize risk inherent to using a setuid binary is to disable unnecessary features. For CMS, there are two possible steps:

  1. Only install the singularity-runtime package (removes the ability to create new images).
  2. CMS does not use loopback-based image mounts, so it is OK to disable them as described in the OSG instructions.

While this does reduce the risk, these are not required and may disrupt other singularity users at your site.

 

Verify CVMFS and SITECONF

 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback