Lukas

yes it's available. Thanks for looking into it!

hm this is my setup umask gives ``` % umask 022 ``` the tool versions are ``` % umoci --version umoci version 0.4.0+dev~git8b89fabfac6c176b95078cb106c2704303564e6d % runc --version runc version spec: 1.0.0...

Ah right this was just a mistake in the post above in the OP I used rootless. this is what ai get ``` lheinric@lxplus021:/tmp/lheinric% orca-build --rootless -t what . orca-build[INFO]...

thanks for looking into it!

Thanks @cyphar I just chose `/` as it seemed the most minimal of examples. It's very reasonable I think to request people to copy stuff elsewhere. Usually we use a...

it seems due to this CVE https://access.redhat.com/security/cve/cve-2018-1000001 we now have have `max_user_namespaces = 0` (temprarily at least) :( I'll try to resume testing once they are enabled again. we're following...

thanks. I'll raise it with the people responsible for the image.

turns out one can just add a `chmod +w` to it and that works ``` FROM cern/cc7-base RUN mkdir /code && chmod +w /code COPY . /code ```

yeah the workaround also only works sometimes. If i switch the image from `cern/slc6-base` to one build with this Dockerfile ``` FROM cern/slc6-base:latest RUN adduser atlas && \ usermod -aG...

I've not been involved lately in the development, so I might not be of much help, but I'm pretty sure you need to be able to have distributed storage available....