Dave Trudgian
Dave Trudgian
Mount of singularity SquashFS SIF containers should be possible without privilege: - [x] #1209 - [ ] #1210
The nvidia-container-toolkit mediated setup of GPU containers for CUDA and other work will be transitioning toware an approach that leverages the CDI (container device interface) standard. https://github.com/container-orchestrated-devices/container-device-interface Monitor this work...
**Is your feature request related to a problem? Please describe.** Support execution of OCI images, in OCI native on-disk format, via runc OCI engine - but with the familiar Singularity...
**Type of issue** technical debt **Description of issue** SingulartyCE contains various workarounds for RHEL6 / 2.6 kernel, old versions of invoked external programs etc. Special cases supporting these distributions can...
**Is your feature request related to a problem? Please describe.** The hybrid fakeroot workflow creates / enters namespaces and performs container setup in an order that is not compatible with...
**Type of issue** Testing **Description of issue** The unit tests and e2e/security tests currently perform limited tests of seccomp filters being applied as expected. Unit testing checks some internal translation...
**Describe the solution you'd like** The `--gpus` flag for the nvidia docker runtime will configure the `nvidia-container-cli` setup so that e.g. ``` --gpus "all,capabilities=utility" ``` is equivalent to `NVIDIA_VISIBLE_DEVICES=all`, `NVIDIA_DRIVER_CAPABILITIES=utility`....
**Describe the solution you'd like** SingularityCE can apply security restrictions, such as selinux rules, seccomp filters via a --security flag. However, this only works for root. Since SingularityCE focuse on...
**Is your feature request related to a problem? Please describe.** It is not possible to checkpoint and restore running SingularityCE containers using in-built or simple methods. **Describe the solution you'd...
**Is your feature request related to a problem? Please describe.** See https://sylabs.io/2022/02/singularityce-4-0-and-beyond **Describe the solution you'd like** Follow on from #598 Cover remaining run/shell/exec flags/features that would make it practical...