ComputeCanada / software-stack

Repository to host issues relative to the Compute Canada software stack

12 stars 0 forks source link

Supporting the building and deployment of containers #116

Closed mboisson closed 1 year ago

mboisson commented 2 years ago

[x] Create a CCDB group for access control
[x] Create a GitHub team for access control
[x] Create a repository to host recipes
[x] Write documentation
[x] Configure publisher node to allow publishing of containers (new repository)
[ ] ~Configure VM for building images that requires Docker (separate VM, with special software)~ (no need, we use podman)

rptaylor commented 2 years ago

Buildah (and podman if needed) should be able to do anything that Docker can do, except they are fully unprivileged and do not entail sudo privileges for users. If they can be used instead of Docker it could remove the need for a separate VM for image building, unless other special software is required.

mboisson commented 2 years ago

What's the relation to #56 ?

rptaylor commented 2 years ago

56 is the automated publishing system (a file managed in git defines which OCI/Docker images on an external registry to convert to Apptainer/Singularity and publish to CVMFS).

This is for manual publishing of images, what I understood from Tannistha is that the source images are built with Apptainer/Singularity, not Docker/buildah.

However both systems will publish images to the same repo. To avoid interference between the two publishing mechanisms, the manually published images will be kept within a specific subdirectory such as /content. That means the transaction command will be cvmfs_server transaction reponame/content

mboisson commented 2 years ago

Tagging @BioBP

mboisson commented 2 years ago

Repository to host container recipes: https://github.com/ComputeCanada/containers-recipes

mboisson commented 1 year ago

This is now done.