glideinWMS / glideinwms

The glideinWMS Project
http://tinyurl.com/glideinwms
Apache License 2.0
16 stars 45 forks source link

Add flag to the glidein classad about HAS_UNPRIVILEGED_USER_NAMESPACES #371

Closed StevenCTimm closed 2 months ago

StevenCTimm commented 11 months ago

Is your feature request related to a problem? Please describe. We have several VO's who require singularity-in-singularity. For this to work the site must support user namespaces.

Describe the solution you'd like I would like the test which is already in /var/lib/gwms-factory/web-base/cvmfs_helper_funcs.sh to be put in the base singularity script, so we know if user namespaces are supported. Right now it is only invoked if the site is running cvmfsexec which most OSG sites are not. According to Namratha: "There is a function named perform_system_check and it has a bunch of different things that is being checked. For unprivileged user namespaces, you can use the variables GWMS_UNPRIV_USERNS_ENABLED and/or GWMS_UNPRIV_USERNS_SUPPORTED"

Describe alternatives you've considered Having each VO put this test in a pre-script of some kind.

Info (please complete the following information): This was requested by Annie in RITM1909697 from Steven Doran, doran@iastate.edu. DUNE also needs this. Consider this to be medium priority. Components--glidein.