search

kaczmarj / apptainer-in-docker

Apptainer in Docker!
Apache License 2.0
43 stars 9 forks source link

running apptainer in docker without --privileged #15

Open jemajet opened 1 year ago

jemajet commented 1 year ago

Do you know if it's possible to run without the --privileged flag? I've been trying to run with --security-opt seccomp=unconfined --security-opt systempaths=unconfined --security-opt no-new-privileges --device /dev/fuse, but I keep running into this error: ERROR : Installation issue: starter-suid doesn't have setuid bit set

kaczmarj commented 1 year ago

i have never gotten this to work to be honest... perhaps try building apptainer without suid and try with those docker run options?

sudo docker build --build-arg MCONFIG_OPTIONS="--without-suid" --tag apptainer - < Dockerfile

related issue: https://github.com/apptainer/apptainer/issues/1439

kaczmarj commented 1 year ago

@jemajet - there might be an answer to your question in https://github.com/kaczmarj/apptainer-in-docker/issues/4#issuecomment-1483151680