search

martius-lab / cluster_utils

https://cluster-utils.readthedocs.io/stable/
Other
12 stars 0 forks source link

Always run Singularity with `--cleanenv` #127

Open luator opened 3 weeks ago

luator commented 3 weeks ago

Extracted from #68

I am wondering if it actually could make sense to always run Singularity with --cleanenv, in order to improve isolation by default, and prevent subtle bugs.

If some environment variables are actually needed at runtime, they should explicitly be listed in the config. NOTE: Something to check first: Is it possible to use the variables config to simply pass on existing environment variables?