Skip to content

Conversation

fstagni
Copy link
Contributor

@fstagni fstagni commented Jul 18, 2025

background for this change is this error:

Apptainer command failed with exit code 4
Command output: (4, "Found 4 errors\n    > Command exited with 255: apptainer --silent exec --bind /cvmfs --bind /export/data1/condor/execute/dir_37976/DIRAC_XLi9ygpilot --userns --bind /etc/proxy /cvmfs/cernvm-prod.cern.ch/cvm3 pwd\n    > Working directory inside apptainer (.) doesn't match outside (/export/data1/condor/execute/dir_37976/DIRAC_XLi9ygpilot)\n    > Command exited with 255: apptainer --debug exec --bind /cvmfs --bind /export/data1/condor/execute/dir_37976/DIRAC_XLi9ygpilot --userns --bind /etc/proxy /cvmfs/cernvm-prod.cern.ch/cvm3 pwd\n    > Command exited with 2: lb-run --container apptainer -c best --siteroot=/cvmfs/lhcb.cern.ch/lib DaVinci/v45r5 gaudirun.py --help\n", '')

@fstagni fstagni requested a review from atsareg as a code owner July 18, 2025 12:53

# Now let's construct the apptainer command
cmd = ["apptainer", "exec"]
cmd.extend(["--contain"]) # use minimal /dev and empty other directories (e.g. /tmp and $HOME)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm pretty sure this is breaking half of the security gaurentee we get from SingularityCE. If this isn't the case we at the very least need a clear explanation in the description of why it isn't.

I also don't think it even fixes the error in the description.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants