Run a federation member on the National Research Platform's Nautilus

[yuvipanda]

https://nationalresearchplatform.org/ is an excellent, forward thinking group of people who make kubernetes clusters available for researchers and educational users to use. Docs at https://docs.nationalresearchplatform.org/, and their acceptable use policy is at https://docs.nrp.ai/assets/NRP-AUP.pdf. I'd like to run a mybinder.org federation member there, and the admins there are amenable to it.

It's a big multitenant kubernetes cluster, so there's a bunch of technical things we need to be able to do before we can run there. I think most of those are 'good ideas', and this issue tracks what we'll need to do.

The biggest is probably to stop our dind from running as a privileged daemon. With jupyterhub/repo2docker#1402 we switch to buildkit, which will allow us to do this!

[yuvipanda]

We would also need to stop our dind from being an actual daemonset. It's a daemon right now because we are using hostpath to share the docker socket, which is something I want to move away from too!

[yuvipanda]

My overall timeline here is in the order of months, not immediate.

[yuvipanda]

I spoke to them a little more about the nature of mybinder.org, and I think the fact we are fully no-login is a non-starter for them :) I'll confirm, but this may not happen.

[yuvipanda]

https://docs.nationalresearchplatform.org/userdocs/jupyter/jupyterhub/ is the appropriate policy.