Admin Guide

• Administration Quickstart
  • Installation
    • Downloading the source
    • Source Installation
    • Prefix in special places (–localstatedir)
    • Building an RPM directly from the source
• Security
  • Container security paradigms
  • Untrusted users running untrusted containers!
    • Privilege escalation is necessary for containerization!
    • How does Singularity do it?
  • Where are the Singularity priviledged components
  • Can I install Singularity as a user?
  • Container permissions and usage strategy
    • controlling what kind of containers are allowed
    • limiting usage to specific container file owners
    • limiting usage to specific paths
  • Logging
    • A peek into the SetUID program flow
    • A peek into the “rootless” program flow
  • Summary
• The Singularity Config File
  • Parameters
    • ALLOW SETUID (boolean, default=’yes’)
    • ALLOW PID NS (boolean, default=’yes’)
    • ENABLE OVERLAY (boolean, default=’no’)
    • CONFIG PASSWD, GROUP, RESOLV_CONF (boolean, default=’yes’)
    • MOUNT PROC,SYS,DEV,HOME,TMP (boolean, default=’yes’)
    • MOUNT HOSTFS (boolean, default=’no’)
    • BIND PATH (string)
    • USER BIND CONTROL (boolean, default=’yes’)
    • AUTOFS BUG PATH (string)
  • Logging
  • Loop Devices
• Container Checks
  • What is a check?
    • Adding a Check
  • How to tell users?
• Troubleshooting
  • Not installed correctly, or installed to a non-compatible location
• Installation Environments
  • Singularity on HPC
    • Workflows
      • Integration with MPI
      • Tutorials
      • MPI Development Example
      • Code Example using Open MPI 2.1.0 Stable
      • Code Example using Open MPI git master
  • Image Environment
    • Directory access
      • Current Working Directory
    • Standard IO and pipes
    • Containing the container
  • License
    • In layman terms…
• Appendix
  • Using Host libraries: GPU drivers and OpenMPI BTLs
    • What We will learn today
    • Environment
    • Creating your image
    • Executing your image
  • Building an Ubuntu image on a RHEL host
    • Preparation
      • Creating the Definition File
      • Creating your image
      • Use here documents with RunCmd
      • Use InstallPkgs with multiple packages