If you use puppet you can also add a sysctl module
(https://forge.puppet.com/thias/sysctl) and this snippet to your code WN
module? singularity class?
sysctl { "user.max_user_namespaces":
ensure => present,
value => "15000",
target => "/etc/sysctl.d/90-max_user_namespaces.conf",
}
cheers
alessandra
On 26/09/2019 15:55, Alessandra Forti wrote:
> Hi,
>
> singularity 3.4.0 has been released in EPEL and many people have
> automatic updates on. However it has some severe bugs that affect the
> standalone containers run by ATLAS. Luckily we currently have only 1
> user running in anger and the others are testing or are HC tests, but
> for the future I'd like not to depend on what appears in the
> repositories and use the version we have put in /cvmfs/atlas.cern.ch.
> To do that we need to have user namespaces enabled. This will also be
> recommended policy from the WLCG container WG, so there will be no
> conflict with other experiments and i have already presented it 2 or 3
> times in ATLAS meeting and will do so again next week. Sites can also
> continue to have singularity installed locally for other users, just
> ATLAS will use their own version. Could I ask UK sites to enable user
> NS please? There are several failing the HC tests [1] because of this
> upgrade.
>
> On the WNs
> echo "user.max_user_namespaces = 15000" > /etc/sysctl.d/90-max_user_namespaces.conf
> sysctl -p /etc/sysctl.d/90-max_user_namespaces.conf
>
> the pilot will check max_user_namespaces value and act accordingly.
>
> thanks
>
> cheers
> alessandra
>
> [1]
> https://bigpanda.cern.ch/jobs/?hours=12&transformation=runcontainer&jobstatus=failed&produsername=gangarbt
>
>
> --
> Respect is a rational process. \\//
> For Ur-Fascism, disagreement is treason. (U. Eco)
>
> ------------------------------------------------------------------------
>
> To unsubscribe from the TB-SUPPORT list, click the following link:
> https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
>
--
Respect is a rational process. \\//
For Ur-Fascism, disagreement is treason. (U. Eco)
########################################################################
To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
