[Beowulf] singularity configuration

[INKozin via Beowulf]

Hello,
Singularity has been mentioned a few times on this list. Now on
version 2.4.2, it feels mature for production and converting a custom
Docker image into a Singularity image is very easy. The defaults seem
sensible although I didn't have time to explore everything in detail.
Are there potential exploits we should be aware of before making it
generally available on our clusters?
Do people significantly change the default configuration?
Thank you
Igor

[Chris Samuel]

Post by INKozin via Beowulf
Are there potential exploits we should be aware of before making it
generally available on our clusters?

It's a setuid program so there are also potential gotchas. For instance you
now want to be running 2.4.6 due to the most recent exploit found.

Post by INKozin via Beowulf
Do people significantly change the default configuration?

No, we've not done anything significant to ours from memory.

All the best,
Chris