3.6.4 sandboxes?

806 views
Skip to first unread message

Mike Nolta

unread,
Oct 27, 2020, 4:46:45 PM10/27/20
to singularity
Hi,

In 3.6.4 the following now fails, at least on my Centos7.6 box:

  $ singularity pull docker://python:latest
  $ singularity build --sandbox sandbox python_latest.sif

with the error message:

  ERROR:   unpackSIF failed: root filesystem extraction failed: extract command failed: WARNING: passwd file doesn't exist in container, not updating
  ...

Is there a workaround?

-Mike

xman

unread,
Oct 28, 2020, 1:40:58 AM10/28/20
to singularity, mi...@nolta.net
I get the same issue when the build is running on a network file system (GPFS). Setting the environment SINGULARITY_TMPDIR to point to a local disk works for me.

Mike Nolta

unread,
Oct 28, 2020, 8:51:49 AM10/28/20
to xman, singularity
Setting SINGULARITY_TMPDIR didn't fix my issue.

-Mike

David Trudgian

unread,
Oct 28, 2020, 10:20:50 AM10/28/20
to singularity, mi...@nolta.net, singularity, xman
All,

This appears to be a regression due to how we have wrapped calls to `unsquashfs` due to the security issue that 3.6.4 addresses.

I've opened an issue: https://github.com/hpcng/singularity/issues/5666 to track it.

Mike - what are you setting `SINGULARITY_TMPDIR` to? Can you provide debug output from `singularity -d ......` and information about the filesystems involved (sandbox location and TMPDIR you set). If you could file on the linked issue that'd be great - or I can transfer from a reply to the list.

Thanks,

DT

Reply all
Reply to author
Forward
0 new messages