Failed to mount home directory when home is a sim link to a nfs directory

[Oriol Guitart]

Hi All,

I found another issue on my tests about singularity. In our group, we have our home directories that link to another directory which is mounted in nfs. In the singularity.conf, I have specified a bind path to the nfs mounted directory and it works fine, I can see it when I'm inside the container. However, when it tries to mount the home directory I get this message:

ERROR  : Failed to mount home directory /home/oguitart: Permission denied
ABORT  : Retval = 255

How is that possible that the nfs home directory can be mounted but my /home/oguitart which is actually pointing to the nfs home directory can't be mounted in the container? Why don't I have permissions? Is not my user who is launching the singularity container?
Thanks,


oriol

[Thomas Hartmann]

Hi Oriol,

is the mount a kerberized NFS4 mount?
May guess would be, that if authentication goes via kerberos it may be
to close to the (host) kernel/the container would have to have access to
the kerb token.

Cheers,
Thomas

> --
> You received this message because you are subscribed to the Google
> Groups "singularity" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to singularity...@lbl.gov
> <mailto:singularity...@lbl.gov>.

[Oriol Guitart Pla]

Hi Thomas,


No, we are using NFS3.

Thanks,


oriol

[Gregory M. Kurtzer]

This is an ongoing problem as Singularity can not automatically (at least not today) figure out home directories that exist on a symlink'ed path, so that path will have to be bound in via a bind path instead of relying on the home directory automatic mounting.

Hope that helps!

<mailto:singularity+unsubscribe...@lbl.gov>.

--
You received this message because you are subscribed to the Google Groups "singularity" group.

To unsubscribe from this group and stop receiving emails from it, send an email to singularity...@lbl.gov.

--

Gregory M. Kurtzer

HPC Systems Architect and Technology Developer

Lawrence Berkeley National Laboratory HPCS
University of California Berkeley Research IT
Singularity Linux Containers (http://singularity.lbl.gov/)

Warewulf Cluster Management (http://warewulf.lbl.gov/)

GitHub: https://github.com/gmkurtzer, Twitter: https://twitter.com/gmkurtzer

[Oriol Guitart]

Hi Greg,

Thanks for your comments. Indeed, I also did several tests and finally I found what you just said. That by specifying the /home in the bind path usually works. First, I tried to bind /home/oguitart but it didn't work. However, binding /home works fine. Anyway, it is good to know.

Regards,

oriol

On Tue, Apr 11, 2017 at 1:34 AM, Gregory M. Kurtzer <gmku...@lbl.gov> wrote:

This is an ongoing problem as Singularity can not automatically (at least not today) figure out home directories that exist on a symlink'ed path, so that path will have to be bound in via a bind path instead of relying on the home directory automatic mounting.

Hope that helps!

You received this message because you are subscribed to a topic in the Google Groups "singularity" group.
To unsubscribe from this topic, visit https://groups.google.com/a/lbl.gov/d/topic/singularity/wJ_t3GDHGFA/unsubscribe.
To unsubscribe from this group and all its topics, send an email to singularity+unsubscribe@lbl.gov.