OCI container creation at the LPC

[aperloff]

Given the presence of buildah, the containerize.sh script will create an OCI style image containing the current CMSSW release. The only prerequisites are (which are checked before running):

1. Buildah is installed on the system
2. The users id is given a set of subuids and subgids in /etc/subuid and /etc/subgid
3. /cvmfs/cms.cern.ch is mounted on the host machine
4. There is sufficient space to store the images

The basic workflow would be:

ssh -Y <username>@cmslpcheavy-sl7.fnal.gov
cd <path to cmssw>
cmsenv
<path to lpc_scripts>/containerize.sh -t <name:tag> -b <base_image>
podman run --rm -it <name>:<tag>

[aperloff]

@kpedro88 I believe I have addressed all of your review comments. Please let me know if you're happy with the results.

[kpedro88]

Similar to previous comment, could this be:

COPY ${TAR} ${WORKDIR}/${CMSSW_VERSION}.tar.gz

[aperloff]

I changed it to /home/${USER} as the ${WORKDIR} and ${HOME} variables are not available and misleading, respectively.

[kpedro88]

Why is ${WORKDIR} not available? In fact, it's defined in this file but then never used anywhere...

[aperloff]

That's not an argument or environment variable. The line:

WORKDIR /home/${USER}

Is the location the user will be dropped into when they open the container, as opposed to '/'.

[kpedro88]

Ah okay, it's a special Docker directive. In that case, I propose:

ARG USERDIR /home/${USER}
WORKDIR ${USERDIR}

then ${USERDIR} can be referenced where useful.

[aperloff]

Okay, take a look. I think I've implemented what you asked for.

[kpedro88]

Yes, this is better.

[kpedro88]

If ${USERDIR} works here, can't you define ARG USER_BUILD cmsusr and then USER ${USER_BUILD}, etc. to work around the #19 issue?

[aperloff]

I can certainly do what you're suggesting, and it does partially get around the problem. However, it won't get around #19 because I still won't be able to evaluate arguments in the parameters (chown) of the COPY command. Let me know what you think now.

[kpedro88]

I think this is an improvement. Can you update #19 to clarify the point about using arguments specifically in the parameters of the COPY command?

[aperloff]

Okay, #19 is updated.

[kpedro88]

+1