2018
DOI: 10.1016/j.cpc.2018.05.021
|View full text |Cite
|
Sign up to set email alerts
|

Enabling rootless Linux Containers in multi-user environments: The udocker tool

Abstract: Containers are increasingly used as means to distribute and run Linux services and applications. In this paper we describe the architectural design and implementation of udocker, a tool which enables the user to execute Linux containers in user mode. We also present a few practical applications, using a range of scientific codes characterized by different requirements: from single core execution to MPI parallel execution and execution on GPGPUs.

Help me understand this report
View preprint versions

Search citation statements

Order By: Relevance

Paper Sections

Select...
2
1
1
1

Citation Types

0
48
0

Year Published

2018
2018
2022
2022

Publication Types

Select...
3
3
2

Relationship

0
8

Authors

Journals

citations
Cited by 55 publications
(48 citation statements)
references
References 29 publications
0
48
0
Order By: Relevance
“…Docker is a tool that allows for PharmacoGx to be uniformly deployed with all software dependencies, in a containerized runtime environment where all of our computations are performed and PSets are produced 20 . The Docker container is invoked upon CWL workflow execution, where all the input files for a given pipeline become mounted into the container and all output files produced in the isolated environment are recovered into a local environment 22,23 . Another advantage of Docker is the ability of containers to utilize and share the hardware resources of the environment it is being run in 24 .…”
Section: Harnessing Docker To Create a Reproducible Runtimementioning
confidence: 99%
“…Docker is a tool that allows for PharmacoGx to be uniformly deployed with all software dependencies, in a containerized runtime environment where all of our computations are performed and PSets are produced 20 . The Docker container is invoked upon CWL workflow execution, where all the input files for a given pipeline become mounted into the container and all output files produced in the isolated environment are recovered into a local environment 22,23 . Another advantage of Docker is the ability of containers to utilize and share the hardware resources of the environment it is being run in 24 .…”
Section: Harnessing Docker To Create a Reproducible Runtimementioning
confidence: 99%
“…As a result we have provided a flexible user-level solution to give autonomy to users in shared computing facilities [12]. Section 3.1 contains a thorough discussion on the strategy and outcomes.…”
Section: Context and State Of The Artmentioning
confidence: 99%
“…For OpenNebula [46] sites the solution consists in a Network Orchestrator Wrapper (NOW) 12 and a corresponding backend in the rOCCI-server. 13 NOW enforces site-wide policy and network configuration by making sure that only LANs designated by site administrators are made available to users, and that users cannot reuse LANs assigned to others while they remain reserved.…”
Section: Virtual Networkmentioning
confidence: 99%
See 1 more Smart Citation
“…Containers encompass all dependencies of the provisioned tools and greatly simplifies software installations for end users. The most widely used containerization solution is Docker ( www.docker.com ), but Singularity [8] , uDocker [9] , and Shifter [10] are recent alternatives that prevent users to run containers with root privileges, addressing most commons security issues when deploying contains in a multi-tenant computing clusters such as on on high-performance computing (HPC) clusters. Docker containers are commonly shared via Docker Hub ( https://hub.docker.com ).…”
Section: Containersmentioning
confidence: 99%