Make singularity suid in arvbox, crunch-dispatch-local runs as user
[arvados.git] / tools / arvbox / lib / arvbox / docker / service / crunch-dispatch-local / run
1 #!/bin/bash
2 # Copyright (C) The Arvados Authors. All rights reserved.
3 #
4 # SPDX-License-Identifier: AGPL-3.0
5
6 exec 2>&1
7 set -ex -o pipefail
8
9 # singularity can use suid
10 chown root /var/lib/arvados/bin/singularity \
11       /var/lib/arvados/etc/singularity/singularity.conf \
12       /var/lib/arvados/etc/singularity/capability.json \
13       /var/lib/arvados/etc/singularity/ecl.toml
14 chmod u+s /var/lib/arvados/bin/singularity
15
16 exec /usr/local/lib/arvbox/runsu.sh $0-service $1