SingularityCE 4.1.2
SingularityCE 4.1.2 is a patch release in the 4.1 series, including various bug fixes.
Bug Fixes
- Set OCI runtime-spec annotations that are required by the documented image-spec conversion process.
- In
--oci
mode always set inner ID map based on host user, notUSER
in OCI container. Fixes incorrect permissions for files owned byUSER
in the container. - Provide warning / info message for OCI image-spec features (volumes, exposed ports) that are not supported by singularity.
- Honor
WORKDIR
by default for OCI images in--oci
mode, as required by OCI image-spec. - Restore previous
--writable
behaviour when running a container image from SIF/SquashFS in user namepace mode. The image will be extracted to a temporary sandbox, which is writable at runtime. Note that any changes are not made to the original image. - Fix
target: no such file or directory
error in native mode when extracting layers from certain OCI images that manipulate hard links across layers. - Fix extraction of OCI layers when run in a root mapped user namespace (e.g..
unshare -r
). - Use user namespace for wrapping of
unsquashfs
when singularity is run with --userns / -uflag. Fixes temporary sandbox extraction of images in non-root mapped user namespace (e.g.
unshare -c`).
Thanks / Reporting Bugs
Thanks to our contributors for code, feedback and, testing efforts!
As always, please report any bugs to: https://github.com/sylabs/singularity/issues/new
If you think that you've discovered a security vulnerability please report it to: security@sylabs.io
Have fun!
Downloads
Source Code
Please use the singularity-ce-4.1.2.tar.gz download below to obtain and install SingularityCE 4.1.2. The GitHub auto-generated 'Source Code' downloads do not include required dependencies etc.
Packages
RPM / DEB packages are provided for:
- Ubuntu 20.04 (focal)
- Ubuntu 22.04 (jammy)
- RHEL/CentOS 7 (el7)
- RHEL/CentOS/AlmaLinux/Rocky 8 (el8)
- RHEL/CentOS/AlmaLinux/Rocky 9 (el9)
These packages were built with Go 1.21.7