Message boards : ATLAS Application : ATLAS native 1.23
Message board moderation

To post messages, you must log in.

AuthorMessage
David Cameron
Project administrator
Project developer
Project tester
Project scientist

Send message
Joined: 20 Apr 16
Posts: 154
Credit: 1,352,539
RAC: 84
Message 7754 - Posted: 18 Aug 2022, 14:57:50 UTC

This version explicitly mounts /tmp and /var/tmp into the container, to see if this fixes the errors seen in production.
ID: 7754 · Rating: 0 · rate: Rate + / Rate - Report as offensive     Reply Quote
maeax

Send message
Joined: 22 Apr 16
Posts: 601
Credit: 1,451,312
RAC: 1,368
Message 7756 - Posted: 18 Aug 2022, 17:53:11 UTC - in response to Message 7754.  

In \tmp and \var\tmp are some folder in CentOS9-VM from this morning.
systemd-private-f412b1030d9d40abbae48c3d5b0ea6b0ea6bf-rtkit-daemon.service
They have the same name in both folder, but are empty 7:20:12 UTC from today.
Using root as user for testing and production only.
Had no faulty task so long with 1.22 seen.
ID: 7756 · Rating: 0 · rate: Rate + / Rate - Report as offensive     Reply Quote
maeax

Send message
Joined: 22 Apr 16
Posts: 601
Credit: 1,451,312
RAC: 1,368
Message 7757 - Posted: 19 Aug 2022, 6:11:40 UTC - in response to Message 7756.  

ID: 7757 · Rating: 0 · rate: Rate + / Rate - Report as offensive     Reply Quote
computezrmle
Avatar

Send message
Joined: 28 Jul 16
Posts: 404
Credit: 374,791
RAC: 0
Message 7768 - Posted: 26 Aug 2022, 11:16:35 UTC - in response to Message 7754.  

I wonder if this could be a side effect of hardening options set in BOINC's systemd service unit.

Did not yet test it but it should be ensured that the tmp dir forwarded to apptainer is not the system wide tmp.
Instead the tmp below the slot should be used.
ID: 7768 · Rating: 0 · rate: Rate + / Rate - Report as offensive     Reply Quote
David Cameron
Project administrator
Project developer
Project tester
Project scientist

Send message
Joined: 20 Apr 16
Posts: 154
Credit: 1,352,539
RAC: 84
Message 7770 - Posted: 31 Aug 2022, 9:06:11 UTC - in response to Message 7768.  

I wonder if this could be a side effect of hardening options set in BOINC's systemd service unit.

Did not yet test it but it should be ensured that the tmp dir forwarded to apptainer is not the system wide tmp.
Instead the tmp below the slot should be used.


Thanks for this tip, it looks like this is indeed the problem. The unit file has
ProtectSystem=strict
ReadWritePaths=-/var/lib/boinc -/etc/boinc-client


which makes /tmp and /var/tmp read-only.

In v1.25 I set APPTAINERENV_TMPDIR to a dir inside the slots and this seems to fix the problem.
ID: 7770 · Rating: 0 · rate: Rate + / Rate - Report as offensive     Reply Quote

Message boards : ATLAS Application : ATLAS native 1.23


©2023 CERN