Skip to content
This repository has been archived by the owner on Oct 9, 2020. It is now read-only.

unsure what pre-req's are needed for this to work #24

Open
SvenDowideit opened this issue Jan 7, 2020 · 5 comments
Open

unsure what pre-req's are needed for this to work #24

SvenDowideit opened this issue Jan 7, 2020 · 5 comments

Comments

@SvenDowideit
Copy link

So, I think this needs user namespaces enabled to work - which in my situation is thus not "fully rootless" - the user needs to convince the admins that this is reasonable (and thus takes time)

Assuming I'm correct, would it be reasonable to mention this in the README?

I'm also wondering if the fork of PRoot is necessary anymore, or if the changes could be merged upstream? @oxr463 ?

@AkihiroSuda
Copy link
Member

the user needs to convince the admins that this is reasonable (and thus takes time)

Most distros except Arch and Debian enable user namespace by default, so no need to convince the admins

if the changes could be merged upstream?

Yes, and thanks for opening proot-me/proot#204 👍

But at least we should get rootless-containers/PRoot#2 fixed, that's why I didn't open PR for upstreaming.
The issue isn't so hard to be fixed, but I couldn't find time to work on the issue 😅

@SvenDowideit
Copy link
Author

One of my target users are HPC systems and non-technical users, so I'm looking to hedge my bets a bit.

small steps :)

@AkihiroSuda
Copy link
Member

Is Ptrace overhead acceptable for HPC users?

@SvenDowideit
Copy link
Author

I'm not 100% convinced they know what is and isn't - most HPC tool builders seem to me to obfuscate what they're doing :/
My goal is to give choices that range from it works, and we'll learn more, all the way to fully modern usage

the pain points are that users won't talk to the admins until its too late (ie, if it fails, they don't ask for help, they try somewhere else), and the admin's first focus is "nope, you can't use that as it runs as root"

So TBH, i dunno - and IDK if its needed most of the time - but I hope to make a single binary that works most of the time - degrading from full on k8s/swarm down to oh god, i don't have root, and namespaces are off, and i need to run this now to get the report out the door

@oxr463
Copy link

oxr463 commented Jan 7, 2020

I would love to see this upstream! I will wait until that issue @AkihiroSuda mentioned is resolved before I merge that PR.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants