hlrs-software-stack/spack
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

singularity: new variants to enable non-suid and non-network builds (#16088)

Browse source 
Defaults are left as they are currently
This commit is contained in:
Andrew W Elble 2020-04-17 11:38:22 -04:00 committed by GitHub
parent 854a82bbec
commit 985af94c45
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 32 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
var/spack/repos/builtin/packages/singularity/package.py
View file

@ -35,6 +35,8 @@ class Singularity(MakefilePackage):
version('3.2.1', sha256='d4388fb5f7e0083f0c344354c9ad3b5b823e2f3f27980e56efa7785140c9b616') version('3.2.1', sha256='d4388fb5f7e0083f0c344354c9ad3b5b823e2f3f27980e56efa7785140c9b616')
version('3.1.1', sha256='7f0df46458d8894ba0c2071b0848895304ae6b1137d3d4630f1600ed8eddf1a4') version('3.1.1', sha256='7f0df46458d8894ba0c2071b0848895304ae6b1137d3d4630f1600ed8eddf1a4')
variant('suid', default=True, description='install SUID binary')
variant('network', default=True, description='install network plugins')
depends_on('go') depends_on('go')
depends_on('libuuid') depends_on('libuuid')
depends_on('libgpg-error') depends_on('libgpg-error')
@ -82,7 +84,12 @@ def build_directory(self):
# Hijack the edit stage to run mconfig. # Hijack the edit stage to run mconfig.
def edit(self, spec, prefix): def edit(self, spec, prefix):
with working_dir(self.build_directory): with working_dir(self.build_directory):
configure = Executable('./mconfig --prefix=%s' % prefix) confstring = './mconfig --prefix=%s' % prefix
if '~suid' in spec:
confstring += ' --without-suid'
if '~network' in spec:
confstring += ' --without-network'
configure = Executable(confstring)
configure() configure()
# Set these for use by MakefilePackage's default build/install methods. # Set these for use by MakefilePackage's default build/install methods.
@ -127,6 +134,7 @@ def _build_script(self, filename, variable_data):
@run_after('install') @run_after('install')
def build_perms_script(self): def build_perms_script(self):
if self.spec.satisfies('+suid'):
script = self.perm_script_path() script = self.perm_script_path()
chown_files = ['libexec/singularity/bin/starter-suid', chown_files = ['libexec/singularity/bin/starter-suid',
'etc/singularity/singularity.conf', 'etc/singularity/singularity.conf',
@ -143,6 +151,7 @@ def build_perms_script(self):
# the build log. See https://github.com/spack/spack/pull/10412. # the build log. See https://github.com/spack/spack/pull/10412.
@run_after('install') @run_after('install')
def caveats(self): def caveats(self):
if self.spec.satisfies('+suid'):
tty.warn(""" tty.warn("""
For full functionality, you'll need to chown and chmod some files For full functionality, you'll need to chown and chmod some files
after installing the package. This has security implications. after installing the package. This has security implications.