There is a newer version of the record available.

Published October 28, 2021 | Version v3.9.0-rc.2
Software Open

sylabs/singularity: SingularityCE 3.9.0 Release Candidate 2

Authors/Creators

  • 1. Singularity Labs
  • 2. @sylabs
  • 3. Facebook
  • 4. NIH HPC
  • 5. Red Hat
  • 6. Sylabs Inc
  • 7. @Linaro
  • 8. Morgridge Institute for Research
  • 9. @grafana
  • 10. Chappell Consulting & Tutoring
  • 11. @RedHatOfficial
  • 12. Lenovo
  • 13. MIT
  • 14. Unité de Bioinformatique Structurale, Institut Pasteur
  • 15. Self
  • 16. Dartmouth College, @Debian, @DataLad, @PyMVPA, @fail2ban

Description

This is the second release candidate for the upcoming SingularityCE 3.9.0. We'd be grateful all testing, bug reports, and comments, as we look forward to a stable 3.9.0 release. Please carefully review the release notes below, and refer to the 'master branch (unreleased)' documentation at https://sylabs.io/docs/

Security related fixes

  • Due to trusting a path to an executable that was incorrectly generated in code that could be manipulated by an unprivileged user, privilege escalation was possible when using the new --nvccli GPU configuration option. This vulnerability affected the 3.9.0-rc.1 release candidate only. Stable releases of SingularityCE are not impacted.

    All users who have installed 3.9.0-rc.1 should update to 3.9.0-rc.2

    Thanks to @cclerget for reporting this issue.

Changed defaults / behaviours
  • The location of the cryptsetup, ldconfig and nvidia-container-cli binaries are always taken from singularity.conf. No $PATH search is performed.
Bug fixes
  • Ensure a build with --nvccli runs using nvidia-container-cli and not the legacy gpu support.
  • Advise on limitations and provide workaround for inability to run %test in --fakeroot --nvccli builds.

Additionally, this RC includes fixes introduce in SingularityCE 3.8.4

Thanks / Reporting Bugs

Thanks to our contributors for code, feedback and, testing efforts!

As always, please report any bugs to: https://github.com/sylabs/singularity/issues/new

If you think that you've discovered a security vulnerability please report it to: security@sylabs.io

Have fun!

Downloads

Please use the singularity-ce-3.9.0-rc.2.tar.gz download below to obtain and install SingularityCE 3.9.0-rc.2. The GitHub auto-generated 'Source Code' downloads do not include required dependencies etc.

Files

sylabs/singularity-v3.9.0-rc.2.zip

Files (2.3 MB)

Name Size Download all
md5:e71be733ac855e11a546f5fcc131b17f
2.3 MB Preview Download

Additional details

Related works

Is supplement to
https://github.com/sylabs/singularity/tree/v3.9.0-rc.2 (URL)