Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Minimizing privilege for building HPC containers   HPC centers face increasing demand for software flexibility, and there is
growing consensus that Linux containers are a promising solution. However,
existing container build solutions require root privileges and cannot be used
directly on HPC resources. This limitation is compounded as supercomputer
diversity expands and HPC architectures become more dissimilar from commodity
computing resources. Our analysis suggests this problem can best be solved with
low-privilege containers. We detail relevant Linux kernel features, propose a
new taxonomy of container privilege, and compare two open-source
implementations: mostly-unprivileged rootless Podman and fully-unprivileged
Charliecloud. We demonstrate that low-privilege container build on HPC
resources works now and will continue to improve, giving normal users a better
workflow to securely and correctly build containers. Minimizing privilege in
this way can improve HPC user and developer productivity as well as reduce
support workload for exascale applications.

29
The categories of this paper are: funct-an
3
The categories of this paper are: physics
17
The categories of this paper are: q-fin
26
The categories of this paper are: bayes-an
34
The categories of this paper are: chem-ph
19
The categories of this paper are: eess
14
The categories of this paper are: math-ph
5
The categories of this paper are: gr-qc
2
The categories of this paper are: math
18
The categories of this paper are: econ
7
The categories of this paper are: hep-th
37
The categories of this paper are: supr-con
36
The categories of this paper are: cmp-lg
6
The categories of this paper are: astro-ph
28
The categories of this paper are: alg-geom
31
The categories of this paper are: ao-sci