Create rootless docker image as part of release

[behoppe]

Hi team -- I hope this is the right place for this issue. A professor who uses OpenCilk has asked if we can please create a rootless docker image as part of our release. Please let me know if there's anything else I can do to help. Thank you.

Hello Bruce,
thanks for your email. I've been using Cilk for many many years and I know it since (almost) the beginning (1999) when I was in the US as a postdoc.

We currently use Cilk in the lab via docker. This is very good. The practical problems are related to the technical support from our staff:

• the docker image is pretty large
• the "standard" docker installation is manageable by our staff but it exposes root access on the host so it has been forbidden
• the rootless docker installation is ok but it required a time-consuming procedure

--> it would be nice if someone of your staff could provide a simple note to install docker in rootless mode.

Best regards,
Roberto.

[behoppe]

Thanks @robgiorgi for the following update:

We mainly need a smaller image and a rootless installation procedure: the latter is especially important to support a more significant number of students in our lab without security concerns.

I managed to prepare these scripts, which may solve the installation problem in the case of standard authentication procedures (based on passwd):
https://github.com/robgiorgi/docker-rootless

However, I think this is still not working if the students use LDAP authenticate (which is the standard of our labs and, I guess, worldwide).