merge qa-build-gen-pepper-ma commit 9361e377 from 10405484

build-executor/utility.sh

@@ -483,14 +483,14 @@ function test_singularity_from_registry(){
     theimage=oras://${CIENV_SINGULARITYREGISTRY}/${HEPWL_DOCKERIMAGENAME}:${thetag}
     echo -e "\n[test_singularity_from_registry] Run WL in singularity to test the image ${theimage}"
     [ ! -e ${CIENV_JOBDIR}/results ] && mkdir -p ${CIENV_JOBDIR}/results && chmod a+rw ${CIENV_JOBDIR}/results
-    execute_command_retry singularity run -e -C $USEGPU -B ${CIENV_JOBDIR}/results:/results ${theimage} $HEPWL_BMKOPTS -d
+    execute_command_retry singularity run --no-privs -e -C $USEGPU -B ${CIENV_JOBDIR}/results:/results ${theimage} $HEPWL_BMKOPTS -d
     status=$?
     echo -e "\n[test_singularity_from_registry] Run WL in singularity (to test the image) via execute_command_retry - completed (status=$status)"
     if [ $status -ne 0 ]; then 
         rm -f ${theimage}.sif; 
         fail "[test_singularity_from_registry] Run WL in singularity"; 
     fi
-     execute_command_retry singularity run -e -C $USEGPU -B ${CIENV_JOBDIR}/results:/results ${theimage} $HEPWL_BMKOPTS -h > x86_image_folder_dump.txt
+     execute_command_retry singularity run --no-privs -e -C $USEGPU -B ${CIENV_JOBDIR}/results:/results ${theimage} $HEPWL_BMKOPTS -h > x86_image_folder_dump.txt
     echo "[test_singularity_from_registry] finished at $(date)"
     echo -e "\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"
     echo -e "\n[utility.sh] ${FUNCNAME[0]} finished at $(date)\n"