...

• You can build the image rootless when these requirements are met:

  • A kernel with support for User Namespaces (CONFIG_USER_NS) must be present

  • A sysctl setting must be present kernel.unprivileged_userns_clone = 1

  • Create /etc/subuid and /etc/subgid with the following content (replace LOGIN with a login of user able to build containers)

    LOGIN:100000:65536
    

Building procedure

Repository

• The building procedure is available in a version-controlled repository:

  git clone ssh://git@git.iter.org/imex/imas-container.git
  

Configuration

• All parameters are placed in config file
• By default, almost all of parameters' values are blank, which means that the image builder will determine latest released tag (for each component separately) and use it automatically
• If you want to enforce specific tag or branch, please edit the config file accordingly

...