Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add pystampas image for experiment #494

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

csakka
Copy link

@csakka csakka commented Mar 19, 2025

This pull request integrates the PySTAMPAS image for experimental testing on OSG

@rynge
Copy link
Member

rynge commented Mar 19, 2025

@csakka It looks like that container is private. Syncing to OSG only works for public images (as they will be pushed to a public CVMFS repo).

@csakka
Copy link
Author

csakka commented Mar 19, 2025

I updated the CI to fix the authentication issue with containers.ligo.org by adding the necessary docker login command, ensuring the image is accessible and public.

@rynge
Copy link
Member

rynge commented Mar 19, 2025

Still failing for me:

$ docker pull containers.ligo.org/pystamp/pystampas:pystampas_osg_CI
Error response from daemon: Head "https://containers.ligo.org/v2/pystamp/pystampas/manifests/pystampas_osg_CI": denied: access forbidden

@csakka
Copy link
Author

csakka commented Mar 20, 2025

I just did a test and pulled the pystampas image in a pipeline. For it to work, I had to add USERNAME and TOKEN to my CI/CD variables and ensure Docker logs in beforehand with this script:

`before_script:

  • echo "$TOKEN" | docker login containers.ligo.org -u "$USERNAME" --password-stdin`

So, this image is indeed private, as the project's visibility is set to "internal." This automatically makes any image created from the repository private.
Does the Run ./.github/actions/docker-images-verification stage in the repository not have the access credentials for LIGO?

@rynge
Copy link
Member

rynge commented Mar 20, 2025

No, this is a general OSG/PATh tool, so no LIGO credentials. The reason we do not allow private repositories here is that the image will be synchronized to the public CVMFS file system. We don't want open a private image to go to a more open environment.

If you want to keep that image private, one solution is to convert it to sif (apptainer build ...) and then ship that sif with your jobs (authenticated OSDF, transfer_input_files, ...).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants