BEGIN:VCALENDAR
VERSION:2.0
PRODID:Linklings LLC
BEGIN:VTIMEZONE
TZID:America/Chicago
X-LIC-LOCATION:America/Chicago
BEGIN:DAYLIGHT
TZOFFSETFROM:-0600
TZOFFSETTO:-0500
TZNAME:CDT
DTSTART:19700308T020000
RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=2SU
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0500
TZOFFSETTO:-0600
TZNAME:CST
DTSTART:19701101T020000
RRULE:FREQ=YEARLY;BYMONTH=11;BYDAY=1SU
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTAMP:20230124T171523Z
LOCATION:C140-142
DTSTART;TZID=America/Chicago:20221114T160000
DTEND;TZID=America/Chicago:20221114T160700
UID:submissions.supercomputing.org_SC22_sess438_misc237@linklings.com
SUMMARY:Lightning talk: Apptainer without Setuid
DESCRIPTION:Workshop\n\nLightning talk: Apptainer without Setuid\n\nDykstr
 a\n\nApptainer (formerly known as Singularity) since its beginning impleme
 nted many of its container features with the assistance of a setuid-root p
 rogram. It still supports that mode, but as of version 1.1.0 it no longer 
 uses setuid by default. This is feasible because it now can mount squash f
 ilesystems, mount ext2/3/4 filesystems, and use overlayfs using unprivileg
 ed user namespaces and FUSE. It also now enables unprivileged users to bui
 ld containers, even without requiring system administrators to configure /
 etc/subuid and /etc/subgid unlike other “rootless” container systems. As a
  result, all the unprivileged functions can be used nested inside of anoth
 er container, even if the container runtime prevents any elevated privileg
 es.\n\nSession Format: Recorded\n\nRegistration Category: Workshop Reg Pas
 s
END:VEVENT
END:VCALENDAR