Skip to content

feat: Mount DC in HPC sessions - #1174

Open
sambuc wants to merge 1 commit into
sambuc/feat/upload-dcs-secretsfrom
sambuc/feat/mount-dc-in-hpc-sessions
Open

feat: Mount DC in HPC sessions#1174
sambuc wants to merge 1 commit into
sambuc/feat/upload-dcs-secretsfrom
sambuc/feat/mount-dc-in-hpc-sessions

Conversation

@sambuc

@sambuc sambuc commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

@sambuc
sambuc marked this pull request as ready for review July 16, 2026 15:03
@sambuc
sambuc requested review from a team and olevski as code owners July 16, 2026 15:03
Comment on lines +51 to +56
# Do not leave secrets on a shared fs, move it to the node where the session runs.
mkdir -p "${SECRETS_DIR}"
chmod 700 "${SECRETS_DIR}"
mv "${SESSION_DIR}/secrets"/* "${SECRETS_DIR}"
rmdir "${SESSION_DIR}/secrets"

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we do this? Official CSCS docs have example where user credentials are stored in the HOME folder. I really do not see what we gain by doing this.

Example: https://docs.cscs.ch/software/container-engine/run/#third-party-and-private-registries

Having the credentials in the HOME folder allows user to re-access the data connectors even outside of a remote Renku session (e.g. connecting directly to Alps with SSH).

Comment on lines +245 to +247
# We do our best to make sure we do not leave around bad rclone
# state, but sometimes there is still something lingering on...
# so we have to add --allow-non-empty.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why not do rm -rf <mount_point>; mkdir -p <mount_point>?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants