jeffersonlab/cernlib repository overview

# bash
docker run --rm -it \
  --user "$(id -u):$(id -g)" \
  -e DISPLAY=host.docker.internal:0 \
  -e LIBGL_ALWAYS_INDIRECT=1 \
  -v "$PWD:/work" \
  -w /work \
  jeffersonlab/cernlib:2026

  # tcsh
  docker run --rm -it \
  --user "`id -u`:`id -g`" \
  -e DISPLAY=host.docker.internal:0 \
  -e LIBGL_ALWAYS_INDIRECT=1 \
  -v "`pwd`:/work" \
  -w /work \
  jeffersonlab/cernlib:2026

> mkdir cernlib_home
> export DSH_DEFAULT_ARGS="-gdb -v $PWD/cernlib_home:$HOME" 
> docker run --rm -it jeffersonlab/cernlib:2023 cat /container/image/dsh | tr -d "\r" > dsh
> chmod +x dsh
> xhost + `hostname`
> ./dsh jeffersonlab/cernlib:2023
docker:~$ paw++

export DSH_DEFAULT_ARGS="-cp -gdb -v $PWD/cernlib_home:$HOME" 

> docker run --rm -it jeffersonlab/cernlib:2023 cat /container/image/dsh | tr -d "\r" > dsh
> chmod +x dsh

> xhost + `hostname`
> ./dsh jeffersonlab/cernlib:2023
docker:~$ paw++

 This script is used to optionally launch and then attach to
a docker container. It is meant to make it easy to use the
container like a virtual machine by just typing 'dsh' to 
jump into the container and launch a new shell. The other key
feature is it will create a user and group with the same name
and id as the local system so it is easier to work in a shared
directory with the host.
 
If a container does not already exist, a new one is created
and the following actions performed on it by default:
 
1.\) A new user is added that has the same username, uid, and
    gid as the user running dsh on the host
 
2.\) The user\'s home directory on the host is mapped to the
    container with a link called 'home_host' in the home
    directory inside the container.
 
3.\) The host /tmp directory is mapped to /tmp_host in the
    container.
 
4.\) The command used to run the container is 'sleep infinity'
    which means the container will not exit when you exit
    from dsh. (use dsh -s to stop a container created by dsh)
 
 
Multiple instances of dsh can be run at the same time, each
representing a different shell process in the same container.
You can stop and remove a continer with dsh -s (or using the
docker stop and rm commands directly).
 
The following environment variables can be used to override the
default values in dsh:
 
DSH_SHELL          sets command to be run (e.g. tcsh) This is superceded 
                   by the -c command line option if given
 
DSH_NAME           sets name of container on startup. Useful for 
                   communicating with other containers, but not much else
 
DSH_DEFAULT_IMAGE  set the docker image used. This is superceded
                   by the the command line argument if given
 
DSH_DEFAULT_ARGS   set default arguments to the docker run command.
                   This is useful if you wish to set docker options in
                   say, a login script so they don't need to be added
                   to the dsh command line explicitly. For example,
                   setting this to something like the following will
                   cause a directory on the host to be mounted as the
                   home directory for user davidl providing some 
                   persistence of config. files across containers.
 
                 '-v /Users/davidl/builds/Linux-Docker/home/davidl:/home/davidl'
 
Usage:
       dsh [options] [imagename]
 
options:
     -h,--help     Print this usage/help statement
 
     -u  user      Set the user to 'user' instead of the one
                   running this script.
 
     -c  command   Set the command to be run inside the container
                   The default is to use the DSH_SHELL environment
                   variable and if that is not available then 'bash'
 
     -v volume     Specify a volume to be mapped to the container.
                   The format is just the host_dir:container_dir
                   format docker uses. This may be specified more
                   than once and all directories will be mapped.
                   This only affects when the container is first
                   started.
 
     -cv           Clear volumes. This will clear out the list of
                   volumes to be mapped, including any specified 
                   using the -v option above. The only real use of
                   this is to prevent the user\'s home directory on
                   the host from being mapped since it is added to
                   the list by default. 
 
     -p            Expose port to outside of container. This should
                   be in standard container_port:host_port format
                   used by the docker run command. By default, ports
                   6080 and 5900 are exposed
 
     -cp           Clear ports. This will clear out the list of
                   ports to be mapped. This is really only useful
                   for removing the default ports so that they are
                   not mapped.
 
     -gdb          Add '--security-opt seccomp=unconfined' to the run
                   command to allow gdb to work. This can only be done
                   when the container is first created
 
     -s            Stop and remove the container
 
     -U+           Force addition of ubuntu style adduser args when
                   creating the container (see note below)
 
     -U-           Do NOT add ubuntu style adduser args when creating
                   the container (see note below)
 
Users
------------
The use of the -u option should be consistent throughout the
life of the container. More specifically, dsh will only create
a user when the container is first created. Subsequent invocations
of dsh will see the existing container and connect to it without
trying to create a new user. Users defined in the image itself
(e.g. root) are always available.
 
Ubuntu style adduser arguments:
------------
When running adduser on an
ubuntu-like system, it will normally prompt the user for
additional information such as password, full name, ...
If this happens, this script will fail at that point. Additional
arguments can be passed to avoid this, but they will cause the
adduser call to fail on other centos-like systems. By default,
this script will try and guess if this is ubuntu-like just from
the image name. The -U+ and -U- command line options will disable
this guessing and force the options to be or not be included.

  XIO:  fatal IO error 11 (Resource temporarily unavailable) on X server "host.docker.internal:0.0"
  after 2143 requests (2136 known processed) with 0 events remaining.

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
LOCB/LOCF: address 0x7f8dc3461e80 exceeds the 32 bit address space
or is not in the data segments
This may result in program crash or incorrect results
Therefore we will stop here
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!