{"id":"https://openalex.org/W3153328549","doi":"https://doi.org/10.1145/3458817.3476187","title":"Minimizing privilege for building HPC containers","display_name":"Minimizing privilege for building HPC containers","publication_year":2021,"publication_date":"2021-10-21","ids":{"openalex":"https://openalex.org/W3153328549","doi":"https://doi.org/10.1145/3458817.3476187","mag":"3153328549"},"language":"en","primary_location":{"id":"doi:10.1145/3458817.3476187","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3458817.3476187","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3458817.3476187","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the International Conference for High Performance Computing, Networking, Storage and Analysis","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3458817.3476187","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Reid Priedhorsky","orcid":null},"institutions":[{"id":"https://openalex.org/I1343871089","display_name":"Los Alamos National Laboratory","ror":"https://ror.org/01e41cf67","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I1343871089","https://openalex.org/I198811213","https://openalex.org/I4210120050"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Reid Priedhorsky","raw_affiliation_strings":["Los Alamos National Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Los Alamos National Laboratory","institution_ids":["https://openalex.org/I1343871089"]}]},{"author_position":"middle","author":{"id":null,"display_name":"R. Shane Canon","orcid":null},"institutions":[{"id":"https://openalex.org/I148283060","display_name":"Lawrence Berkeley National Laboratory","ror":"https://ror.org/02jbv0t02","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I148283060","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"R. Shane Canon","raw_affiliation_strings":["Lawrence Berkeley National Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lawrence Berkeley National Laboratory","institution_ids":["https://openalex.org/I148283060"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Timothy Randles","orcid":null},"institutions":[{"id":"https://openalex.org/I1343871089","display_name":"Los Alamos National Laboratory","ror":"https://ror.org/01e41cf67","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I1343871089","https://openalex.org/I198811213","https://openalex.org/I4210120050"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Timothy Randles","raw_affiliation_strings":["Los Alamos National Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Los Alamos National Laboratory","institution_ids":["https://openalex.org/I1343871089"]}]},{"author_position":"last","author":{"id":null,"display_name":"Andrew J. Younge","orcid":null},"institutions":[{"id":"https://openalex.org/I4210104735","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andrew J. Younge","raw_affiliation_strings":["Sandia National Laboratories"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories","institution_ids":["https://openalex.org/I4210104735"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7125,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.9061078,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"14"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/supercomputer","display_name":"Supercomputer","score":0.7717000246047974},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.6276000142097473},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5997999906539917},{"id":"https://openalex.org/keywords/devops","display_name":"DevOps","score":0.48100000619888306},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.4690999984741211},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.4645000100135803},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.4546999931335449},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4165000021457672},{"id":"https://openalex.org/keywords/ibm","display_name":"IBM","score":0.3824000060558319}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7721999883651733},{"id":"https://openalex.org/C83283714","wikidata":"https://www.wikidata.org/wiki/Q121117","display_name":"Supercomputer","level":2,"score":0.7717000246047974},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6395999789237976},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.6276000142097473},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5997999906539917},{"id":"https://openalex.org/C9903902","wikidata":"https://www.wikidata.org/wiki/Q3025536","display_name":"DevOps","level":3,"score":0.48100000619888306},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.4690999984741211},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.4645000100135803},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.4546999931335449},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4165000021457672},{"id":"https://openalex.org/C70388272","wikidata":"https://www.wikidata.org/wiki/Q5968558","display_name":"IBM","level":2,"score":0.3824000060558319},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.37549999356269836},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3741999864578247},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.36079999804496765},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.3571999967098236},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3418999910354614},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3303000032901764},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.32659998536109924},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.296999990940094},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2847999930381775},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C147346212","wikidata":"https://www.wikidata.org/wiki/Q5492632","display_name":"Trusted computing base","level":4,"score":0.27790001034736633},{"id":"https://openalex.org/C2778837361","wikidata":"https://www.wikidata.org/wiki/Q2450880","display_name":"Exascale computing","level":3,"score":0.2734000086784363},{"id":"https://openalex.org/C195487862","wikidata":"https://www.wikidata.org/wiki/Q850210","display_name":"Revenue","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.27090001106262207},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2581000030040741},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.2540999948978424},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.251800000667572},{"id":"https://openalex.org/C146778888","wikidata":"https://www.wikidata.org/wiki/Q836862","display_name":"Installation","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3458817.3476187","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3458817.3476187","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3458817.3476187","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the International Conference for High Performance Computing, Networking, Storage and Analysis","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2104.07508","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2104.07508","pdf_url":"https://arxiv.org/pdf/2104.07508","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3458817.3476187","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3458817.3476187","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3458817.3476187","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the International Conference for High Performance Computing, Networking, Storage and Analysis","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1017065088","display_name":null,"funder_award_id":"#89233218CNA000001","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G11630931","display_name":null,"funder_award_id":"DENA0003525","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G1193633358","display_name":null,"funder_award_id":"17\u2010SC\u201020\u2010SC","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G1279347439","display_name":null,"funder_award_id":"89233218CNA 000001","funder_id":"https://openalex.org/F4320338304","funder_display_name":"Los Alamos National Laboratory"},{"id":"https://openalex.org/G1527848044","display_name":null,"funder_award_id":"89233218CNA000001","funder_id":"https://openalex.org/F4320332359","funder_display_name":"Office of Science"},{"id":"https://openalex.org/G1796307089","display_name":null,"funder_award_id":"17- SC-20-SC","funder_id":"https://openalex.org/F4320332369","funder_display_name":"National Nuclear Security Administration"},{"id":"https://openalex.org/G2214935549","display_name":null,"funder_award_id":"NA0003525","funder_id":"https://openalex.org/F4320338291","funder_display_name":"Sandia National Laboratories"},{"id":"https://openalex.org/G280414146","display_name":null,"funder_award_id":"DE-NA0003525","funder_id":"https://openalex.org/F4320332359","funder_display_name":"Office of Science"},{"id":"https://openalex.org/G3886122786","display_name":null,"funder_award_id":"17-SC20-SC","funder_id":"https://openalex.org/F4320332359","funder_display_name":"Office of Science"},{"id":"https://openalex.org/G413247060","display_name":null,"funder_award_id":"DE\u2010NA,0003525","funder_id":"https://openalex.org/F4320338291","funder_display_name":"Sandia National Laboratories"},{"id":"https://openalex.org/G4903105778","display_name":null,"funder_award_id":"NA0003525","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G5339743583","display_name":null,"funder_award_id":"NA0003525","funder_id":"https://openalex.org/F4320332369","funder_display_name":"National Nuclear Security Administration"},{"id":"https://openalex.org/G6410514744","display_name":null,"funder_award_id":"89233218C-NA000001","funder_id":"https://openalex.org/F4320332369","funder_display_name":"National Nuclear Security Administration"},{"id":"https://openalex.org/G680142904","display_name":null,"funder_award_id":"DE-NA0003525","funder_id":"https://openalex.org/F4320338304","funder_display_name":"Los Alamos National Laboratory"},{"id":"https://openalex.org/G8178004050","display_name":null,"funder_award_id":"contract DE-NA0003525","funder_id":"https://openalex.org/F4320332369","funder_display_name":"National Nuclear Security Administration"},{"id":"https://openalex.org/G855168022","display_name":null,"funder_award_id":"DENA-0003525","funder_id":"https://openalex.org/F4320332369","funder_display_name":"National Nuclear Security Administration"}],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320330678","display_name":"Australian Academy of Technology and Engineering","ror":null},{"id":"https://openalex.org/F4320332359","display_name":"Office of Science","ror":"https://ror.org/00mmn6b08"},{"id":"https://openalex.org/F4320332369","display_name":"National Nuclear Security Administration","ror":"https://ror.org/03sk1we31"},{"id":"https://openalex.org/F4320338291","display_name":"Sandia National Laboratories","ror":"https://ror.org/01apwpt12"},{"id":"https://openalex.org/F4320338304","display_name":"Los Alamos National Laboratory","ror":"https://ror.org/01e41cf67"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3153328549.pdf","grobid_xml":"https://content.openalex.org/works/W3153328549.grobid-xml"},"referenced_works_count":7,"referenced_works":["https://openalex.org/W2023953679","https://openalex.org/W2510370313","https://openalex.org/W2576019974","https://openalex.org/W2613409207","https://openalex.org/W2768885587","https://openalex.org/W3110562972","https://openalex.org/W4287189010"],"related_works":[],"abstract_inverted_index":{"HPC":[0,34,45,97,125],"centers":[1],"face":[2],"increasing":[3],"demand":[4],"for":[5,136],"software":[6],"flexibility,":[7],"and":[8,28,44,79,87,101,114,127],"there":[9],"is":[10,38],"growing":[11],"consensus":[12],"that":[13,92],"Linux":[14,69],"containers":[15],"are":[16],"a":[17,73,109],"promising":[18],"solution.":[19],"However,":[20],"existing":[21],"container":[22,77,94],"build":[23,95,116],"solutions":[24],"require":[25],"root":[26],"privileges":[27],"cannot":[29],"be":[30,61],"used":[31],"directly":[32],"on":[33,96],"resources.":[35,53],"This":[36],"limitation":[37],"compounded":[39],"as":[40,130,132],"supercomputer":[41],"diversity":[42],"expands":[43],"architectures":[46],"become":[47],"more":[48],"dissimilar":[49],"from":[50],"commodity":[51],"computing":[52],"Our":[54],"analysis":[55],"suggests":[56],"this":[57,121],"problem":[58],"can":[59,123],"best":[60],"solved":[62],"with":[63],"low-privilege":[64,93],"containers.":[65,117],"We":[66,90],"detail":[67],"relevant":[68],"kernel":[70],"features,":[71],"propose":[72],"new":[74],"taxonomy":[75],"of":[76],"privilege,":[78],"compare":[80],"two":[81],"open-source":[82],"implementations:":[83],"mostly-unprivileged":[84],"rootless":[85],"Podman":[86],"fully-unprivileged":[88],"Charliecloud.":[89],"demonstrate":[91],"resources":[98],"works":[99],"now":[100],"will":[102],"continue":[103],"to":[104,112],"improve,":[105],"giving":[106],"normal":[107],"users":[108],"better":[110],"workflow":[111],"securely":[113],"correctly":[115],"Minimizing":[118],"privilege":[119],"in":[120],"way":[122],"improve":[124],"user":[126],"developer":[128],"productivity":[129],"well":[131],"reduce":[133],"support":[134],"workload":[135],"exascale":[137],"applications.":[138]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2021-04-26T00:00:00"}