Docker is known to have less than optimal security defaults, hence the hype for Podman. If you want to run rootless containers in your Guix System, it is sufficient to add the following to your operating-system configuration.
Having promoted Guix as one of the tools to support reproducible
research workflows, we are happy that it is now officially presented as
one way to produce and review software artifacts that accompany articles
submitted to SuperComputing 2024
(SC24), the leading HPC conference. In this post we look at what this
entails and reflect on the role of reproducible software deployment on
conference artifact evaluation.
In the first part of this post, last month, I described my attempt at using my
Guix home server as a virtualisation environment. With a clever use of the Guile
programming language (haha, really, by copying other people's code from the
internet!) I was able to set up a small number of services, each one in its
dedicated virtual machine for security-through-compartmentalisation.