Container late-binding in unprivileged dHTC pilot systems on Kubernetes resources

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Sfiligoi, Igor, Zhu, Yunjin, Frey, Jaime
Format: Preprint
Publié: 2025
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866908463171371008
author Sfiligoi, Igor
Zhu, Yunjin
Frey, Jaime
author_facet Sfiligoi, Igor
Zhu, Yunjin
Frey, Jaime
contents The scientific and research community has benefited greatly from containerized distributed High Throughput Computing (dHTC), both by enabling elastic scaling of user compute workloads to thousands of compute nodes, and by allowing for distributed ownership of compute resources. To effectively and efficiently deal with the dynamic nature of the setup, the most successful implementations use an overlay batch scheduling infrastructure fed by a pilot provisioning system. One fundamental property of these setups is the use of late binding of containerized user workloads. From a resource provider point of view, a compute resource is thus claimed before the user container image is selected. This paper provides a mechanism to implement this late-binding of container images on Kubernetes-managed resources, without requiring any elevated privileges.
format Preprint
id arxiv_https___arxiv_org_abs_2503_13746
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Container late-binding in unprivileged dHTC pilot systems on Kubernetes resources
Sfiligoi, Igor
Zhu, Yunjin
Frey, Jaime
Distributed, Parallel, and Cluster Computing
The scientific and research community has benefited greatly from containerized distributed High Throughput Computing (dHTC), both by enabling elastic scaling of user compute workloads to thousands of compute nodes, and by allowing for distributed ownership of compute resources. To effectively and efficiently deal with the dynamic nature of the setup, the most successful implementations use an overlay batch scheduling infrastructure fed by a pilot provisioning system. One fundamental property of these setups is the use of late binding of containerized user workloads. From a resource provider point of view, a compute resource is thus claimed before the user container image is selected. This paper provides a mechanism to implement this late-binding of container images on Kubernetes-managed resources, without requiring any elevated privileges.
title Container late-binding in unprivileged dHTC pilot systems on Kubernetes resources
topic Distributed, Parallel, and Cluster Computing
url https://arxiv.org/abs/2503.13746