On 6/18/19 1:38 PM, Todd Tannenbaum wrote:
If you really wanted, I you could explicitly work around this by giving sudo access to whatever user accounts (uids) are being used to run jobs on your machines. Then your job could use sudo to perform actions with root access. With sudo, you could limit what actions jobs could perform as root and also have audit logs available.
Frequently, GPU devices are configured by sites to be writable by members of some certain Unix group, and either the slot user or the run-as-owner user are added to that group.
-greg