PROBLEM: volume right access
The user can provide path to parameters and products inside the container. They are usually:
/home/username/parameters
and /home/username/products
However their UID and or GID may be different than the local user. In the situation of getting a package from someone else and mounting some local volumes, either copied from somewhere else or self generated to fork the package.
To solve this issue, one could imagine to ask users to create a kufair
group with GID 1025 (some non-reserved number) and
make sure their host-user
is in this group and the docker-user
as well.
An alternative could be to allow to run the docker with --user option and make sure that the hashes do not change for various users and provide a way to refer to $HOME while creating the package.