AppArmor profile for singularity

src/ci/bin/test_slurm.inc.sh

@@ -33,6 +33,19 @@ cromwell::build::slurm::setup_slurm_environment() {
     sudo mkdir -p /var/spool/slurmd
     sudo chown slurm:slurm /var/spool/slurmd
 
+    # Set up an AppArmor profile for singularity to allow non-root users to use it.
+    # This became required in Ubuntu 24.04
+    sudo tee /etc/apparmor.d/singularity << 'EOF'
+abi <abi/4.0>,
+include <tunables/global>
+
+profile singularity /usr/bin/singularity{,-suid} flags=(unconfined) {
+  userns,
+}
+EOF
+
+    sudo systemctl reload apparmor
+
     # A mash of configure-until-it-runs. Feel free to PR suggestions/fixes.
     # https://slurm.schedmd.com/tutorials.html
     # https://slurm.schedmd.com/configurator.html