I tried to use
singularity (which is similar to
docker) to run a container. It can launch a container with a .simg file (image file). However, this requires the privilege to operate /dev/loop*. so that ordinary user cannot use it in this way (can only launch a container with a sandbox, i.e., a directory, rather than an image file).
Adding the user to the
disk group which owns /dev/loop* does not help.
And according to my experience, I know some HPC clusters enables ordinary users to launch container from a container from such image files (both system builtin and user created). So I wonder whether there is a way to config the system to enable ordinary to use image files?
I raised an issue.