{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:3I2ZF6SLEHAPFQW2Q5J7CDQDED","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a7e19281fc3cd9fcf8a9bea490b242a3f2c7426b8139cb57bc0e242278748dc3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2021-04-15T15:05:50Z","title_canon_sha256":"009b3e39902daae9176f25bb956728b07b061bac2491ee70a124eb55244a7713"},"schema_version":"1.0","source":{"id":"2104.07508","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.07508","created_at":"2026-07-05T03:52:56Z"},{"alias_kind":"arxiv_version","alias_value":"2104.07508v3","created_at":"2026-07-05T03:52:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.07508","created_at":"2026-07-05T03:52:56Z"},{"alias_kind":"pith_short_12","alias_value":"3I2ZF6SLEHAP","created_at":"2026-07-05T03:52:56Z"},{"alias_kind":"pith_short_16","alias_value":"3I2ZF6SLEHAPFQW2","created_at":"2026-07-05T03:52:56Z"},{"alias_kind":"pith_short_8","alias_value":"3I2ZF6SL","created_at":"2026-07-05T03:52:56Z"}],"graph_snapshots":[{"event_id":"sha256:ed78aee84a886c2543ed87e5da635e23dba5f91cf9fc311c8afbfe05db7ed7c7","target":"graph","created_at":"2026-07-05T03:52:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.07508/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"HPC centers face increasing demand for software flexibility, and there is growing consensus that Linux containers are a promising solution. However, existing container build solutions require root privileges and cannot be used directly on HPC resources. This limitation is compounded as supercomputer diversity expands and HPC architectures become more dissimilar from commodity computing resources. Our analysis suggests this problem can best be solved with low-privilege containers. We detail relevant Linux kernel features, propose a new taxonomy of container privilege, and compare two open-sourc","authors_text":"(2) National Energy Research Scientific Computing Center, 3), (3) Lawrence Berkeley National Laboratory, (4) Center for Computing Research, Andrew J. Younge (4) ((1) High Performance Computing Division, Los Alamos National Laboratory, Reid Priedhorsky (1), R. Shane Canon (2, Sandia National Laboratories), Timothy Randles (1)","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2021-04-15T15:05:50Z","title":"Minimizing privilege for building HPC containers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.07508","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6ab756248d87772425705273902ab1891ba146c553da949a62cb8ba961611d65","target":"record","created_at":"2026-07-05T03:52:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a7e19281fc3cd9fcf8a9bea490b242a3f2c7426b8139cb57bc0e242278748dc3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2021-04-15T15:05:50Z","title_canon_sha256":"009b3e39902daae9176f25bb956728b07b061bac2491ee70a124eb55244a7713"},"schema_version":"1.0","source":{"id":"2104.07508","kind":"arxiv","version":3}},"canonical_sha256":"da3592fa4b21c0f2c2da8753f10e0320c0c8bea087adfcaf7333c8be1d77ed2d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"da3592fa4b21c0f2c2da8753f10e0320c0c8bea087adfcaf7333c8be1d77ed2d","first_computed_at":"2026-07-05T03:52:56.968206Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:52:56.968206Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"w2LcJ7vdCtN4xUW90TpFadbq4NHAyU2lCmhJCltizNjvO+UbccLtGlLJ0NJQpEu/vZXN7I16VjXuQtzpCLhQAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:52:56.968605Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.07508","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6ab756248d87772425705273902ab1891ba146c553da949a62cb8ba961611d65","sha256:ed78aee84a886c2543ed87e5da635e23dba5f91cf9fc311c8afbfe05db7ed7c7"],"state_sha256":"013a38ddc791e35b67dddbda037e0083dff8e7cc471d9614c2b146be3236b152"}