Fix: running job's from user and with started SLURM from non-root user

README.md

@@ -32,14 +32,20 @@ Prerequisites: `screen` tool.
     and others know how to reach `slurmctld`.
 10. Restart lxc-net service (for Ubuntu/Mint):
   - `$ sudo service lxc-net restart`
-11. Start your cluster:
+11. [Optional] If you set 'SLURM_USER' is not root-user and will have need running jobs from other users:
+  - Add you user to group with user 'SLURM_USER' (/etc/group)
+  - Setup SLURM capabilities:
+    * `$ sudo ./slurm-set-capabilities.sh`
+  - Set patch from SLURM directory:
+    * `patch -p1 < start_from_user.patch`
+12. Start your cluster:
   - `$ sudo ./slxc-run-cluster.sh`
-12. Verify that everything is OK (both tools should show all your virtual "machines" running):
+13. Verify that everything is OK (both tools should show all your virtual "machines" running):
   - `$ sudo screen -ls`
   - `$ sudo lxc-ls --active`
-13. Now you can attach to any machine with
+14. Now you can attach to any machine with
   - `$ sudo lxc-attach -n $nodename`
-14. To shutdown your cluster use
+15. To shutdown your cluster use
   - `$ ./slxc-stop-cluster.sh`
   - NOTE: that it may take a while. You can speedup this process by setting
 `LXC_SHUTDOWN_TIMEOUT` in `/etc/default/lxc` (for Ubuntu and Mint)

patch/start_from_user.patch

@@ -0,0 +1,15 @@
+diff --git a/src/slurmd/slurmstepd/mgr.c b/src/slurmd/slurmstepd/mgr.c
+index c7eeb29..cd2a528 100644
+--- a/src/slurmd/slurmstepd/mgr.c
++++ b/src/slurmd/slurmstepd/mgr.c
+@@ -2411,8 +2411,8 @@ _drop_privileges(stepd_step_rec_t *job, bool do_setuid,
+ 	/*
+ 	 * No need to drop privileges if we're not running as root
+ 	 */
+-	if (getuid() != (uid_t) 0)
+-		return SLURM_SUCCESS;
++    //if (getuid() != (uid_t) 0)
++    //	return SLURM_SUCCESS;
+
+ 	if (setegid(job->gid) < 0) {
+ 		error("setegid: %m");

slurm-set-capabilities.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+. ./slxc.conf
+
+CAPLIST="cap_chown,cap_setgid,cap_setuid,cap_fowner+ep"
+
+setcap $CAPLIST $SLURM_PATH/sbin/slurmstepd