How to run sensorsim / NuRec container as non-root

[jenspetersen]

I'm wondering if you have any experience running the sensorsim service as non-root (e.g. by setting user: $UID:$GID in the docker-compose.yaml). If I try that, I get this ModuleNotFoundError reported here. I tried building from the image and chmodding a bunch of folders, but so far no luck.
My goal is to read data from a NFS with root squashing. Any ideas?

Thanks!

[mwatson-nvidia]

Internally, we use enroot to run the containers in unprivileged environments: https://github.com/NVIDIA/enroot . I don't think anyone has done this, but maybe an outline of what you might try would be:

1. create a sqsh file for the sensorsim image
2. bring up that service from enroot
3. use the alpasim wizard to create the configurations and kick off everything but the sensorsim service using "docker compose". https://github.com/NVlabs/alpasim/blob/main/docs/TUTORIAL.md#breakpoint-debugging-example-with-the-controller is something you might use for inspiration

Hope this helps!