Bumped version to 1.6.3

CHANGELOG.md

@@ -4,7 +4,7 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [Unreleased]
+## [1.6.3]
 
 ### Changed
 
@@ -18,6 +18,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Updated CI distributed tests to use Docker Compose V2 and Compose file format version 3
 - Updated automatic documentation build to use Sphinx 7.2.6 and Sphinx RTD Theme 2.0.0
 
+
 ## [1.6.2]
 
 ### Added
@@ -26,6 +27,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - SSH Hook: added support for the `OVERLAY_MOUNT_HOME_SSH` environment variable, which allows to control the creation of an overlay filesystem on top of the container's `${HOME}/.ssh` directory.
   More details [here](https://sarus.readthedocs.io/en/stable/config/ssh-hook.html#hook-configuration)
 
+
 ## [1.6.1]
 
 ### Added

doc/config/configuration_reference.rst

@@ -447,8 +447,8 @@ Example configuration file
         "securityChecks": true,
         "OCIBundleDir": "/var/sarus/OCIBundleDir",
         "rootfsFolder": "rootfs",
-        "prefixDir": "/opt/sarus/1.6.2",
-        "hooksDir": "/opt/sarus/1.6.2/etc/hooks.d",
+        "prefixDir": "/opt/sarus/1.6.3",
+        "hooksDir": "/opt/sarus/1.6.3/etc/hooks.d",
         "tempDir": "/tmp",
         "localRepositoryBaseDir": "/home",
         "centralizedRepositoryDir": "/var/sarus/centralized_repository",
@@ -497,15 +497,15 @@ Example configuration file
                 "/opt"
             ]
         },
-        "seccompProfile": "/opt/sarus/1.6.2/etc/seccomp/default.json",
+        "seccompProfile": "/opt/sarus/1.6.3/etc/seccomp/default.json",
         "apparmorProfile": "sarus-default",
         "selinuxLabel": "system_u:system_r:svirt_sarus_t:s0:c124,c675",
         "selinuxMountLabel": "system_u:object_r:svirt_sarus_file_t:s0:c715,c811"
         "containersPolicy": {
-            "path": "/opt/sarus/1.6.2/etc/policy.json",
+            "path": "/opt/sarus/1.6.3/etc/policy.json",
             "enforce": false
         },
-        "containersRegistries.dPath": "/opt/sarus/1.6.2/etc/registries.d"
+        "containersRegistries.dPath": "/opt/sarus/1.6.3/etc/registries.d"
         "defaultMPIType": "mpich",
         "repositoryMetadataLockTimings": {
             "timeoutMs": 120000,

doc/install/requirements.rst

@@ -148,10 +148,11 @@ Here we will provide some indications to install `runc
 <https://github.com/opencontainers/runc>`_, the reference implementation from
 the Open Container Initiative. The recommended version is **v1.1.12**.
 
-.. note::
-    runc versions from 1.1.0 to 1.1.2 have a bug which causes an error when
-    Sarus attempts to propagate the PMI2 interface into containers.
-    The bug has been fixed in runc 1.1.3.
+.. important::
+    Due to the changes and hardening measures it introduces,
+    runc 1.1.12 is not compatible with Sarus (and its hooks) versions 1.6.2 and earlier.
+
+    Sarus 1.6.3 and later should be used alongside runc 1.1.12.
 
 The simplest solution is to download a pre-built binary release from the
 project's GitHub page:

spack/packages/sarus/package.py

@@ -30,12 +30,13 @@ class Sarus(CMakePackage):
     """Sarus is an OCI-compliant container engine for HPC systems."""
 
     homepage = "https://github.com/eth-cscs/sarus"
-    url      = "https://github.com/eth-cscs/sarus/archive/1.6.2.tar.gz"
+    url      = "https://github.com/eth-cscs/sarus/archive/1.6.3.tar.gz"
     git      = "https://github.com/eth-cscs/sarus.git"
 
     version('develop', branch='develop', submodules=True)
     version('master',  branch='master', submodules=True)
-    version("1.6.2", tag="1.6.2", submodules=True)
+    version("1.6.3", tag="1.6.3", submodules=True)
+    version("1.6.2", commit="4af913f4d65679f78e5bb7f2c006d8cff8d24b1d")
     version("1.6.1", commit="089b3284473f82a08d3541d133f7cd65df92a6e4")
     version("1.6.0", commit="9c01d76736940feb360175c515e5778e408e631e")
     version("1.5.2", commit="75e223bfe555c15f41d6394b41750c74d56e1d98")