Skip to content

Extending SD Desktop software environment with your own Singularity containers

In this tutorial we use cPouta to create a singularity containers to import new software to SD Desktop.

Steps 1 ja 2 describe how to setup you own Virtual Machine with singularity environment to cPouta. This is not the only option and if you have already a singularity installed elsewhere, you can skip these steps and use your own singularity environment.

Step 3 describes one approach to how you can build your own software containers.

Step 4 shows how a container is uploaded to Allas.

Step 5 describes how the software installed in a container can be usen in SD Desktop.

1. Creating your own singularity workbench to cPouta.

In order to utilize all features of singularity you must run it in an environment where you have administrator level access rights. At CSC, you can have administrator level access in virtual machines running in cPouta. Using cPouta for the building process adds a bit of extra steps into the process: you have to know how to launch and access virtual machines in cPouta. On the other hand cPouta has a fast connection to the Allas service that is used to import the ready made containers to SD Desktop.

As a first step launch virtual machine in cPouta as described in'cPouta user guide * Launching a virtual machine with the cPouta web interface

and for example these tutorial videos:

In this tutorial we use a virtual machine that was launched using: * Flavor: Standard.medium * Instance Boot Source: Image * Image Name: Ubuntu-20.04 (2.2 GB)

2. Installing singularity and Allas tools to Ubuntu 20.04 server

Here we start from a situation where we have logged in to our freshly started virtual machine for the first time. As preparatory steps we need to install to our virtual machine Singularity to create new software containers and allas tools to upload the containers we will create to Allas.

The singularity installation is done with commands:

sudo apt-get update
sudo apt-get install -y build-essential libssl-dev uuid-dev libgpgme11-dev\
squashfs-tools libseccomp-dev wget pkg-config git cryptsetup golang-go nano
tar -xzf singularity-ce-3.8.3.tar.gz
cd singularity-ce-3.8.3/
cd /home/ubuntu/singularity-ce-3.8.3/builddir
sudo make install

After which Allas tools can be installed with:

sudo apt install python3-pip python3-dev
sudo apt-get install python3-setuptools
sudo pip3 install python-openstackclient
sudo apt install python3-swiftclient
curl | sudo bash
git clone
Note that this installation process needs to be done only once for a virtual machine.

3. Creating a singularity container

There are many ways to create new Singularity containers. You can crate the a container by creating a sandbox in to which you log in and add content by typing installation commands. Alternatively you can automatize the installation process so that you collect all the commands and settings to a singularity definition file that instructs the installation process. A detailed view to the container building processes is provided by the Singularity manual

Here we use a mixture of these two approaches. We first use a simple definition file to create a new container sandbox that contains a set of tools for software installation. Then we open a shell session to the container sandbox and do the actual software installations manually.

3.1 Defaults file

First open a new file called ubuntu_with_inst_tools.def with command:

nano ubuntu_with_inst_tools.def

And copy-paste to the new file the content from the sample definition file below:

Bootstrap: library
From: ubuntu:20.04
Stage: build

export LC_ALL=C
export LC_NUMERIC=en_GB.UTF-8
export PATH="/opt/miniconda/bin:$PATH"

Container based on unbuntu containing miniconda.

# sample runscript: bamtools passing all arguments from cli: $@
# exec /opt/miniconda/bin/bamtools "$@"

#commands to help installation processes
apt update
apt install -y wget bzip2 git autoconf automake build-essential zlib1g-dev pkg-config nano

#install conda
cd /opt
rm -fr miniconda
wget  -O
bash -b -p /opt/miniconda
mkdir -p /opt/tools
export PATH="/opt/tools/bin:/opt/miniconda/bin:$PATH"

3.2 Creating and using sandbox

Next we will use this definition file to create a new singularity sandbox

sudo singularity build --sandbox sd_sandbox_1 ubuntu_with_inst_tools.def
When the sandbox is ready we open a shell session into it. Option -w enables us to write to the sand box:

sudo singularity shell -w sd_sandbox_1
Now we are inside the singularity sandbox and we can start installing software we need. We have already available Conda that will provide a handy way to install many software tools. For example, following commands install bamtools and samtools. In the case of samtools we define a spcific version (1.13)

conda install bamtools
conda install samtools=1.13
We could also use normal installation procedures in stead of conda. For example in stead of conda install vcftools you could do vcftools installation with commands:

cd /opt/tools
git clone
cd vcftools/
autoreconf -i
./configure --prefix=/opt/tools
make install
When you are ready with the software installations you can exit the sandbox with command:

3.3 Creating a singularity image file

Now we are back in the base virtual machine. Next we convert the sandbox into a singularity image file with command:

sudo singularity build sd_tools_1.sif sd_sandbox_1
After this, file listing (ls -lh) shows that out current directory has a sandbox directory and singularity image file

drwxr-xr-x. 18 root   root   4.0K Sep 27 12:56 sd_sandbox_1
-rwxr-xr-x   1 ubuntu ubuntu 419M Sep 27 13:43 sd_tools_1.sif
Note that both the sandbox and singularity image file can be to execute the commands we just installed. For example we can print out bamtools help message with both commands below:

singularity exec sd_sandbox_1 bamtools -h
singularity exec sd_tools_1.sif bamtools -h

4. Uploading container to Allas/SD Connect

In order to use the singularity container in SD desktop, we need to encrypt it with CSC public key and upload it to Allas. If you want to use the same singularity contrainer in other locations too, for example in Puhti and Mahti, you will need to upload another, not encrypted version to Allas.

For the upload process we use the Allas tools we installed in step 2, were we installed Allas tools to directory $HOME/allas-cli-utils. First we add this directory to command path:

export PATH=${HOME}/allas-cli-utils:${PATH}
Next we open connection to Allas using the allas_conf script. No that you must define your CSC user account with -u your-csc-account . Here we assume that the user account is kkayttaj.

source ${HOME}/allas-cli-utils/allas_conf -u kkayttaj
The command above asks for the password of the CSC user account and then lists the Allas projects that the user account has available. In this case we select the number that defines project project_2000123. After that the Allas connections to the selected project will remain active for the next eight hours.

Now we can access Allas with a-tools or rclone. Next we upload the container image we just created to Allas with command:

a-put --sdx sd_tools_1.sif -b 2000123_singularity_sd -m "SD Compatible. Contains bamtools, samtools and vcftools."
In the command above option --sdx is used to encrypty the contained with CSC public key. The encrypted container will be stored to bucket 2000123_singularity_sd. Here the bucket name contains the project number (2000123) to ensure uniqueness and sd is used tyo indicate that this bucket contains SD Desktop compatible dara. Option -m is used to add a small description to the metadata object that a-put creates.

5. Using singularity containers in SD Desktop

In order to use the singularity container you have created you need first download a copy of the container to the SD Desktop with Data Gateway tool. First login to SD Desktop and connect to the Virtual Desktop that you want to use. Open Data Gateway, navigate the to the right project (project_2000123) and bucket (2000123_singularity_sd), and download the singularity image file (sd_tools_1.sif) to the SD Desktop.

After that, open a Linux terminal in the SD Desktop. In the terminal, move the singularity file to the location you want to use it. In this example that could be done with command:

cp /home/kkayttaj/Projects/SD\ connect/project_2000123/2000123_sigularity_sd/sd_tools_1.sif ./
Now we could execute for example the samtools command that is installed in the container.

singularity exec sd_tools_1.sif samtools --help
The command above prints out the help for samtools version 1.13 that is installed in the container. Note that another version of samtools, version 1.9, is installed in the SD Desktop, so the command below would work too, but it would print help of the older samtools version:
samtools --help
When using the singularity container, you should note that it has its own file system that is read-only. In addition to this static file system singularity mounts selected directories from the host system into the container environment. These bind mounts can be used to import data to the container and they are also the only places into which new data can be written.

By default Singularity bind mounts home directory (/home/$USER), /tmp, and current working directory ($PWD) into your container at runtime. If you need to mount additional directories you will need to define them with singularity option -B source-directory:target-directory.

For example if we have input file input_bam.bam current working directory, it is automatically accessibe for a command that is executed inside the container. But if we need also another input file reference.bed which locates in directory called /data, then we should add that directory to the list if bind mounted directories. For example:

singularity -B /data:/data exec sd_tools_1.sif samtools depth -a -b /data/refrence.bed input_bam.bam > result.depth

Last edited Wed Mar 30 2022