Limiting interaction between host and container

.gitlab-ci.yml

@@ -44,7 +44,7 @@ variables:
     COMMAND_OPTIONS_SBATCH: ${slurm_options}
     STACK_CONFIG: ${CI_PROJECT_DIR}/stacks/${stack}/config.json
     MOUNT_POINT: /stack
-    APPTAINER_EXEC_OPTIONS: ${apptainer_options} --bind ${BUILDCACHE}:/buildcache:rw --bind ${CI_PROJECT_DIR}:${MOUNT_POINT}
+    APPTAINER_EXEC_OPTIONS: ${apptainer_options} --cleanenv -H $(mktemp -d):$HOME --bind ${BUILDCACHE}:/buildcache:rw --bind ${CI_PROJECT_DIR}:${MOUNT_POINT}
     SPACK_USER_CACHE_PATH: "/tmp/spack_cache_${CI_JOB_ID}"
     SPACK_USER_CONFIG_PATH: "/tmp/spack_user_${CI_JOB_ID}"
     BUILDCACHE: "/work/scitas-ge/richart/ci/buildcache"
@@ -85,6 +85,7 @@ spack:install_compilers:
     - .spack_cache
   script:
     - ci/install_compilers.sh
+    - source stack_env.sh
     - cd ${STACK_LOCATION}
     - spack/bin/spack -e ${SPACK_SYSTEM_CONFIG_PATH} config blame compilers
   after_script: