apptainer: 1.3.2 -> 1.3.3

[GaetanLepage]

Description of changes

Changelog: https://github.com/apptainer/apptainer/releases/tag/v1.3.3

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[GaetanLepage]

Result of nixpkgs-review pr 324415 run on aarch64-darwin 1

[GaetanLepage]

Result of nixpkgs-review pr 324415 run on x86_64-darwin 1

[GaetanLepage]

Result of nixpkgs-review pr 324415 run on x86_64-linux 1

2 packages built:

• apptainer
• apptainer-overriden-nixos

[GaetanLepage]

Result of nixpkgs-review pr 324415 run on aarch64-linux 1

2 packages built:

• apptainer
• apptainer-overriden-nixos

[GaetanLepage]

apptainer.tests builds fine on both aarch64-linux and x86_64-linux.

[GaetanLepage]

cc @ShamrockLee

[ShamrockLee]

I'll test it later today.

[ShamrockLee]

It turns out that I didn't my laptop with me.

@GaetanLepage Could you help test the image-running functionality? It can be done with the image built in the tests.image-hello-cowsay.

"$(nix-build -A apptainer)/bin/apptainer" exec "$(nix-build apptainer.tests.image-hello-cowsay)" hello

[GaetanLepage]

Could you help test the image-running functionality?

Done ! It works fine.

[ShamrockLee]

I verified the hashes manually. LGTM!

I also hope to backport this version bump. As Apptainer and SingularityCE receives security updates from time to time, it would make security update backporting easier if we backport all the non-major version bumps to the stable branch.