Support Singularity containers

[glesica]

This is going to be tricky because some of the software we use writes to the root filesystem. We want to eventually support Singularity, though, so we need to find ways to mitigate filesystem access issues.