[MESOS-1586] Isolate system directories, e.g., per-container /tmp

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.20.0
• Fix Version/s: 0.21.0
• Component/s: containerization
• Target Version/s: 0.21.0
• Epic Link: Disk isolation and monitoring
• Sprint: Q3 Sprint 1, Q3 Sprint 2, Q3 Sprint 3, Q3 Sprint 4, Mesos Q3 Sprint 5, Mesos Q3 Sprint 6, Twitter Q4 Sprint 1, Twitter Mesos Q4 Sprint 2
• Story Points: 3
• Assignee: Ian Downes
• Reporter: Ian Downes
• Shepherd: Jie Yu
• Created: 14/Jul/14 17:26
• Updated: 26/Apr/17 16:53
• Resolved: 27/Oct/14 17:39

Description

Ideally, tasks should not write outside their sandbox (executor work directory) but pragmatically they may need to write to /tmp, /var/tmp, or some other directory.

1) We should include any such files in disk usage and quota.
2) We should make these "shared" directories private, i.e., each container has their own.
3) We should make the lifetime of any such files the same as the executor work directory.

Issue Links

• is duplicated by: MESOS-1206 Use per container tmp directory with same lifetime as sandbox dir.