I'm unsure if this problem is because of a bug or because a bug has now been fixed.
A number of our Chronos jobs started failing when we upgraded to Mesos 0.22. These worked prior to the upgrade. They specify a URI to a Python script and execute the Python script within a minimal Docker container.
Note that Chronos does not setExecutable on the URI when building the Mesos task and has never done so on URIs (https://github.com/mesos/chronos/blob/36a294d4714e545de91fcda920429faff15a1746/src/main/scala/org/apache/mesos/chronos/scheduler/mesos/MesosTaskBuilder.scala#L101).
stderr output complains about lacking permission:
I suspect this is intended behaviour and was just wondering if this was a known bug in the fetcher that was fixed in the 0.22 release of Mesos.
Example job configuration: