[MESOS-4065] slave FD for ZK tcp connection leaked to executor process

• Type: Bug
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.24.1, 0.25.0, 1.2.2
• Labels: mesosphere security
• Assignee: Unassigned
• Reporter: James DeFelice
• Created: 03/Dec/15 21:56
• Updated: 26/Nov/18 13:36

Description

core@ip-10-0-0-45 ~ $ ps auxwww|grep -e etcd
root      1432 99.3  0.0 202420 12928 ?        Rsl  21:32  13:51 ./etcd-mesos-executor -log_dir=./
root      1450  0.4  0.1  38332 28752 ?        Sl   21:32   0:03 ./etcd --data-dir=etcd_data --name=etcd-1449178273 --listen-peer-urls=http://10.0.0.45:1025 --initial-advertise-peer-urls=http://10.0.0.45:1025 --listen-client-urls=http://10.0.0.45:1026 --advertise-client-urls=http://10.0.0.45:1026 --initial-cluster=etcd-1449178273=http://10.0.0.45:1025,etcd-1449178271=http://10.0.2.95:1025,etcd-1449178272=http://10.0.2.216:1025 --initial-cluster-state=existing
core      1651  0.0  0.0   6740   928 pts/0    S+   21:46   0:00 grep --colour=auto -e etcd

core@ip-10-0-0-45 ~ $ sudo lsof -p 1432|grep -e 2181
etcd-meso 1432 root   10u     IPv4              21973      0t0    TCP ip-10-0-0-45.us-west-2.compute.internal:54016->ip-10-0-5-206.us-west-2.compute.internal:2181 (ESTABLISHED)

core@ip-10-0-0-45 ~ $ ps auxwww|grep -e slave
root      1124  0.2  0.1 900496 25736 ?        Ssl  21:11   0:04 /opt/mesosphere/packages/mesos--52cbecde74638029c3ba0ac5e5ab81df8debf0fa/sbin/mesos-slave
core      1658  0.0  0.0   6740   832 pts/0    S+   21:46   0:00 grep --colour=auto -e slave

core@ip-10-0-0-45 ~ $ sudo lsof -p 1124|grep -e 2181
mesos-sla 1124 root   10u     IPv4              21973      0t0    TCP ip-10-0-0-45.us-west-2.compute.internal:54016->ip-10-0-5-206.us-west-2.compute.internal:2181 (ESTABLISHED)

I only tested against mesos 0.24.1 and 0.25.0.

Issue Links

• relates to: MESOS-8027 os::open doesn't always atomically apply O_CLOEXEC
• relates to: ZOOKEEPER-2338 c bindings should create socket's with SOCK_CLOEXEC to avoid fd leaks on fork/exec