[MESOS-6566] The Docker executor should not leak task env variables in the Docker command cmd line.

• Type: Bug
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Component/s: docker, security
• Labels: containerization
• Assignee: Unassigned
• Reporter: Gastón Kleiman
• Shepherd: Kapil Arya
• Created: 09/Nov/16 11:36
• Updated: 12/Jul/19 19:36

Description

Task environment variables are sensitive, as they might contain secrets.

The Docker executor starts tasks by executing a docker run command, and it includes the env variables in the cmd line of the docker command, exposing them to all the users in the machine:

$ ./src/mesos-execute --command="sleep 200" --containerizer=docker --docker_image=alpine --env='{"foo": "bar"}' --master=10.0.2.15:5050 --name=test
$ ps aux | grep bar
[...] docker -H unix:///var/run/docker.sock run [...] -e foo=bar [...] alpine -c sleep 200
$

The Docker executor could pass Docker the --env-file flag, pointing it to a file with the environment variables.

Issue Links

• is related to: MESOS-6951 Docker containerizer: mangled environment when env value contains LF byte.