[MESOS-7523] Whitelist devices in bulk on a per-container basis

• Type: Improvement
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Labels: containerization csi-post-mvp mesosphere mesosphere-dss-post-ga storage
• Assignee: Unassigned
• Reporter: James DeFelice
• Created: 18/May/17 21:01
• Updated: 03/Apr/19 10:59

Description

Continuation of the work in MESOS-6791

It should be possible to whitelist a range (R) of devices such that R may be exposed to a container launched by an agent. Not all containers should have access to R by default, only those containers whose ContainerInfo specifies such access.

For example, it may be useful to whitelist the range of devices matching the glob expressions `/dev/{s,h,xv}d[a-z]*` and `/dev/dm-*` and `/dev/mapper/*` for a container that intends to manage storage devices.

/cc jieyu

Issue Links

• relates to: MESOS-7309 Support specifying devices for a container.