Uploaded image for project: 'Mesos'
  1. Mesos
  2. MESOS-8214

Run a task in the root user namespace

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • containerization, security
    • None

    Description

      When the namespaces/user isolator is applied, we need a way for schedulers to be able to specify a task to run in the root user namespace since it might need to have real host privilege. This mechanism should be plumbed through the authorization system so the authorizer gets a chance to veto the scheduler.

      Attachments

        Activity

          People

            jamespeach James Peach
            jamespeach James Peach
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: