[MESOS-8327] Add container-specific CGroup FS mounts under /sys/fs/cgroup/* to Mesos containers

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Done
• Fix Version/s: 1.7.0
• Component/s: containerization
• Epic Link: cgroup-fs-mount
• Sprint: Mesosphere Sprint 2018-22, Mesosphere Sprint 2018-23
• Story Points: 13
• Assignee: Qian Zhang
• Reporter: Jason Lai
• Shepherd: Gilbert Song
• Created: 13/Dec/17 06:37
• Updated: 09/Jul/18 01:00
• Resolved: 25/Jun/18 21:45

Description

Containers launched with Unified Containerizer do not include container-specific CGroup FS mounts under /sys/fs/cgroup, which are created by default by Docker (usually readonly for unprivileged containers). Let's honor the same convention for Mesos containers.

For example, this is needed by Uber's automaxprocs patch for Go programs, which amends GOMAXPROCS per CPU quota and requires access to the CPU cgroup subsystem.