Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
Description
When the operator configures the --allowed_devices agent flag, the devices cgroup is configured but the task still needs to actually create the device node. This is awkward because the task might not have enough capabilities to mknod and even if we wanted to grant the capabilities, the application may need to be modified to make the right system calls.
We should enhance the isolator and containerizer to automatically create device nodes that have been whitelisted.
Attachments
Issue Links
- relates to
-
MESOS-8958 LinuxDevicesIsolatorTest.ROOT_PopulateWhitelistedDevices fails on some boxes.
- Resolved
-
MESOS-9021 Allow schedulers to specify allowed devices for tasks.
- Open
- links to