[YARN-2904] Use linux cgroups to enhance container tear down

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.6.0
• Component/s: nodemanager
• Assignee: Unassigned
• Reporter: Nathan Roberts
• Created: 25/Nov/14 21:20
• Updated: 18/Aug/17 20:24

Description

If we are launching yarn containers within cgroups, linux provides some guarantees that can help completely tear down a container. Specifically, linux guarantees that tasks can't escape a cgroup. We can use this fact to tear down a yarn container without leaking tasks.

Today, a SIGTERM is sent to the session (normally lead by bash). When the session leader exits, the LCE sees this and assumes all resources have been given back to the system. This is not guaranteed. Example: YARN-2809 implements a workaround that is only necessary because tasks are still lingering within the cgroup when the nodemanager attempts to delete it.

Issue Links

• is blocked by: YARN-3561 Non-AM Containers continue to run even after AM is stopped
• is related to: YARN-6763 TestProcfsBasedProcessTree#testProcessTree fails in trunk
• relates to: YARN-6276 Now container kill mechanism may lead process leak