[YARN-7729] Add support for setting the PID namespace mode

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.1.0
• Component/s: nodemanager
• Labels: Docker
• Assignee: Billie Rinaldi
• Reporter: Shane Kumpf
• Due: 28/Feb/18
• Created: 10/Jan/18 19:42
• Updated: 02/May/18 23:05
• Resolved: 22/Jan/18 21:38

Description

Docker has support for allowing containers to share the PID namespace with the host or other containers via the docker run --pid flag.

There are a number of use cases where this is desirable:

• Monitoring tools running in containers that need access to the host level PIDs.
• Debug containers that can attach to another container to run strace, gdb, etc.
• Testing Docker on YARN in a container, where the docker socket is bind mounted.

Enabling this feature should be considered privileged as it exposes host details inside the container.