Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-8472 YARN Container Phase 2
  3. YARN-7904

Privileged, trusted containers should be supported only in ENTRYPOINT mode

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 3.3.0
    • None

    Description

      Since they will be running as some other user than themselves, the NM likely won't be able to clean up after them because of permissions issues. So, to prevent this, we should make these directories read-only.

      Attachments

        1. YARN-7904.001.patch
          3 kB
          Eric Yang
        2. YARN-7904.004.patch
          5 kB
          Eric Yang
        3. YARN-7904.005.patch
          7 kB
          Eric Yang
        4. YARN-7904.006.patch
          8 kB
          Eric Yang
        5. YARN-8805.002.patch
          5 kB
          Eric Yang
        6. YARN-8805.003.patch
          5 kB
          Eric Yang

        Issue Links

          is duplicated by

          Sub-task - The sub-task of the issue YARN-8335 Privileged docker containers' jobSubmitDir does not get successfully cleaned up

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              eyang Eric Yang
              ebadger Eric Badger
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: