Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-8472 YARN Container Phase 2
  3. YARN-7904

Privileged, trusted containers should be supported only in ENTRYPOINT mode

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.3.0
    • Component/s: None

      Description

      Since they will be running as some other user than themselves, the NM likely won't be able to clean up after them because of permissions issues. So, to prevent this, we should make these directories read-only.

        Attachments

        1. YARN-7904.001.patch
          3 kB
          Eric Yang
        2. YARN-7904.004.patch
          5 kB
          Eric Yang
        3. YARN-7904.005.patch
          7 kB
          Eric Yang
        4. YARN-7904.006.patch
          8 kB
          Eric Yang
        5. YARN-8805.002.patch
          5 kB
          Eric Yang
        6. YARN-8805.003.patch
          5 kB
          Eric Yang

          Issue Links

          is duplicated by

          Sub-task - The sub-task of the issue YARN-8335 Privileged docker containers' jobSubmitDir does not get successfully cleaned up

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Assignee:
                eyang Eric Yang
                Reporter:
                ebadger Eric Badger
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: