Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-8472 YARN Container Phase 2
  3. YARN-7904

Privileged, trusted containers should be supported only in ENTRYPOINT mode

VotersWatch issueWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 3.3.0
    • None

    Description

      Since they will be running as some other user than themselves, the NM likely won't be able to clean up after them because of permissions issues. So, to prevent this, we should make these directories read-only.

      Attachments

        1. YARN-7904.001.patch
          3 kB
          Eric Yang
        2. YARN-7904.004.patch
          5 kB
          Eric Yang
        3. YARN-7904.005.patch
          7 kB
          Eric Yang
        4. YARN-7904.006.patch
          8 kB
          Eric Yang
        5. YARN-8805.002.patch
          5 kB
          Eric Yang
        6. YARN-8805.003.patch
          5 kB
          Eric Yang

        Issue Links

        is duplicated by

        Sub-task - The sub-task of the issue YARN-8335 Privileged docker containers' jobSubmitDir does not get successfully cleaned up

        • Major - Major loss of function.
        • Resolved

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            eyang Eric Yang
            ebadger Eric Badger
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment