Return-Path: Delivered-To: apmail-hadoop-core-dev-archive@www.apache.org Received: (qmail 51627 invoked from network); 2 Jul 2008 13:00:08 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 2 Jul 2008 13:00:08 -0000 Received: (qmail 1502 invoked by uid 500); 2 Jul 2008 13:00:07 -0000 Delivered-To: apmail-hadoop-core-dev-archive@hadoop.apache.org Received: (qmail 1493 invoked by uid 500); 2 Jul 2008 13:00:07 -0000 Mailing-List: contact core-dev-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: core-dev@hadoop.apache.org Delivered-To: mailing list core-dev@hadoop.apache.org Received: (qmail 1482 invoked by uid 99); 2 Jul 2008 13:00:07 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jul 2008 06:00:07 -0700 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Jul 2008 12:59:24 +0000 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 42B20234C150 for ; Wed, 2 Jul 2008 05:59:45 -0700 (PDT) Message-ID: <641211478.1215003585269.JavaMail.jira@brutus> Date: Wed, 2 Jul 2008 05:59:45 -0700 (PDT) From: "Steve Loughran (JIRA)" To: core-dev@hadoop.apache.org Subject: [jira] Commented: (HADOOP-3675) Provide more flexibility in the way tasks are run In-Reply-To: <491872913.1214909145149.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/HADOOP-3675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12609910#action_12609910 ] Steve Loughran commented on HADOOP-3675: ---------------------------------------- An in-VM task runner should always run the task in a new security manager (or at least try to set a new security manager, and fail gracefully if it can't, in case someone else is running Hadoop under a new Security Manager already). The SM could block calls to System.exit() The reason for doing this from the outset is if you leave it out, it sets up expectations that are hard to change later on. The rule should be in-VM == under a security manager. > Provide more flexibility in the way tasks are run > ------------------------------------------------- > > Key: HADOOP-3675 > URL: https://issues.apache.org/jira/browse/HADOOP-3675 > Project: Hadoop Core > Issue Type: New Feature > Components: mapred > Reporter: Brice Arnould > Assignee: Brice Arnould > Priority: Minor > Attachments: TaskWrapper_v0.patch > > > *The aim* > With [HADOOP-3421] speaking about sharing a cluster among more than one organization (so potentially with non-cooperative users), and posts on the ML speaking about virtualization and the ability to re-use the TaskTracker's VM to run new tasks, it could be useful for admins to choose the way TaskRunners run their children. > More specifically, it could be useful to provide a way to imprison a Task in its working directory, or in a virtual machine. > In some cases, reusing the VM might be useful, since it seems that this feature is really wanted ([HADOOP-249]). > *Concretely* > What I propose is a new class, called called SeperateVMTaskWrapper which contains the current logic for running tasks in another JVM. This class extends another, called TaskWrapper, which could be inherited to provide new ways of running tasks. > As part of this issue I would also like to provide two other TaskWrappers : the first would run the tasks as Thread of the TaskRunner's VM (if it is possible without too much changes), the second would use a fixed pool of local unix accounts to insulate tasks from each others (so potentially non-cooperating users will be hable to share a cluster, as described in [HADOOP-3421]). -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.