Return-Path: X-Original-To: apmail-hadoop-mapreduce-user-archive@minotaur.apache.org Delivered-To: apmail-hadoop-mapreduce-user-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C076510718 for ; Thu, 9 Jan 2014 22:15:34 +0000 (UTC) Received: (qmail 86624 invoked by uid 500); 9 Jan 2014 22:15:27 -0000 Delivered-To: apmail-hadoop-mapreduce-user-archive@hadoop.apache.org Received: (qmail 86455 invoked by uid 500); 9 Jan 2014 22:15:27 -0000 Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hadoop.apache.org Delivered-To: mailing list user@hadoop.apache.org Received: (qmail 86448 invoked by uid 99); 9 Jan 2014 22:15:27 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Jan 2014 22:15:27 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of aagarwal@hortonworks.com designates 209.85.214.179 as permitted sender) Received: from [209.85.214.179] (HELO mail-ob0-f179.google.com) (209.85.214.179) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Jan 2014 22:15:22 +0000 Received: by mail-ob0-f179.google.com with SMTP id wm4so3937019obc.38 for ; Thu, 09 Jan 2014 14:15:02 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=Lk+J5nPTTR3aQB00U9906tuWHcwYcDhevsoTaWy6pRw=; b=Z2AORCdxS81LOxsuwaZsD2LhlRMZiFOZ0lhIIPCy/IUdMbhi4R5lDf0EMQ+hqjrtHA ImakhRofXbqxubvxQdlFC4bINW2cUTcRW74OswOLltEvvEq/7sfWYLhR+wgbJGNZYdS7 qXffR/+LZVBPyazlT1mXM+sr2Ln9q1Ug5cdNHx5Hf/CQha2eb47TJm2mZJUN1A/7qJTZ AR5CqsXtEUBuvzc+y0HIjN+dg5UBnL8X9MFvj285wtRvpvhQgSFtjHNHpWALoXatjTrE cg8OOeOrPf2rN4zcELnpD8pSt+nxfnOnxNf9GH99MJldRyIvfZq3vCX/BiZqi/YbKdKN S0pw== X-Gm-Message-State: ALoCoQloiOxBSRjGq9FVueR3Vp4KEMs0ZP1QvpMQId5+oTo1ZqCWhW8tYqGqXf1qJd6w/saGd7MjBJrP8tEz4DQ9xoJEmDyfbDsyPP55eNPu+ZNSTZP5vYk= MIME-Version: 1.0 X-Received: by 10.60.124.34 with SMTP id mf2mr3557495oeb.4.1389305701846; Thu, 09 Jan 2014 14:15:01 -0800 (PST) Received: by 10.76.25.196 with HTTP; Thu, 9 Jan 2014 14:15:01 -0800 (PST) In-Reply-To: References: Date: Thu, 9 Jan 2014 14:15:01 -0800 Message-ID: Subject: Re: Hadoop 2.2.0 YARN isolation and Windows From: Arpit Agarwal To: user@hadoop.apache.org Content-Type: multipart/alternative; boundary=047d7b5d340cd86fd404ef90f041 X-Virus-Checked: Checked by ClamAV on apache.org --047d7b5d340cd86fd404ef90f041 Content-Type: text/plain; charset=US-ASCII Hi Kevin, *> 2. According to http://www.i-programmer.info/news/197-data-mining/6518-hadoop-2-introduces-yarn.html , Hadoop 2.2.0 supports Microsoft Windows. How do/Can you configure YARN for secure container isolation in Windows? It seems that the ContainerExecutor and DefaultContainerExecutor can detect and run on Windows, but the secure LinuxContainerExecutor are for *nix systems, so is there anything in place for maximum security like LCE is?* Cluster security is not supported on Windows at the moment. *> 1. Does YARN need to run on the same machines that are hosting the HDFS services or can HDFS be remote of a YARN cluster? If this done by placing the remote HDFS cluster's configuration files (core-site.xml and hdfs-site.xml) on the YARN cluster's machines?* *> 3. If 1 is yes, then is it possible to have a cluster mixed with both Linux and Windows machines running YARN and working together?* It should work in theory if you get the configuration right - I have not tried it out so I am not sure. YARN containers and HDFS datanodes should be collocated for good performance. The MapReduce compute model especially depends on access to fast local storage. On Thu, Jan 9, 2014 at 1:19 PM, Kevin wrote: > Hi, > > Three questions about the new Hadoop release regarding YARN: > > 1. Does YARN need to run on the same machines that are hosting the HDFS > services or can HDFS be remote of a YARN cluster? If this done by placing > the remote HDFS cluster's configuration files (core-site.xml and > hdfs-site.xml) on the YARN cluster's machines? > > 2. According to > http://www.i-programmer.info/news/197-data-mining/6518-hadoop-2-introduces-yarn.html, > Hadoop 2.2.0 supports Microsoft Windows. How do/Can you configure YARN for > secure container isolation in Windows? It seems that the ContainerExecutor > and DefaultContainerExecutor can detect and run on Windows, but the secure > LinuxContainerExecutor are for *nix systems, so is there anything in place > for maximum security like LCE is? > > 3. If 1 is yes, then is it possible to have a cluster mixed with both > Linux and Windows machines running YARN and working together? > > Thanks, > Kevin > -- CONFIDENTIALITY NOTICE NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You. --047d7b5d340cd86fd404ef90f041 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Hi Kevin,

> 2. According= to http://www.i-programmer.info/ne= ws/197-data-mining/6518-hadoop-2-introduces-yarn.html, Hadoop 2.2.0 supports Microsoft Windows. How do/Can you configure YARN=20 for secure container isolation in Windows? It seems that the=20 ContainerExecutor and DefaultContainerExecutor can detect and run on=20 Windows, but the secure LinuxContainerExecutor are for *nix systems, so=20 is there anything in place for maximum security like LCE is?
<= br>
Cluster security is not supported on Windows at the moment.
> 1. Does YARN need to run on the same machines that are hosting the= HDFS=20 services or can HDFS be remote of a YARN cluster? If this done by=20 placing the remote HDFS cluster's configuration files (core-site.xml an= d hdfs-site.xml) on the YARN cluster's machines?
> 3. = If 1 is yes, then is it possible to have a cluster mixed with both=20 Linux and Windows machines running YARN and working together?

It should work in theory if you get the configuration right - I ha= ve not tried it out so I am not sure. YARN containers and HDFS datanodes sh= ould be collocated for good performance. The MapReduce compute model especi= ally depends on access to fast local storage.



On Thu, Jan 9, 2014 at 1:19 PM, Kevin <kevin.macksamie@gmail.co= m> wrote:
Hi,

=
Three questions about the new Hadoop release regarding YARN:
=
1. Does YARN need to run on the same machines that are hosting t= he HDFS services or can HDFS be remote of a YARN cluster? If this done by p= lacing the remote HDFS cluster's configuration files (core-site.xml and= hdfs-site.xml) on the YARN cluster's machines?

2. According to http://www.i-pr= ogrammer.info/news/197-data-mining/6518-hadoop-2-introduces-yarn.html, = Hadoop 2.2.0 supports Microsoft Windows. How do/Can you configure YARN for = secure container isolation in Windows? It seems that the ContainerExecutor = and DefaultContainerExecutor can detect and run on Windows, but the secure = LinuxContainerExecutor are for *nix systems, so is there anything in place = for maximum security like LCE is?

3. If 1 is yes, then is it possible to have a cluster mixed = with both Linux and Windows machines running YARN and working together?
=
Thanks,
Kevin


CONFIDENTIALITY NOTICE
NOTICE: This message is = intended for the use of the individual or entity to which it is addressed a= nd may contain information that is confidential, privileged and exempt from= disclosure under applicable law. If the reader of this message is not the = intended recipient, you are hereby notified that any printing, copying, dis= semination, distribution, disclosure or forwarding of this communication is= strictly prohibited. If you have received this communication in error, ple= ase contact the sender immediately and delete it from your system. Thank Yo= u. --047d7b5d340cd86fd404ef90f041--