hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hadoop QA (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-1853) Allow containers to be ran under real user even in insecure mode
Date Wed, 16 Apr 2014 13:18:15 GMT

    [ https://issues.apache.org/jira/browse/YARN-1853?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13971389#comment-13971389

Hadoop QA commented on YARN-1853:

{color:red}-1 overall{color}.  Here are the results of testing the latest attachment 
  against trunk revision .

    {color:green}+1 @author{color}.  The patch does not contain any @author tags.

    {color:green}+1 tests included{color}.  The patch appears to include 1 new or modified
test files.

    {color:red}-1 javac{color:red}.  The patch appears to cause the build to fail.

Console output: https://builds.apache.org/job/PreCommit-YARN-Build/3574//console

This message is automatically generated.

> Allow containers to be ran under real user even in insecure mode
> ----------------------------------------------------------------
>                 Key: YARN-1853
>                 URL: https://issues.apache.org/jira/browse/YARN-1853
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: nodemanager, resourcemanager
>    Affects Versions: 2.3.0
>            Reporter: Andrey Stepachev
>         Attachments: YARN-1853-trunk.patch, YARN-1853.patch
> Currently unsecure cluster runs all containers under one user (typically nobody). That
is not appropriate, because yarn applications doesn't play well with hdfs having enabled permissions.
Yarn applications try to write data (as expected) into /user/nobody regardless of user, who
launched application.
> Another sideeffect is that it is not possible to configure cgroups for particular users.

This message was sent by Atlassian JIRA

View raw message