Mailing-List: contact yarn-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Date: Thu, 18 Aug 2016 14:50:21 +0000 (UTC)
From: "Daniel Templeton (JIRA)" <jira@apache.org>
To: yarn-issues@hadoop.apache.org
Message-ID: <JIRA.12998105.1471500638000.345350.1471531821328@Atlassian.JIRA>
In-Reply-To: <JIRA.12998105.1471500638000@Atlassian.JIRA>
References: <JIRA.12998105.1471500638000@Atlassian.JIRA> <JIRA.12998105.1471500638705@arcas>
Subject: [jira] [Commented] (YARN-5534) Allow whitelisted volume mounts
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Thu, 18 Aug 2016 14:50:23 -0000


    [ https://issues.apache.org/jira/browse/YARN-5534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15426566#comment-15426566 ] 

Daniel Templeton commented on YARN-5534:
----------------------------------------

A good use case for this is mounting in the Hadoop directories so that they don't have to be build into the container.  Another use case is mounting in the local tool chain.

> Allow whitelisted volume mounts 
> --------------------------------
>
>                 Key: YARN-5534
>                 URL: https://issues.apache.org/jira/browse/YARN-5534
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: yarn
>            Reporter: luhuichun
>            Assignee: luhuichun
>
> Mounting arbitrary volumes into a Docker container can be a security risk. One approach to provide safe volume mounts is to allow the cluster administrator to configure a set of parent directories in the yarn-site.xml from which volume mounts are allowed.  only these directories and sub-directories are allowed to mount.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org