hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Naganarasimha G R (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-882) Specify per user quota for private/application cache and user log files
Date Mon, 31 Jul 2017 12:10:00 GMT

    [ https://issues.apache.org/jira/browse/YARN-882?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16107216#comment-16107216

Naganarasimha G R commented on YARN-882:

bq. For long term solution, user quota should be specified for private/application cache.
Agree, But it should be handled in such a way that containers should not fail after submission
but allocation should not happen to these nodes 

> Specify per user quota for private/application cache and user log files
> -----------------------------------------------------------------------
>                 Key: YARN-882
>                 URL: https://issues.apache.org/jira/browse/YARN-882
>             Project: Hadoop YARN
>          Issue Type: New Feature
>            Reporter: Omkar Vinit Joshi
>            Assignee: Omkar Vinit Joshi
> At present there is no limit on the number of files / size of the files localized by
single user. Similarly there is no limit on the size of the log files created by user via
running containers.
> We need to restrict the user for this.
> For LocalizedResources; this has serious concerns in case of secured environment where
malicious user can start one container and localize resources whose total size >= DEFAULT_NM_LOCALIZER_CACHE_TARGET_SIZE_MB.
Thereafter it will either fail (if no extra space is present on disk) or deletion service
will keep removing localized files for other containers/applications. 
> The limit for logs/localized resources should be decided by RM and sent to NM via secured
containerToken. All these configurations should per container instead of per user or per nm.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org

View raw message