Mailing-List: contact yarn-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Date: Mon, 7 Aug 2017 21:55:00 +0000 (UTC)
From: "Miklos Szegedi (JIRA)" <jira@apache.org>
To: yarn-issues@hadoop.apache.org
Message-ID: <JIRA.13091983.1501702524000.111743.1502142900721@Atlassian.JIRA>
In-Reply-To: <JIRA.13091983.1501702524000@Atlassian.JIRA>
References: <JIRA.13091983.1501702524000@Atlassian.JIRA> <JIRA.13091983.1501702524048@jira-lw-us.apache.org>
Subject: [jira] [Commented] (YARN-6930) Admins should be able to explicitly
 enable specific LinuxContainerRuntime in the NodeManager
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Mon, 07 Aug 2017 21:55:10 -0000


    [ https://issues.apache.org/jira/browse/YARN-6930?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16117380#comment-16117380 ] 

Miklos Szegedi commented on YARN-6930:
--------------------------------------

Thank you for the patch, [~shanekumpf@gmail.com]. Would you mind adding two assertFalses verifying that Docker and Sandboxk are not allowed in . {{testIsRuntimeAllowedDefault}}?
I am wondering whether it would be a good idea to specify the user as well not just enabling a runtime in general. I could imagine that an admin allows Docker runtime only for specific users first...

> Admins should be able to explicitly enable specific LinuxContainerRuntime in the NodeManager
> --------------------------------------------------------------------------------------------
>
>                 Key: YARN-6930
>                 URL: https://issues.apache.org/jira/browse/YARN-6930
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: nodemanager
>            Reporter: Vinod Kumar Vavilapalli
>            Assignee: Shane Kumpf
>         Attachments: YARN-6930.001.patch
>
>
> Today, in the java land, all LinuxContainerRuntimes are always enabled when using LinuxContainerExecutor and the user can simply invoke anything that he/she wants - default, docker, java-sandbox.
> We should have a way for admins to explicitly enable only specific runtimes that he/she decides for the cluster. And by default, we should have everything other than the default one disabled.


--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org