hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eric Badger (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored
Date Tue, 29 May 2018 19:37:00 GMT

    [ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16494123#comment-16494123
] 

Eric Badger commented on YARN-8342:
-----------------------------------

{quote}This is progression improvement that can be enhanced to further lock down privileged
registry when the demand arises. I opened YARN-8376 to track the separation of white lists
to avoid confusions. At this time, we will label type 2 and 3 as docker.trusted.registries.
In YARN-8376, we can label type 2 as docker.trusted.registries, and type 3 as docker.privileged-container.registries.
{quote}
That sounds good to me. +1 for this approach

> Using docker image from a non-privileged registry, the launch_command is not honored
> ------------------------------------------------------------------------------------
>
>                 Key: YARN-8342
>                 URL: https://issues.apache.org/jira/browse/YARN-8342
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>            Reporter: Wangda Tan
>            Assignee: Eric Yang
>            Priority: Critical
>              Labels: Docker
>         Attachments: YARN-8342.001.patch
>
>
> During test of the Docker feature, I found that if a container comes from non-privileged
docker registry, the specified launch command will be ignored. Container will success without
any log, which is very confusing to end users. And this behavior is inconsistent to containers
from privileged docker registries.
> cc: [~eyang], [~shanekumpf@gmail.com], [~ebadger], [~jlowe]



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org


Mime
View raw message