Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 48813200C5E for ; Sat, 22 Apr 2017 11:06:36 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 470F4160B96; Sat, 22 Apr 2017 09:06:36 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 8D95F160B93 for ; Sat, 22 Apr 2017 11:06:35 +0200 (CEST) Received: (qmail 37676 invoked by uid 500); 22 Apr 2017 09:06:34 -0000 Mailing-List: contact dev-help@mesos.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@mesos.apache.org Delivered-To: mailing list dev@mesos.apache.org Received: (qmail 37662 invoked by uid 99); 22 Apr 2017 09:06:33 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 22 Apr 2017 09:06:33 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id E60FB1AFC2B for ; Sat, 22 Apr 2017 09:06:32 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.379 X-Spam-Level: ** X-Spam-Status: No, score=2.379 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=mesosphere.io Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id 72AEZ1Wv_uey for ; Sat, 22 Apr 2017 09:06:30 +0000 (UTC) Received: from mail-yw0-f198.google.com (mail-yw0-f198.google.com [209.85.161.198]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 11B585FB86 for ; Sat, 22 Apr 2017 09:06:30 +0000 (UTC) Received: by mail-yw0-f198.google.com with SMTP id a200so48366472ywh.18 for ; Sat, 22 Apr 2017 02:06:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mesosphere.io; s=google; h=mime-version:from:date:message-id:subject:to; bh=J4JCxOx3pav/Le8mvsQ4FWYqIxHNuDiRuqp/qzcFf3I=; b=fqtBI6zUMjUCBuojDGKw/2x6tXiIdIgccreRD1MoRPELEiv5guLp+2RQqefg0FLn8y RoXLT0M/ADvk+gLWPKjbeQjDAuw6BGgZw9wOZkhe+6IPTZv9LBwkH9c3uzFN5T4G9+c1 9Sl/N5BPhCGX0ppuAVEX9mQvSQLZMmHpXFRvk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=J4JCxOx3pav/Le8mvsQ4FWYqIxHNuDiRuqp/qzcFf3I=; b=JCS5fmJ55t9xo9BMtlvMn76hB8/wmg64yZhKs31fmXCxA+9wG/+QbfQJzOWRk1K1Fy M9Z7PbXqiusGVFykmMWaYPGnVr4gX89bWd1vS0r9f6FQeYQteQ6Fn8KyW4eS/1h6wr1u Qpcp7puhjoCM1izwIvsgF5NkTayj56NoLaby+6AqsTKaKre1SRGTX5sDny9LRa1ZtYYb t0dpIJUDvBG27OVVkXH0NpVOqSaJYc9ectlerWOKYsWdEEb0N1WQU70XMYe6GH05awcb eGFDIayM+DCX2gH9vSbrJ2xuI+sXb3ZAUroQR/5dkRoPWM8wiE8WToDjpGBVzHg7a8lB pPNg== X-Gm-Message-State: AN3rC/5erKNW7CfdFnT8oGxGwOk7yaaj+kBPCz908wfFu6X+uVkMxJ6U G+5xmsW3yxdBvj3qsDeSHig87eXPskPm X-Received: by 10.129.67.6 with SMTP id q6mr448230ywa.225.1492851983078; Sat, 22 Apr 2017 02:06:23 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.147.2 with HTTP; Sat, 22 Apr 2017 02:06:22 -0700 (PDT) From: Gilbert Song Date: Sat, 22 Apr 2017 02:06:22 -0700 Message-ID: Subject: Docker Private Registry Credential per Container To: dev , user@mesos.apache.org Content-Type: multipart/alternative; boundary=f403045eb57827c4b2054dbdb0e0 archived-at: Sat, 22 Apr 2017 09:06:36 -0000 --f403045eb57827c4b2054dbdb0e0 Content-Type: text/plain; charset=UTF-8 Hi all, Recently, we started working on support for docker private registry credential per container in Mesos (MESOS-7088 ). This feature aims to allow users to specify a registry credential for an image at the first class API. Here is the link to the design doc: https://docs.google.com/document/d/1kMXeJEuw4_adwyxqEjoMAdxRNzYHWrT_-eGd1uQLQEg/edit?usp=sharing The design doc may not cover some pieces of implementation details, but it should be sufficient to cover main ideas, user-facing API, and security concerns. Comments will be absolutely welcome. Thanks, Gilbert --f403045eb57827c4b2054dbdb0e0--