See <https://builds.apache.org/job/Mesos-Reviewbot/18402/display/redirect?page=changes>
Changes: [yujie.jay] Rename ContainerLaunchInfo `capabilities` field. [yujie.jay] Add a `bounding_capabilities` field to ContainerLaunchInfo. [yujie.jay] Add the agent --bounding_capabilities flag. [yujie.jay] Check bounding capabilities at isolator creation time. [yujie.jay] Change launcher working directory before dropping privilege. [yujie.jay] Add support for explicitly setting bounding capabilities. [yujie.jay] Add ambient capability support. [yujie.jay] Add ambient capabilities to launched tasks. [yujie.jay] Rename the `--allowed_capabilities` flag to `--effective_capabilities`. [yujie.jay] Synchronize capabilities flags documentation. [yujie.jay] Additional linux/capabilities isolator documentation. [yujie.jay] Update Linux capabilities isolator tests. [yujie.jay] Disabled the AmbientCapabilities.Supported test. ------------------------------------------ [...truncated 28.51 MB...] I0617 06:32:11.303434 4586 containerizer.cpp:230] Using isolation: posix/cpu,posix/mem,filesystem/posix,network/cni,environment_secret W0617 06:32:11.304260 4586 backend.cpp:76] Failed to create 'overlay' backend: OverlayBackend requires root privileges W0617 06:32:11.304424 4586 backend.cpp:76] Failed to create 'bind' backend: BindBackend requires root privileges I0617 06:32:11.304553 4586 provisioner.cpp:255] Using default backend 'copy' I0617 06:32:11.309572 4605 slave.cpp:249] Mesos agent started on (764)@172.17.0.5:35435 I0617 06:32:11.309653 4605 slave.cpp:250] Flags at startup: --acls="" --appc_simple_discovery_uri_prefix="http://"; --appc_store_dir="/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_jCffZW/store/appc" --authenticate_http_readonly="true" --authenticate_http_readwrite="true" --authenticatee="crammd5" --authentication_backoff_factor="1secs" --authorizer="local" --cgroups_cpu_enable_pids_and_tids_count="false" --cgroups_enable_cfs="false" --cgroups_hierarchy="/sys/fs/cgroup" --cgroups_limit_swap="false" --cgroups_root="mesos" --container_disk_watch_interval="15secs" --containerizers="mesos" --credential="/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_jCffZW/credential" --default_role="*" --disk_watch_interval="1mins" --docker="docker" --docker_kill_orphans="true" --docker_registry="https://registry-1.docker.io"; --docker_remove_delay="6hrs" --docker_socket="/var/run/docker.sock" --docker_stop_timeout="0ns" --docker_store_dir="/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_jCffZW/store/docker" --docker_volume_checkpoint_dir="/var/run/mesos/isolators/docker/volume" --enforce_container_disk_quota="false" --executor_registration_timeout="1mins" --executor_reregistration_timeout="2secs" --executor_shutdown_grace_period="5secs" --fetcher_cache_dir="/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_jCffZW/fetch" --fetcher_cache_size="2GB" --frameworks_home="" --gc_delay="1weeks" --gc_disk_headroom="0.1" --hadoop_home="" --help="false" --hostname_lookup="true" --http_command_executor="false" --http_credentials="/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_jCffZW/http_credentials" --http_heartbeat_interval="30secs" --initialize_driver_logging="true" --isolation="posix/cpu,posix/mem" --launcher="posix" --launcher_dir="/mesos/mesos-1.4.0/_build/src" --logbufsecs="0" --logging_level="INFO" --max_completed_executors_per_framework="150" --oversubscribed_resources_interval="15secs" --perf_duration="10secs" --perf_interval="1mins" --port="5051" --qos_correction_interval_min="0ns" --quiet="false" --recover="reconnect" --recovery_timeout="15mins" --registration_backoff_factor="10ms" --resources="cpus:2;gpus:0;mem:1024;disk:1024;ports:[31000-32000]" --revocable_cpu_low_priority="true" --runtime_dir="/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_jCffZW" --sandbox_directory="/mnt/mesos/sandbox" --strict="true" --switch_user="true" --systemd_enable_support="true" --systemd_runtime_directory="/run/systemd/system" --version="false" --work_dir="/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_7cRK2W" I0617 06:32:11.310680 4605 credentials.hpp:86] Loading credential for authentication from '/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_jCffZW/credential' I0617 06:32:11.311214 4605 slave.cpp:282] Agent using credential for: test-principal I0617 06:32:11.311508 4605 credentials.hpp:37] Loading credentials for authentication from '/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_jCffZW/http_credentials' I0617 06:32:11.312165 4605 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readonly' I0617 06:32:11.312747 4605 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readwrite' I0617 06:32:11.315140 4605 slave.cpp:553] Agent resources: cpus(*):2; mem(*):1024; disk(*):1024; ports(*):[31000-32000] I0617 06:32:11.315596 4605 slave.cpp:561] Agent attributes: [ ] I0617 06:32:11.315747 4605 slave.cpp:566] Agent hostname: 6e18bf9189d3 I0617 06:32:11.316344 4606 status_update_manager.cpp:177] Pausing sending status updates I0617 06:32:11.318553 4610 state.cpp:62] Recovering state from '/tmp/Endpoint_SlaveEndpointTest_AuthorizedRequest_2_7cRK2W/meta' I0617 06:32:11.319092 4607 status_update_manager.cpp:203] Recovering status update manager I0617 06:32:11.319805 4607 containerizer.cpp:582] Recovering containerizer I0617 06:32:11.322554 4608 provisioner.cpp:416] Provisioner recovery complete I0617 06:32:11.323290 4608 slave.cpp:6128] Finished recovery I0617 06:32:11.323956 4608 slave.cpp:6310] Querying resource estimator for oversubscribable resources I0617 06:32:11.324319 4606 slave.cpp:6324] Received oversubscribable resources {} from the resource estimator I0617 06:32:11.328647 4607 process.cpp:3779] Handling HTTP event for process 'slave(764)' with path: '/slave(764)/containers' I0617 06:32:11.331529 4608 http.cpp:1115] HTTP GET for /slave(764)/containers from 172.17.0.5:53170 I0617 06:32:11.331657 4608 http.cpp:936] Authorizing principal 'test-principal' to GET the '/containers' endpoint I0617 06:32:11.338492 4610 slave.cpp:818] Agent terminating [ OK ] Endpoint/SlaveEndpointTest.AuthorizedRequest/2 (51 ms) [ RUN ] Endpoint/SlaveEndpointTest.UnauthorizedRequest/0 I0617 06:32:11.355296 4586 containerizer.cpp:230] Using isolation: posix/cpu,posix/mem,filesystem/posix,network/cni,environment_secret W0617 06:32:11.356107 4586 backend.cpp:76] Failed to create 'overlay' backend: OverlayBackend requires root privileges W0617 06:32:11.356299 4586 backend.cpp:76] Failed to create 'bind' backend: BindBackend requires root privileges I0617 06:32:11.356343 4586 provisioner.cpp:255] Using default backend 'copy' I0617 06:32:11.361613 4609 slave.cpp:249] Mesos agent started on (765)@172.17.0.5:35435 I0617 06:32:11.361659 4609 slave.cpp:250] Flags at startup: --acls="" --appc_simple_discovery_uri_prefix="http://"; --appc_store_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_feMMdX/store/appc" --authenticate_http_readonly="true" --authenticate_http_readwrite="true" --authenticatee="crammd5" --authentication_backoff_factor="1secs" --authorizer="local" --cgroups_cpu_enable_pids_and_tids_count="false" --cgroups_enable_cfs="false" --cgroups_hierarchy="/sys/fs/cgroup" --cgroups_limit_swap="false" --cgroups_root="mesos" --container_disk_watch_interval="15secs" --containerizers="mesos" --credential="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_feMMdX/credential" --default_role="*" --disk_watch_interval="1mins" --docker="docker" --docker_kill_orphans="true" --docker_registry="https://registry-1.docker.io"; --docker_remove_delay="6hrs" --docker_socket="/var/run/docker.sock" --docker_stop_timeout="0ns" --docker_store_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_feMMdX/store/docker" --docker_volume_checkpoint_dir="/var/run/mesos/isolators/docker/volume" --enforce_container_disk_quota="false" --executor_registration_timeout="1mins" --executor_reregistration_timeout="2secs" --executor_shutdown_grace_period="5secs" --fetcher_cache_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_feMMdX/fetch" --fetcher_cache_size="2GB" --frameworks_home="" --gc_delay="1weeks" --gc_disk_headroom="0.1" --hadoop_home="" --help="false" --hostname_lookup="true" --http_command_executor="false" --http_credentials="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_feMMdX/http_credentials" --http_heartbeat_interval="30secs" --initialize_driver_logging="true" --isolation="posix/cpu,posix/mem" --launcher="posix" --launcher_dir="/mesos/mesos-1.4.0/_build/src" --logbufsecs="0" --logging_level="INFO" --max_completed_executors_per_framework="150" --oversubscribed_resources_interval="15secs" --perf_duration="10secs" --perf_interval="1mins" --port="5051" --qos_correction_interval_min="0ns" --quiet="false" --recover="reconnect" --recovery_timeout="15mins" --registration_backoff_factor="10ms" --resources="cpus:2;gpus:0;mem:1024;disk:1024;ports:[31000-32000]" --revocable_cpu_low_priority="true" --runtime_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_feMMdX" --sandbox_directory="/mnt/mesos/sandbox" --strict="true" --switch_user="true" --systemd_enable_support="true" --systemd_runtime_directory="/run/systemd/system" --version="false" --work_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_nz4T8W" I0617 06:32:11.362443 4609 credentials.hpp:86] Loading credential for authentication from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_feMMdX/credential' I0617 06:32:11.362709 4609 slave.cpp:282] Agent using credential for: test-principal I0617 06:32:11.362732 4609 credentials.hpp:37] Loading credentials for authentication from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_feMMdX/http_credentials' I0617 06:32:11.363085 4609 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readonly' I0617 06:32:11.363312 4609 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readwrite' I0617 06:32:11.365468 4609 slave.cpp:553] Agent resources: cpus(*):2; mem(*):1024; disk(*):1024; ports(*):[31000-32000] I0617 06:32:11.365617 4609 slave.cpp:561] Agent attributes: [ ] I0617 06:32:11.365635 4609 slave.cpp:566] Agent hostname: 6e18bf9189d3 I0617 06:32:11.365936 4606 status_update_manager.cpp:177] Pausing sending status updates I0617 06:32:11.368639 4610 state.cpp:62] Recovering state from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_0_nz4T8W/meta' I0617 06:32:11.369319 4608 status_update_manager.cpp:203] Recovering status update manager I0617 06:32:11.369657 4607 containerizer.cpp:582] Recovering containerizer I0617 06:32:11.372118 4610 provisioner.cpp:416] Provisioner recovery complete I0617 06:32:11.372802 4609 slave.cpp:6128] Finished recovery I0617 06:32:11.373453 4609 slave.cpp:6310] Querying resource estimator for oversubscribable resources I0617 06:32:11.373898 4611 slave.cpp:6324] Received oversubscribable resources {} from the resource estimator I0617 06:32:11.378410 4606 process.cpp:3779] Handling HTTP event for process 'slave(765)' with path: '/slave(765)/monitor/statistics' I0617 06:32:11.380872 4606 http.cpp:1115] HTTP GET for /slave(765)/monitor/statistics from 172.17.0.5:53172 I0617 06:32:11.381758 4606 http.cpp:936] Authorizing principal 'test-principal' to GET the '/monitor/statistics' endpoint I0617 06:32:11.386042 4611 slave.cpp:818] Agent terminating [ OK ] Endpoint/SlaveEndpointTest.UnauthorizedRequest/0 (46 ms) [ RUN ] Endpoint/SlaveEndpointTest.UnauthorizedRequest/1 I0617 06:32:11.401212 4586 containerizer.cpp:230] Using isolation: posix/cpu,posix/mem,filesystem/posix,network/cni,environment_secret W0617 06:32:11.402009 4586 backend.cpp:76] Failed to create 'overlay' backend: OverlayBackend requires root privileges W0617 06:32:11.402173 4586 backend.cpp:76] Failed to create 'bind' backend: BindBackend requires root privileges I0617 06:32:11.402256 4586 provisioner.cpp:255] Using default backend 'copy' I0617 06:32:11.409021 4607 slave.cpp:249] Mesos agent started on (766)@172.17.0.5:35435 I0617 06:32:11.409067 4607 slave.cpp:250] Flags at startup: --acls="" --appc_simple_discovery_uri_prefix="http://"; --appc_store_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_nk7LWX/store/appc" --authenticate_http_readonly="true" --authenticate_http_readwrite="true" --authenticatee="crammd5" --authentication_backoff_factor="1secs" --authorizer="local" --cgroups_cpu_enable_pids_and_tids_count="false" --cgroups_enable_cfs="false" --cgroups_hierarchy="/sys/fs/cgroup" --cgroups_limit_swap="false" --cgroups_root="mesos" --container_disk_watch_interval="15secs" --containerizers="mesos" --credential="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_nk7LWX/credential" --default_role="*" --disk_watch_interval="1mins" --docker="docker" --docker_kill_orphans="true" --docker_registry="https://registry-1.docker.io"; --docker_remove_delay="6hrs" --docker_socket="/var/run/docker.sock" --docker_stop_timeout="0ns" --docker_store_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_nk7LWX/store/docker" --docker_volume_checkpoint_dir="/var/run/mesos/isolators/docker/volume" --enforce_container_disk_quota="false" --executor_registration_timeout="1mins" --executor_reregistration_timeout="2secs" --executor_shutdown_grace_period="5secs" --fetcher_cache_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_nk7LWX/fetch" --fetcher_cache_size="2GB" --frameworks_home="" --gc_delay="1weeks" --gc_disk_headroom="0.1" --hadoop_home="" --help="false" --hostname_lookup="true" --http_command_executor="false" --http_credentials="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_nk7LWX/http_credentials" --http_heartbeat_interval="30secs" --initialize_driver_logging="true" --isolation="posix/cpu,posix/mem" --launcher="posix" --launcher_dir="/mesos/mesos-1.4.0/_build/src" --logbufsecs="0" --logging_level="INFO" --max_completed_executors_per_framework="150" --oversubscribed_resources_interval="15secs" --perf_duration="10secs" --perf_interval="1mins" --port="5051" --qos_correction_interval_min="0ns" --quiet="false" --recover="reconnect" --recovery_timeout="15mins" --registration_backoff_factor="10ms" --resources="cpus:2;gpus:0;mem:1024;disk:1024;ports:[31000-32000]" --revocable_cpu_low_priority="true" --runtime_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_nk7LWX" --sandbox_directory="/mnt/mesos/sandbox" --strict="true" --switch_user="true" --systemd_enable_support="true" --systemd_runtime_directory="/run/systemd/system" --version="false" --work_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_DPIqKX" I0617 06:32:11.409741 4607 credentials.hpp:86] Loading credential for authentication from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_nk7LWX/credential' I0617 06:32:11.409986 4607 slave.cpp:282] Agent using credential for: test-principal I0617 06:32:11.410007 4607 credentials.hpp:37] Loading credentials for authentication from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_nk7LWX/http_credentials' I0617 06:32:11.410348 4607 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readonly' I0617 06:32:11.410557 4607 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readwrite' I0617 06:32:11.413379 4607 slave.cpp:553] Agent resources: cpus(*):2; mem(*):1024; disk(*):1024; ports(*):[31000-32000] I0617 06:32:11.413578 4607 slave.cpp:561] Agent attributes: [ ] I0617 06:32:11.413646 4607 slave.cpp:566] Agent hostname: 6e18bf9189d3 I0617 06:32:11.414175 4609 status_update_manager.cpp:177] Pausing sending status updates I0617 06:32:11.417162 4611 state.cpp:62] Recovering state from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_1_DPIqKX/meta' I0617 06:32:11.417783 4611 status_update_manager.cpp:203] Recovering status update manager I0617 06:32:11.418033 4611 containerizer.cpp:582] Recovering containerizer I0617 06:32:11.420203 4612 provisioner.cpp:416] Provisioner recovery complete I0617 06:32:11.420888 4609 slave.cpp:6128] Finished recovery I0617 06:32:11.421564 4609 slave.cpp:6310] Querying resource estimator for oversubscribable resources I0617 06:32:11.422011 4609 slave.cpp:6324] Received oversubscribable resources {} from the resource estimator I0617 06:32:11.426460 4610 process.cpp:3779] Handling HTTP event for process 'slave(766)' with path: '/slave(766)/monitor/statistics.json' I0617 06:32:11.428715 4610 http.cpp:1115] HTTP GET for /slave(766)/monitor/statistics.json from 172.17.0.5:53178 I0617 06:32:11.428860 4610 http.cpp:936] Authorizing principal 'test-principal' to GET the '/monitor/statistics.json' endpoint I0617 06:32:11.432514 4610 slave.cpp:818] Agent terminating [ OK ] Endpoint/SlaveEndpointTest.UnauthorizedRequest/1 (47 ms) [ RUN ] Endpoint/SlaveEndpointTest.UnauthorizedRequest/2 I0617 06:32:11.449086 4586 containerizer.cpp:230] Using isolation: posix/cpu,posix/mem,filesystem/posix,network/cni,environment_secret W0617 06:32:11.449929 4586 backend.cpp:76] Failed to create 'overlay' backend: OverlayBackend requires root privileges W0617 06:32:11.450199 4586 backend.cpp:76] Failed to create 'bind' backend: BindBackend requires root privileges I0617 06:32:11.450260 4586 provisioner.cpp:255] Using default backend 'copy' I0617 06:32:11.456776 4612 slave.cpp:249] Mesos agent started on (767)@172.17.0.5:35435 I0617 06:32:11.457083 4612 slave.cpp:250] Flags at startup: --acls="" --appc_simple_discovery_uri_prefix="http://"; --appc_store_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XEGJaZ/store/appc" --authenticate_http_readonly="true" --authenticate_http_readwrite="true" --authenticatee="crammd5" --authentication_backoff_factor="1secs" --authorizer="local" --cgroups_cpu_enable_pids_and_tids_count="false" --cgroups_enable_cfs="false" --cgroups_hierarchy="/sys/fs/cgroup" --cgroups_limit_swap="false" --cgroups_root="mesos" --container_disk_watch_interval="15secs" --containerizers="mesos" --credential="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XEGJaZ/credential" --default_role="*" --disk_watch_interval="1mins" --docker="docker" --docker_kill_orphans="true" --docker_registry="https://registry-1.docker.io"; --docker_remove_delay="6hrs" --docker_socket="/var/run/docker.sock" --docker_stop_timeout="0ns" --docker_store_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XEGJaZ/store/docker" --docker_volume_checkpoint_dir="/var/run/mesos/isolators/docker/volume" --enforce_container_disk_quota="false" --executor_registration_timeout="1mins" --executor_reregistration_timeout="2secs" --executor_shutdown_grace_period="5secs" --fetcher_cache_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XEGJaZ/fetch" --fetcher_cache_size="2GB" --frameworks_home="" --gc_delay="1weeks" --gc_disk_headroom="0.1" --hadoop_home="" --help="false" --hostname_lookup="true" --http_command_executor="false" --http_credentials="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XEGJaZ/http_credentials" --http_heartbeat_interval="30secs" --initialize_driver_logging="true" --isolation="posix/cpu,posix/mem" --launcher="posix" --launcher_dir="/mesos/mesos-1.4.0/_build/src" --logbufsecs="0" --logging_level="INFO" --max_completed_executors_per_framework="150" --oversubscribed_resources_interval="15secs" --perf_duration="10secs" --perf_interval="1mins" --port="5051" --qos_correction_interval_min="0ns" --quiet="false" --recover="reconnect" --recovery_timeout="15mins" --registration_backoff_factor="10ms" --resources="cpus:2;gpus:0;mem:1024;disk:1024;ports:[31000-32000]" --revocable_cpu_low_priority="true" --runtime_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XEGJaZ" --sandbox_directory="/mnt/mesos/sandbox" --strict="true" --switch_user="true" --systemd_enable_support="true" --systemd_runtime_directory="/run/systemd/system" --version="false" --work_dir="/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XR4DQY" I0617 06:32:11.458078 4612 credentials.hpp:86] Loading credential for authentication from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XEGJaZ/credential' I0617 06:32:11.458598 4612 slave.cpp:282] Agent using credential for: test-principal I0617 06:32:11.458828 4612 credentials.hpp:37] Loading credentials for authentication from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XEGJaZ/http_credentials' I0617 06:32:11.459363 4612 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readonly' I0617 06:32:11.459812 4612 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readwrite' I0617 06:32:11.462200 4612 slave.cpp:553] Agent resources: cpus(*):2; mem(*):1024; disk(*):1024; ports(*):[31000-32000] I0617 06:32:11.462612 4612 slave.cpp:561] Agent attributes: [ ] I0617 06:32:11.462738 4612 slave.cpp:566] Agent hostname: 6e18bf9189d3 I0617 06:32:11.463085 4611 status_update_manager.cpp:177] Pausing sending status updates I0617 06:32:11.465234 4611 state.cpp:62] Recovering state from '/tmp/Endpoint_SlaveEndpointTest_UnauthorizedRequest_2_XR4DQY/meta' I0617 06:32:11.465868 4606 status_update_manager.cpp:203] Recovering status update manager I0617 06:32:11.466421 4608 containerizer.cpp:582] Recovering containerizer I0617 06:32:11.468806 4606 provisioner.cpp:416] Provisioner recovery complete I0617 06:32:11.469841 4606 slave.cpp:6128] Finished recovery I0617 06:32:11.470780 4606 slave.cpp:6310] Querying resource estimator for oversubscribable resources I0617 06:32:11.471927 4606 slave.cpp:6324] Received oversubscribable resources {} from the resource estimator I0617 06:32:11.476517 4608 process.cpp:3779] Handling HTTP event for process 'slave(767)' with path: '/slave(767)/containers' I0617 06:32:11.478936 4606 http.cpp:1115] HTTP GET for /slave(767)/containers from 172.17.0.5:53180 I0617 06:32:11.479223 4606 http.cpp:936] Authorizing principal 'test-principal' to GET the '/containers' endpoint I0617 06:32:11.484428 4605 slave.cpp:818] Agent terminating [ OK ] Endpoint/SlaveEndpointTest.UnauthorizedRequest/2 (50 ms) [ RUN ] Endpoint/SlaveEndpointTest.NoAuthorizer/0 I0617 06:32:11.501082 4586 containerizer.cpp:230] Using isolation: posix/cpu,posix/mem,filesystem/posix,network/cni,environment_secret W0617 06:32:11.502015 4586 backend.cpp:76] Failed to create 'overlay' backend: OverlayBackend requires root privileges W0617 06:32:11.502324 4586 backend.cpp:76] Failed to create 'bind' backend: BindBackend requires root privileges I0617 06:32:11.502418 4586 provisioner.cpp:255] Using default backend 'copy' I0617 06:32:11.505082 4586 cluster.cpp:448] Creating default 'local' authorizer I0617 06:32:11.509196 4605 slave.cpp:249] Mesos agent started on (768)@172.17.0.5:35435 I0617 06:32:11.509240 4605 slave.cpp:250] Flags at startup: --acls="" --appc_simple_discovery_uri_prefix="http://"; --appc_store_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_JfpoV0/store/appc" --authenticate_http_readonly="true" --authenticate_http_readwrite="true" --authenticatee="crammd5" --authentication_backoff_factor="1secs" --authorizer="local" --cgroups_cpu_enable_pids_and_tids_count="false" --cgroups_enable_cfs="false" --cgroups_hierarchy="/sys/fs/cgroup" --cgroups_limit_swap="false" --cgroups_root="mesos" --container_disk_watch_interval="15secs" --containerizers="mesos" --credential="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_JfpoV0/credential" --default_role="*" --disk_watch_interval="1mins" --docker="docker" --docker_kill_orphans="true" --docker_registry="https://registry-1.docker.io"; --docker_remove_delay="6hrs" --docker_socket="/var/run/docker.sock" --docker_stop_timeout="0ns" --docker_store_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_JfpoV0/store/docker" --docker_volume_checkpoint_dir="/var/run/mesos/isolators/docker/volume" --enforce_container_disk_quota="false" --executor_registration_timeout="1mins" --executor_reregistration_timeout="2secs" --executor_shutdown_grace_period="5secs" --fetcher_cache_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_JfpoV0/fetch" --fetcher_cache_size="2GB" --frameworks_home="" --gc_delay="1weeks" --gc_disk_headroom="0.1" --hadoop_home="" --help="false" --hostname_lookup="true" --http_command_executor="false" --http_credentials="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_JfpoV0/http_credentials" --http_heartbeat_interval="30secs" --initialize_driver_logging="true" --isolation="posix/cpu,posix/mem" --launcher="posix" --launcher_dir="/mesos/mesos-1.4.0/_build/src" --logbufsecs="0" --logging_level="INFO" --max_completed_executors_per_framework="150" --oversubscribed_resources_interval="15secs" --perf_duration="10secs" --perf_interval="1mins" --port="5051" --qos_correction_interval_min="0ns" --quiet="false" --recover="reconnect" --recovery_timeout="15mins" --registration_backoff_factor="10ms" --resources="cpus:2;gpus:0;mem:1024;disk:1024;ports:[31000-32000]" --revocable_cpu_low_priority="true" --runtime_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_JfpoV0" --sandbox_directory="/mnt/mesos/sandbox" --strict="true" --switch_user="true" --systemd_enable_support="true" --systemd_runtime_directory="/run/systemd/system" --version="false" --work_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_3CH4s0" I0617 06:32:11.509925 4605 credentials.hpp:86] Loading credential for authentication from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_JfpoV0/credential' I0617 06:32:11.510170 4605 slave.cpp:282] Agent using credential for: test-principal I0617 06:32:11.510192 4605 credentials.hpp:37] Loading credentials for authentication from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_JfpoV0/http_credentials' I0617 06:32:11.510536 4605 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readonly' I0617 06:32:11.510754 4605 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readwrite' I0617 06:32:11.512958 4605 slave.cpp:553] Agent resources: cpus(*):2; mem(*):1024; disk(*):1024; ports(*):[31000-32000] I0617 06:32:11.513103 4605 slave.cpp:561] Agent attributes: [ ] I0617 06:32:11.513133 4605 slave.cpp:566] Agent hostname: 6e18bf9189d3 I0617 06:32:11.513506 4608 status_update_manager.cpp:177] Pausing sending status updates I0617 06:32:11.515599 4605 state.cpp:62] Recovering state from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_0_3CH4s0/meta' I0617 06:32:11.516264 4607 status_update_manager.cpp:203] Recovering status update manager I0617 06:32:11.516660 4606 containerizer.cpp:582] Recovering containerizer I0617 06:32:11.519160 4607 provisioner.cpp:416] Provisioner recovery complete I0617 06:32:11.519982 4607 slave.cpp:6128] Finished recovery I0617 06:32:11.520563 4607 slave.cpp:6310] Querying resource estimator for oversubscribable resources I0617 06:32:11.521430 4607 slave.cpp:6324] Received oversubscribable resources {} from the resource estimator I0617 06:32:11.525760 4612 process.cpp:3779] Handling HTTP event for process 'slave(768)' with path: '/slave(768)/monitor/statistics' I0617 06:32:11.528055 4611 http.cpp:1115] HTTP GET for /slave(768)/monitor/statistics from 172.17.0.5:53184 I0617 06:32:11.528182 4611 http.cpp:936] Authorizing principal 'test-principal' to GET the '/monitor/statistics' endpoint I0617 06:32:11.535894 4610 slave.cpp:818] Agent terminating [ OK ] Endpoint/SlaveEndpointTest.NoAuthorizer/0 (50 ms) [ RUN ] Endpoint/SlaveEndpointTest.NoAuthorizer/1 I0617 06:32:11.551710 4586 containerizer.cpp:230] Using isolation: posix/cpu,posix/mem,filesystem/posix,network/cni,environment_secret W0617 06:32:11.552628 4586 backend.cpp:76] Failed to create 'overlay' backend: OverlayBackend requires root privileges W0617 06:32:11.553205 4586 backend.cpp:76] Failed to create 'bind' backend: BindBackend requires root privileges I0617 06:32:11.553272 4586 provisioner.cpp:255] Using default backend 'copy' I0617 06:32:11.557489 4586 cluster.cpp:448] Creating default 'local' authorizer I0617 06:32:11.564855 4612 slave.cpp:249] Mesos agent started on (769)@172.17.0.5:35435 I0617 06:32:11.564899 4612 slave.cpp:250] Flags at startup: --acls="" --appc_simple_discovery_uri_prefix="http://"; --appc_store_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_zU4Yc3/store/appc" --authenticate_http_readonly="true" --authenticate_http_readwrite="true" --authenticatee="crammd5" --authentication_backoff_factor="1secs" --authorizer="local" --cgroups_cpu_enable_pids_and_tids_count="false" --cgroups_enable_cfs="false" --cgroups_hierarchy="/sys/fs/cgroup" --cgroups_limit_swap="false" --cgroups_root="mesos" --container_disk_watch_interval="15secs" --containerizers="mesos" --credential="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_zU4Yc3/credential" --default_role="*" --disk_watch_interval="1mins" --docker="docker" --docker_kill_orphans="true" --docker_registry="https://registry-1.docker.io"; --docker_remove_delay="6hrs" --docker_socket="/var/run/docker.sock" --docker_stop_timeout="0ns" --docker_store_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_zU4Yc3/store/docker" --docker_volume_checkpoint_dir="/var/run/mesos/isolators/docker/volume" --enforce_container_disk_quota="false" --executor_registration_timeout="1mins" --executor_reregistration_timeout="2secs" --executor_shutdown_grace_period="5secs" --fetcher_cache_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_zU4Yc3/fetch" --fetcher_cache_size="2GB" --frameworks_home="" --gc_delay="1weeks" --gc_disk_headroom="0.1" --hadoop_home="" --help="false" --hostname_lookup="true" --http_command_executor="false" --http_credentials="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_zU4Yc3/http_credentials" --http_heartbeat_interval="30secs" --initialize_driver_logging="true" --isolation="posix/cpu,posix/mem" --launcher="posix" --launcher_dir="/mesos/mesos-1.4.0/_build/src" --logbufsecs="0" --logging_level="INFO" --max_completed_executors_per_framework="150" --oversubscribed_resources_interval="15secs" --perf_duration="10secs" --perf_interval="1mins" --port="5051" --qos_correction_interval_min="0ns" --quiet="false" --recover="reconnect" --recovery_timeout="15mins" --registration_backoff_factor="10ms" --resources="cpus:2;gpus:0;mem:1024;disk:1024;ports:[31000-32000]" --revocable_cpu_low_priority="true" --runtime_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_zU4Yc3" --sandbox_directory="/mnt/mesos/sandbox" --strict="true" --switch_user="true" --systemd_enable_support="true" --systemd_runtime_directory="/run/systemd/system" --version="false" --work_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_dCQnC2" I0617 06:32:11.565630 4612 credentials.hpp:86] Loading credential for authentication from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_zU4Yc3/credential' I0617 06:32:11.565883 4612 slave.cpp:282] Agent using credential for: test-principal I0617 06:32:11.565904 4612 credentials.hpp:37] Loading credentials for authentication from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_zU4Yc3/http_credentials' I0617 06:32:11.566246 4612 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readonly' I0617 06:32:11.566512 4612 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readwrite' I0617 06:32:11.568698 4612 slave.cpp:553] Agent resources: cpus(*):2; mem(*):1024; disk(*):1024; ports(*):[31000-32000] I0617 06:32:11.568847 4612 slave.cpp:561] Agent attributes: [ ] I0617 06:32:11.568867 4612 slave.cpp:566] Agent hostname: 6e18bf9189d3 I0617 06:32:11.569178 4609 status_update_manager.cpp:177] Pausing sending status updates I0617 06:32:11.571079 4608 state.cpp:62] Recovering state from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_1_dCQnC2/meta' I0617 06:32:11.571651 4608 status_update_manager.cpp:203] Recovering status update manager I0617 06:32:11.571919 4608 containerizer.cpp:582] Recovering containerizer I0617 06:32:11.574275 4610 provisioner.cpp:416] Provisioner recovery complete I0617 06:32:11.574960 4605 slave.cpp:6128] Finished recovery I0617 06:32:11.575615 4605 slave.cpp:6310] Querying resource estimator for oversubscribable resources I0617 06:32:11.576191 4610 slave.cpp:6324] Received oversubscribable resources {} from the resource estimator I0617 06:32:11.580518 4609 process.cpp:3779] Handling HTTP event for process 'slave(769)' with path: '/slave(769)/monitor/statistics.json' I0617 06:32:11.582679 4610 http.cpp:1115] HTTP GET for /slave(769)/monitor/statistics.json from 172.17.0.5:53188 I0617 06:32:11.582819 4610 http.cpp:936] Authorizing principal 'test-principal' to GET the '/monitor/statistics.json' endpoint I0617 06:32:11.587929 4609 slave.cpp:818] Agent terminating [ OK ] Endpoint/SlaveEndpointTest.NoAuthorizer/1 (52 ms) [ RUN ] Endpoint/SlaveEndpointTest.NoAuthorizer/2 I0617 06:32:11.603716 4586 containerizer.cpp:230] Using isolation: posix/cpu,posix/mem,filesystem/posix,network/cni,environment_secret W0617 06:32:11.604578 4586 backend.cpp:76] Failed to create 'overlay' backend: OverlayBackend requires root privileges W0617 06:32:11.604748 4586 backend.cpp:76] Failed to create 'bind' backend: BindBackend requires root privileges I0617 06:32:11.604789 4586 provisioner.cpp:255] Using default backend 'copy' I0617 06:32:11.607316 4586 cluster.cpp:448] Creating default 'local' authorizer I0617 06:32:11.609993 4607 slave.cpp:249] Mesos agent started on (770)@172.17.0.5:35435 I0617 06:32:11.610038 4607 slave.cpp:250] Flags at startup: --acls="" --appc_simple_discovery_uri_prefix="http://"; --appc_store_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FBv125/store/appc" --authenticate_http_readonly="true" --authenticate_http_readwrite="true" --authenticatee="crammd5" --authentication_backoff_factor="1secs" --authorizer="local" --cgroups_cpu_enable_pids_and_tids_count="false" --cgroups_enable_cfs="false" --cgroups_hierarchy="/sys/fs/cgroup" --cgroups_limit_swap="false" --cgroups_root="mesos" --container_disk_watch_interval="15secs" --containerizers="mesos" --credential="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FBv125/credential" --default_role="*" --disk_watch_interval="1mins" --docker="docker" --docker_kill_orphans="true" --docker_registry="https://registry-1.docker.io"; --docker_remove_delay="6hrs" --docker_socket="/var/run/docker.sock" --docker_stop_timeout="0ns" --docker_store_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FBv125/store/docker" --docker_volume_checkpoint_dir="/var/run/mesos/isolators/docker/volume" --enforce_container_disk_quota="false" --executor_registration_timeout="1mins" --executor_reregistration_timeout="2secs" --executor_shutdown_grace_period="5secs" --fetcher_cache_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FBv125/fetch" --fetcher_cache_size="2GB" --frameworks_home="" --gc_delay="1weeks" --gc_disk_headroom="0.1" --hadoop_home="" --help="false" --hostname_lookup="true" --http_command_executor="false" --http_credentials="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FBv125/http_credentials" --http_heartbeat_interval="30secs" --initialize_driver_logging="true" --isolation="posix/cpu,posix/mem" --launcher="posix" --launcher_dir="/mesos/mesos-1.4.0/_build/src" --logbufsecs="0" --logging_level="INFO" --max_completed_executors_per_framework="150" --oversubscribed_resources_interval="15secs" --perf_duration="10secs" --perf_interval="1mins" --port="5051" --qos_correction_interval_min="0ns" --quiet="false" --recover="reconnect" --recovery_timeout="15mins" --registration_backoff_factor="10ms" --resources="cpus:2;gpus:0;mem:1024;disk:1024;ports:[31000-32000]" --revocable_cpu_low_priority="true" --runtime_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FBv125" --sandbox_directory="/mnt/mesos/sandbox" --strict="true" --switch_user="true" --systemd_enable_support="true" --systemd_runtime_directory="/run/systemd/system" --version="false" --work_dir="/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FgsVj5" I0617 06:32:11.610750 4607 credentials.hpp:86] Loading credential for authentication from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FBv125/credential' I0617 06:32:11.610996 4607 slave.cpp:282] Agent using credential for: test-principal I0617 06:32:11.611018 4607 credentials.hpp:37] Loading credentials for authentication from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FBv125/http_credentials' I0617 06:32:11.611361 4607 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readonly' I0617 06:32:11.611588 4607 http.cpp:975] Creating default 'basic' HTTP authenticator for realm 'mesos-agent-readwrite' I0617 06:32:11.613688 4607 slave.cpp:553] Agent resources: cpus(*):2; mem(*):1024; disk(*):1024; ports(*):[31000-32000] I0617 06:32:11.613828 4607 slave.cpp:561] Agent attributes: [ ] I0617 06:32:11.613931 4607 slave.cpp:566] Agent hostname: 6e18bf9189d3 I0617 06:32:11.614174 4605 status_update_manager.cpp:177] Pausing sending status updates I0617 06:32:11.618366 4612 state.cpp:62] Recovering state from '/tmp/Endpoint_SlaveEndpointTest_NoAuthorizer_2_FgsVj5/meta' I0617 06:32:11.619120 4612 status_update_manager.cpp:203] Recovering status update manager I0617 06:32:11.619338 4612 containerizer.cpp:582] Recovering containerizer I0617 06:32:11.622189 4612 provisioner.cpp:416] Provisioner recovery complete I0617 06:32:11.622951 4612 slave.cpp:6128] Finished recovery I0617 06:32:11.624357 4612 slave.cpp:6310] Querying resource estimator for oversubscribable resources I0617 06:32:11.624855 4610 slave.cpp:6324] Received oversubscribable resources {} from the resource estimator I0617 06:32:11.629745 4610 process.cpp:3779] Handling HTTP event for process 'slave(770)' with path: '/slave(770)/containers' I0617 06:32:11.631922 4605 http.cpp:1115] HTTP GET for /slave(770)/containers from 172.17.0.5:53190 I0617 06:32:11.632479 4605 http.cpp:936] Authorizing principal 'test-principal' to GET the '/containers' endpoint I0617 06:32:11.639111 4586 slave.cpp:818] Agent terminating [ OK ] Endpoint/SlaveEndpointTest.NoAuthorizer/2 (52 ms) [----------] 9 tests from Endpoint/SlaveEndpointTest (473 ms total) [----------] Global test environment tear-down [==========] 1610 tests from 176 test cases ran. (732340 ms total) [ PASSED ] 1606 tests. [ FAILED ] 4 tests, listed below: [ FAILED ] DefaultExecutorCheckTest.CommandCheckDeliveredAndReconciled [ FAILED ] DefaultExecutorCheckTest.CommandCheckStatusChange [ FAILED ] DefaultExecutorCheckTest.CommandCheckSeesParentsEnv [ FAILED ] DefaultExecutorCheckTest.CommandCheckSharesWorkDirWithTask 4 FAILED TESTS YOU HAVE 20 DISABLED TESTS E0617 06:32:11.794342 4613 process.cpp:968] Failed to accept socket: future discarded make[4]: *** [check-local] Error 1 make[4]: Leaving directory `/mesos/mesos-1.4.0/_build/src' make[3]: *** [check-am] Error 2 make[3]: Leaving directory `/mesos/mesos-1.4.0/_build/src' make[2]: *** [check] Error 2 make[2]: Leaving directory `/mesos/mesos-1.4.0/_build/src' make[1]: *** [check-recursive] Error 1 make[1]: Leaving directory `/mesos/mesos-1.4.0/_build' make: *** [distcheck] Error 1 + docker rmi mesos-1497674578-10918 Untagged: mesos-1497674578-10918:latest Deleted: sha256:6593a3bc47e7b0676e065754e5f16e5f9870e49196b08fbe1077579aed9f8725 Deleted: sha256:914a5c833dc6c58064555d3e3efa43574410620fb3b981b442908e2ed0f3ccd3 Deleted: sha256:7e059562bcfbf54d53b195c662b4af8cdd64de6195bdf87cb411a1b9a38908e0 Deleted: sha256:090a311d3357ae3a7bec7701220345a40f15140ce490e6e2d88ee3ab56feb158 Deleted: sha256:72fcc007b5c36d7fb2eb3f240eed9356ac26865695a0839a29c62da6974b5695 Deleted: sha256:4577827ddf0d94b714476ce8dd0d667c14e04e708489dde601c2ad1d27c1993c Deleted: sha256:f5cfb823670aebe24f478ffd4a7f2e0b2b015c73ff3efbf0c6f9f77a55f3ac31 Deleted: sha256:0c50865f82ad6552ec8336761d2f492a4a2dddfa580dbb43c762d3aaf6d68d42 Deleted: sha256:fcc8078541a10c43de124ca372fd5b8efb05c1a8d1d0655892e8d23cb6c7a638 Deleted: sha256:4ed57ec755729519c24dda017cd26c81c5cbd8674a9f4fbd7a22ba64273b47c0 Deleted: sha256:be1fee23a13bfbf2a47e0aab13f2abf1cd7723182042be5c879b50d37d302c1d Deleted: sha256:1e953f904a4ff80058c9ea624b207e765eb799327d4d7d03a2f68a06070ae331 Deleted: sha256:de1dedf282f00f0274d1c6da865b2ffab1ef354d650457f8b14d39d110fbdd86 Deleted: sha256:bbb82235371105846cf1ed8ebf3be50077acdeddb118d9dcd76f5ec7b07588a9 Deleted: sha256:54d334b5cb966a5740c74a5d80acdaaf13caf35fa1a737c501bac6f36319adef Deleted: sha256:abd256fd83a954077fbc97a2aba4939303e02f891aa82cfbfaf858c4e8dc90fd Deleted: sha256:cf5a90523a1f3b0707f4b1cfba5d8d0d07c750f0e821b11aaf24b0bc0f7d6b07 Deleted: sha256:b8931fc513725eeed06cefb926aa8ef8c0f9d5d5fcafd837b5820d8575971d51 Deleted: sha256:3502d200d389a997418b12ebdec65a68e6d728b136c19de82e473c2966a8bfe1 Deleted: sha256:2d485a1233822588fa8809052284832f8af3839f67232e2192d2060ec66a2984 Deleted: sha256:428038d7bb0a0530c4452a9baaa444e014b88ef017582db685e0b9183d7a63f8 Deleted: sha256:d5c8e345a782ff2c4184d6cf08e769f706ca7d38eb8978a99b5f4ac03d8416cf Deleted: sha256:8a8c93eb3eeb5445b98d61d63b71a65a617ea14215c122f8d37ef87d0ed0831e Deleted: sha256:de0d572639f664e060c641f05535d5cec225eb9f70beb100e907ac51d0d8a651 Build step 'Execute shell' marked build as failure
