Yes, but it will also make that data available in mesos web UI. I need this data to be available only for task process.
On 30 November 2015 at 16:20, Shuai Lin <[email protected]> wrote: > Also mesos supports specifying a list of uris in the command info, which > you can manipulate in your framework, and mesos would fetch files from > those uris into the task's sandbox. > > https://github.com/apache/mesos/blob/b2b0eed/include/mesos/mesos.proto#L391. > > > On Mon, Nov 30, 2015 at 7:53 PM, tommy xiao <[email protected]> wrote: > >> if the external volume is valid, we can use hdfs as alternative service to >> provide the storage solution. >> >> 2015-11-30 19:34 GMT+08:00 Vaibhav Khanduja <[email protected]>: >> >> > One possible way could be map an external volume and make the certificate >> > available on the volume. The application can poll the file, and presence >> of >> > file can trigger alert to read it. >> > 2cnts >> > >> > On Mon, Nov 30, 2015 at 4:56 PM, tommy xiao <[email protected]> wrote: >> > >> > > Haosdent's suggest is not ideal way. >> > > >> > > 2015-11-30 0:28 GMT+08:00 Jojy Varghese <[email protected]>: >> > > >> > > > Haosdent is right that “nsenter” is used by docker users but wanted >> to >> > > add >> > > > that it is not a docker only command. It is a linux utility that can >> be >> > > > used to enter the namespaces of processes using their “procfs” files >> > [1]. >> > > > Mesos containerizer can be configured to use linux isolators >> > (filesystem >> > > > for example) which uses namespaces. So these namespaces (say mount >> > > > namespace) can be then entered using “nsenter”. >> > > > If i understand what you are trying to achieve, the certificates can >> > be >> > > > placed into the container by entering the mount namespace of the >> > > container >> > > > process. Mount namespace will give you view of the file system as >> > viewed >> > > by >> > > > the container process. >> > > > >> > > > -Jojy >> > > > >> > > > [1] http://man7.org/linux/man-pages/man1/nsenter.1.html < >> > > > http://man7.org/linux/man-pages/man1/nsenter.1.html> >> > > > >> > > > >> > > > >> > > > > On Nov 29, 2015, at 4:51 AM, haosdent <[email protected]> wrote: >> > > > > >> > > > > If you use Docker container, you could use "nsenter" command >> > > > > https://docs.docker.com/engine/reference/commandline/exec/ . But >> > > because >> > > > > you use Mesos container, I think in your task, you need send the >> data >> > > to >> > > > > some store, maybe just print data to task logs or save them in >> > > database. >> > > > So >> > > > > that we could inspect them outside Mesos container. >> > > > > >> > > > > On Sun, Nov 29, 2015 at 8:39 PM, Shuai Lin <[email protected] >> > >> > > > wrote: >> > > > > >> > > > >> This ticket may be related: >> > > > >> https://issues.apache.org/jira/browse/MESOS-2724 >> > > > >> "Support running custom commands on slaves when launching a docker >> > > > >> container" >> > > > >> >> > > > >> On Sun, Nov 29, 2015 at 6:13 PM, Adam Medziński < >> > > > [email protected]> >> > > > >> wrote: >> > > > >> >> > > > >>> So if I understand all correctly - I can (as Sargun Dhillon >> > suggests) >> > > > >>> write my own mesos hook and inject data through environment >> > > variables, >> > > > >>> or try to use nsenter if I need something more sophisticated? >> > > > >>> >> > > > >>> On 28 November 2015 at 17:23, Jojy Varghese <[email protected]> >> > > > wrote: >> > > > >>>> Although its not possible today directly using Mesos, we could >> > > always >> > > > >>> use “nsenter” to enter the container namespace and do things. I >> > > haven’t >> > > > >>> tried it myself but conceptually thats the way to do it. >> > > > >>>> >> > > > >>>> -Jojy >> > > > >>>> >> > > > >>>> >> > > > >>>>> On Nov 28, 2015, at 3:30 AM, Sargun Dhillon <[email protected]> >> > > > wrote: >> > > > >>>>> >> > > > >>>>> You can do this using Mesos Modules - Documented here: >> > > > >>>>> http://mesos.apache.org/documentation/latest/modules/ >> > > > >>>>> >> > > > >>>>> I think you're probably looking at writing a hooks module for >> the >> > > > >>>>> agent, and taking advantage of the >> > > slaveExecutorEnvironmentDecorator >> > > > >>>>> callback. >> > > > >>>>> >> > > > >>>>> On Sat, Nov 28, 2015 at 3:12 AM, tommy xiao <[email protected]> >> > > > wrote: >> > > > >>>>>> feel no way, you need some tricks on it. >> > > > >>>>>> >> > > > >>>>>> 2015-11-27 19:23 GMT+08:00 Adam Medziński < >> > > [email protected] >> > > > >>> : >> > > > >>>>>> >> > > > >>>>>>> It is possible to inject dynamically generated data (for >> > example >> > > > >>>>>>> certificate generated for task) into mesos container? Data >> > should >> > > > be >> > > > >>>>>>> available only to task process. >> > > > >>>>>>> >> > > > >>>>>>> -- >> > > > >>>>>>> Best Regards, >> > > > >>>>>>> Adam Medziński >> > > > >>>>>>> >> > > > >>>>>> >> > > > >>>>>> >> > > > >>>>>> >> > > > >>>>>> -- >> > > > >>>>>> Deshi Xiao >> > > > >>>>>> Twitter: xds2000 >> > > > >>>>>> E-mail: xiaods(AT)gmail.com >> > > > >>>> >> > > > >>> >> > > > >>> >> > > > >>> >> > > > >>> -- >> > > > >>> Best Regards, >> > > > >>> Adam Medziński >> > > > >>> >> > > > >> >> > > > > >> > > > > >> > > > > >> > > > > -- >> > > > > Best Regards, >> > > > > Haosdent Huang >> > > > >> > > > >> > > >> > > >> > > -- >> > > Deshi Xiao >> > > Twitter: xds2000 >> > > E-mail: xiaods(AT)gmail.com >> > > >> > >> >> >> >> -- >> Deshi Xiao >> Twitter: xds2000 >> E-mail: xiaods(AT)gmail.com >> -- Best Regards, Adam Medziński
