[
https://issues.apache.org/jira/browse/MESOS-6526?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15648386#comment-15648386
]
Yan Xu commented on MESOS-6526:
-------------------------------
master branch
{noformat:title=}
commit ee083067551bc324b6e4b3285dedf15f3b4a07d9
Author: Jiang Yan Xu <[email protected]>
Date: Fri Nov 4 00:20:45 2016 -0700
Used an environment variable to pass command environment.
Review: https://reviews.apache.org/r/53500
{noformat}
1.1.x branch
{noformat:title=}
commit 64250c22b4824f53da39c12657c0f20256e7b54d
Author: Jiang Yan Xu <[email protected]>
Date: Fri Nov 4 00:20:45 2016 -0700
Used an environment variable to pass command environment.
Review: https://reviews.apache.org/r/53500
{noformat}
Will resolve the ticket after 1.1.0 vote completes to see where 1.1 version
this ticket lands
> `mesos-containerizer launch --environment` exposes executor env vars in `ps`.
> -----------------------------------------------------------------------------
>
> Key: MESOS-6526
> URL: https://issues.apache.org/jira/browse/MESOS-6526
> Project: Mesos
> Issue Type: Bug
> Components: containerization
> Affects Versions: 1.1.0
> Reporter: Yan Xu
> Assignee: Yan Xu
> Priority: Critical
>
> With MESOS-6323, the helper {{mesos-containerizer launch}} takes a
> `--environment` flag for the env vars used by the executor. This is
> unpleasant because its a common practice that people use env vars to hide
> configs that are sensitive and now it's visible to non-root users on the host
> with a {{ps}} command.
> Given that we want to separate the environments of {{mesos-containerizer
> launch}} and the executor itself, perhaps we can just package and serialize
> the executor env vars in one env var {{MESOS_EXECUTOR_ENVIRONMENT}} and pass
> that to {{mesos-containerizer launch}} which could then get it through a flag
> the usual way.
> In general Mesos should do more to protect env vars but I'll file separate
> issues for them.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
