-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/53418/#review154677
-----------------------------------------------------------



I'm not an Apache member or comitter, but I found this review and thought I'd 
give you some feedback. Just minor nits, mostly lgtm to me.


src/main/python/apache/thermos/common/process_util.py (line 53)
<https://reviews.apache.org/r/53418/#comment224342>

    typo, should be "processes"



src/main/python/apache/thermos/common/process_util.py (line 64)
<https://reviews.apache.org/r/53418/#comment224343>

    what if this fails? e.g. libc cannot be found for some reason



src/main/python/apache/thermos/core/helper.py (lines 235 - 239)
<https://reviews.apache.org/r/53418/#comment224346>

    this is fine how you have it, or you could do:
    
    ```
    all_pids = set(c.pid for c in psutil.Process().children())
    orphaned_pids = all_pids - coordinator_pids
    ```
    
    same applies to getting the coordinator_pids: if you like, you can use a 
generator comprehension for brevity.
    
    no strong feeling either way



src/main/python/apache/thermos/core/helper.py (line 241)
<https://reviews.apache.org/r/53418/#comment224347>

    nit: this should be
    
    ```
    log.debug("Orphaned pids detected: %s", orphaned_pids)
    ```



src/main/python/apache/thermos/core/helper.py (line 243)
<https://reviews.apache.org/r/53418/#comment224348>

    same, do not use string interpolation with log messages, use varargs



src/main/python/apache/thermos/core/process.py (lines 315 - 317)
<https://reviews.apache.org/r/53418/#comment224350>

    Do you need to check if this is available? This feature is only available 
since Linux 3.4. Not sure what your policy is on this.



src/test/sh/org/apache/aurora/e2e/test_end_to_end.sh (line 79)
<https://reviews.apache.org/r/53418/#comment224351>

    i would do:
    
    ```
    for i in {1..10}; do
    ```
    
    which is available in bash



src/test/sh/org/apache/aurora/e2e/test_end_to_end.sh (line 87)
<https://reviews.apache.org/r/53418/#comment224352>

    no quotes necessary here, either for `$_success` or `1`. at least the 
quotes around 1 feel weird to me, especially given that you're using `-ne` 
instead of `!=`



src/test/sh/org/apache/aurora/e2e/test_end_to_end.sh (line 412)
<https://reviews.apache.org/r/53418/#comment224354>

    fyi you're not quoting any variables throughout here, but i assume that's 
safe to do from the test context


- Evan Klitzke


On Nov. 3, 2016, 2:53 a.m., Zameer Manji wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/53418/
> -----------------------------------------------------------
> 
> (Updated Nov. 3, 2016, 2:53 a.m.)
> 
> 
> Review request for Aurora, Joshua Cohen and Stephan Erb.
> 
> 
> Bugs: AURORA-1808
>     https://issues.apache.org/jira/browse/AURORA-1808
> 
> 
> Repository: aurora
> 
> 
> Description
> -------
> 
> # Problem
> 
> Processes can deamonize and escape the supervision of a coordinator. Using 
> the Docker Containerizer or the Mesos Containerizer with pid isolation means 
> that the processes will be come reparented to the sh process that launches 
> the executor. For example:
> 
> ```
> root@aurora:/# ps xf
>   PID TTY      STAT   TIME COMMAND
>    48 ?        Ss     0:00 /bin/bash
>    86 ?        R+     0:00  _ ps xf
>     1 ?        Ss     0:00 /bin/sh -c ${MESOS_SANDBOX=.}/thermos_executor.pex 
> --announcer-ensemble localhost:2181 --announcer-zookeeper-auth-config 
> /home/vagrant/aurora/examples/va
>     5 ?        Sl     0:02 python2.7 /mnt/mesos/sandbox/thermos_executor.pex 
> --announcer-ensemble localhost:2181 --announcer-zookeeper-auth-config 
> /home/vagrant/aurora/examples/vag
>    23 ?        S      0:00  _ /usr/local/bin/python2.7 
> /mnt/mesos/sandbox/thermos_runner.pex 
> --task_id=www-data-devel-hello_docker_engine-0-bde5cdc7-8685-46fd-9078-4a86bd5be152
>  --
>    29 ?        Ss     0:00      _ /usr/local/bin/python2.7 
> /mnt/mesos/sandbox/thermos_runner.pex 
> --task_id=www-data-devel-hello_docker_engine-0-bde5cdc7-8685-46fd-9078-4a86bd5be15
>    32 ?        S      0:00      |   _ /bin/bash -c      while true; do       
> echo hello world       sleep 10     done
>    81 ?        S      0:00      |       _ sleep 10
>    31 ?        Ss     0:00      _ /usr/local/bin/python2.7 
> /mnt/mesos/sandbox/thermos_runner.pex 
> --task_id=www-data-devel-hello_docker_engine-0-bde5cdc7-8685-46fd-9078-4a86bd5be15
>    33 ?        S      0:00          _ /bin/bash -c      while true; do       
> echo hello world       sleep 10     done
>    82 ?        S      0:00              _ sleep 10
>    47 ?        S      0:00 python ./daemon.py
> ```
> 
> # Solution
> 
> Ensure processes that escape the supervision of the coordinator reparent to 
> the runner who can send signals to them on task tear down. We do this by 
> using the `PR_SET_CHILD_SUBREAPER` flag of `prctl(2)`.
> 
> After this change the process tree looks like:
> ```
> root@aurora:/# ps xf
>   PID TTY      STAT   TIME COMMAND
>    66 ?        Ss     0:00 /bin/bash
>    70 ?        R+     0:00  _ ps xf
>     1 ?        Ss     0:00 /bin/sh -c ${MESOS_SANDBOX=.}/thermos_executor.pex 
> --announcer-ensemble localhost:2181 --announcer-zookeeper-auth-config 
> /home/vagrant/aurora/examples/va
>     5 ?        Sl     0:02 python2.7 /mnt/mesos/sandbox/thermos_executor.pex 
> --announcer-ensemble localhost:2181 --announcer-zookeeper-auth-config 
> /home/vagrant/aurora/examples/vag
>    23 ?        S      0:00  _ /usr/local/bin/python2.7 
> /mnt/mesos/sandbox/thermos_runner.pex 
> --task_id=www-data-devel-hello_docker_engine-0-721406db-00f5-4c0c-915e-1dbc5568b849
>  --
>    33 ?        Ss     0:00      _ /usr/local/bin/python2.7 
> /mnt/mesos/sandbox/thermos_runner.pex 
> --task_id=www-data-devel-hello_docker_engine-0-721406db-00f5-4c0c-915e-1dbc5568b84
>    40 ?        S      0:00      |   _ /bin/bash -c      while true; do       
> echo hello world       sleep 10     done
>    63 ?        S      0:00      |       _ sleep 10
>    36 ?        Ss     0:00      _ /usr/local/bin/python2.7 
> /mnt/mesos/sandbox/thermos_runner.pex 
> --task_id=www-data-devel-hello_docker_engine-0-721406db-00f5-4c0c-915e-1dbc5568b84
>    37 ?        S      0:00      |   _ /bin/bash -c      while true; do       
> echo hello world       sleep 10     done
>    62 ?        S      0:00      |       _ sleep 10
>    55 ?        S      0:00      _ python ./daemon.py
> 
> ```
> 
> Now the runner is aware of the reparented procesess can can tear it down 
> cleanly with a `SIGTERM`.
> 
> 
> Diffs
> -----
> 
>   src/main/python/apache/thermos/common/process_util.py 
> abd2c0ef35858d13971319b0a7436ce2293824ce 
>   src/main/python/apache/thermos/core/helper.py 
> 68855e1e54ba1cd4456e18a36fb237ce6a468c34 
>   src/main/python/apache/thermos/core/process.py 
> 3ec43e2719ef97026f399c4b2aa23002559b3153 
>   src/main/python/apache/thermos/core/runner.py 
> 7b9013d11f6ff4172b6b7bf56e62299b0d11c977 
>   src/test/sh/org/apache/aurora/e2e/test_daemonizing_process.aurora 
> PRE-CREATION 
>   src/test/sh/org/apache/aurora/e2e/test_end_to_end.sh 
> 67702d2c0f2e18ee10dcb798b6d421050bd7d4ca 
> 
> Diff: https://reviews.apache.org/r/53418/diff/
> 
> 
> Testing
> -------
> 
> src/test/sh/org/apache/aurora/e2e/test_end_to_end.sh
> 
> 
> Thanks,
> 
> Zameer Manji
> 
>

Reply via email to