----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/75080/ -----------------------------------------------------------
Review request for mesos. Repository: mesos Description ------- Currently, if we try to attach device ebpf files to the same cgroup multiple times, they will all be attached, and they will all be run when a device requests access. This conflicts with our design to have one ebpf file per cgroup that represents all the files they want to allow or deny, where that file is updated when the cgroup adds or removes a device. So we add a patch to atomically replace any existing ebpf file already attached to our target cgroup using our new ebpf file. Diffs ----- src/linux/ebpf.cpp 3f7f74df25dbf35720cd5f6c19644173552d5b82 src/tests/containerizer/cgroups2_tests.cpp cb1e229f7f40aa71f57417c33fccb2cfb313a1f5 Diff: https://reviews.apache.org/r/75080/diff/1/ Testing ------- Thanks, Jason Zhou
