Re: [VOTE] Release Apache Mesos 1.0.4 (rc2)

[Benjamin Mahler]

+1 make check passes on macOS 10.12.4 with clang

On Tue, May 2, 2017 at 12:04 PM, Vinod Kone  wrote:

> Hi all,
>
>
> Please vote on releasing the following candidate as Apache Mesos 1.0.4.
>
>
> 1.0.4 includes the following:
>
> 
> 
>
> * [MESOS-2537] - AC_ARG_ENABLED checks are broken
>
>
> * [MESOS-6606] - Reject optimized builds with libcxx before 3.9
>
>
> * [MESOS-7008] - Quota not recovered from registry in empty cluster.
>
>
> * [MESOS-7265] - Containerizer startup may cause sensitive data to leak
> into sandbox logs.
>
> * [MESOS-7366] - Agent sandbox gc could accidentally delete the entire
> persistent volume content.
>
> * [MESOS-7383] - Docker executor logs possibly sensitive parameters.
>
>
> * [MESOS-7422] - Docker containerizer should not leak possibly
> sensitive data to agent log.
>
>
> The CHANGELOG for the release is available at:
>
> https://git-wip-us.apache.org/repos/asf?p=mesos.git;a=blob_
> plain;f=CHANGELOG;hb=1.0.4-rc2
>
> 
> 
>
>
> The candidate for Mesos 1.0.4 release is available at:
>
> https://dist.apache.org/repos/dist/dev/mesos/1.0.4-rc2/mesos-1.0.4.tar.gz
>
>
> The tag to be voted on is 1.0.4-rc2:
>
> https://git-wip-us.apache.org/repos/asf?p=mesos.git;a=commit;h=1.0.4-rc2
>
>
> The MD5 checksum of the tarball can be found at:
>
> https://dist.apache.org/repos/dist/dev/mesos/1.0.4-rc2/
> mesos-1.0.4.tar.gz.md5
>
>
> The signature of the tarball can be found at:
>
> https://dist.apache.org/repos/dist/dev/mesos/1.0.4-rc2/
> mesos-1.0.4.tar.gz.asc
>
>
> The PGP key used to sign the release is here:
>
> https://dist.apache.org/repos/dist/release/mesos/KEYS
>
>
> The JAR is up in Maven in a staging repository here:
>
> https://repository.apache.org/content/repositories/orgapachemesos-1186
>
>
> Please vote on releasing this package as Apache Mesos 1.0.4!
>
>
> The vote is open until Fri May  5 12:02:42 PDT 2017 and passes if a
> majority of at least 3 +1 PMC votes are cast.
>
>
> [ ] +1 Release this package as Apache Mesos 1.0.4
>
> [ ] -1 Do not release this package because ...
>
>
> Thanks,
>

[VOTE] Release Apache Mesos 1.0.4 (rc2)

[Vinod Kone]

Hi all,


Please vote on releasing the following candidate as Apache Mesos 1.0.4.


1.0.4 includes the following:



* [MESOS-2537] - AC_ARG_ENABLED checks are broken


* [MESOS-6606] - Reject optimized builds with libcxx before 3.9


* [MESOS-7008] - Quota not recovered from registry in empty cluster.


* [MESOS-7265] - Containerizer startup may cause sensitive data to leak
into sandbox logs.

* [MESOS-7366] - Agent sandbox gc could accidentally delete the entire
persistent volume content.

* [MESOS-7383] - Docker executor logs possibly sensitive parameters.


* [MESOS-7422] - Docker containerizer should not leak possibly
sensitive data to agent log.


The CHANGELOG for the release is available at:

https://git-wip-us.apache.org/repos/asf?p=mesos.git;a=blob_plain;f=CHANGELOG;hb=1.0.4-rc2




The candidate for Mesos 1.0.4 release is available at:

https://dist.apache.org/repos/dist/dev/mesos/1.0.4-rc2/mesos-1.0.4.tar.gz


The tag to be voted on is 1.0.4-rc2:

https://git-wip-us.apache.org/repos/asf?p=mesos.git;a=commit;h=1.0.4-rc2


The MD5 checksum of the tarball can be found at:

https://dist.apache.org/repos/dist/dev/mesos/1.0.4-rc2/mesos-1.0.4.tar.gz.md5


The signature of the tarball can be found at:

https://dist.apache.org/repos/dist/dev/mesos/1.0.4-rc2/mesos-1.0.4.tar.gz.asc


The PGP key used to sign the release is here:

https://dist.apache.org/repos/dist/release/mesos/KEYS


The JAR is up in Maven in a staging repository here:

https://repository.apache.org/content/repositories/orgapachemesos-1186


Please vote on releasing this package as Apache Mesos 1.0.4!


The vote is open until Fri May  5 12:02:42 PDT 2017 and passes if a
majority of at least 3 +1 PMC votes are cast.


[ ] +1 Release this package as Apache Mesos 1.0.4

[ ] -1 Do not release this package because ...


Thanks,

Re: Mesos fetcher error when running as non-root user

[De Groot (CTR), Craig]

Stephan,

Thanks for the suggestion, but the docker.tar.gz URI was just an example of
the problem.  We also need to write temporary files to the sandbox.  This
means we need the sandbox to be owned by the specified user.

__
Craig De Groot



On Sat, Apr 29, 2017 at 8:50 AM, Stephen Gran 
wrote:

> Hi,
>
> We ran into this as well, but happily you can specify docker credentials
> for the mesos agent instead of using a file URI.  This works a treat and
> stops putting docker credentials in the sandbox, which is a nice side
> effect.
>
> Cheers,
>
> On 26/04/17 17:07, De Groot (CTR), Craig wrote:
> > We recently upgraded from Mesos 1.1.0 to 1.2.0 and are encountering
> > errors with code that previously worked in 1.1.0.  I believe that this
> > is a bug in the new version.  If not, I would like to know the correct
> > procedure for using the sandbox as a user other than root.
> >
> > Here is the scenario:
> > 1) Setup a job in Marathon which specifies a URI to our private
> > docker.tar.gz
> >   - See: this for an example
> > ... https://mesosphere.github.io/marathon/docs/native-docker-
> private-registry.html
> >  private-registry.html>
> >   - This is a local file on each node
> >
> > 2) Specify a User (other than root) in the Marathon UI
> >
> > 3) Mesos will try to fetch the file and fails during the copy because
> > the ownership of the sandbox directory are not changed to the specified
> > user.
> >   - Note that 1.1.0 correctly set the sandbox directory to the specified
> > user
> >   - This behavior is documented in the Mesos Docs here (see "specifying
> > a user name"):  http://mesos.apache.org/documentation/latest/fetcher/
> > 
> >
> > Thanks in advance for the help!
> >
> > __
> > Craig De Groot
> >
> >
>
> --
> Stephen Gran
> Senior Technical Architect
>
> picture the possibilities | piksel.com
>
>