[jira] [Commented] (MESOS-7884) Support containerd on Mesos.

[ https://issues.apache.org/jira/browse/MESOS-7884?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17109937#comment-17109937 ] Gilbert Song commented on MESOS-7884: - cc [~qianzhang] > Support containerd on Mesos. >

[jira] [Assigned] (MESOS-9966) Agent crashes when trying to destroy orphaned nested container if root container is orphaned as well

[ https://issues.apache.org/jira/browse/MESOS-9966?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9966: --- Assignee: Qian Zhang (was: Gilbert Song) > Agent crashes when trying to destroy orphaned

[jira] [Created] (MESOS-9965) agent should not send `TASK_GONE_BY_OPERATOR` if the framework is not partition aware.

Gilbert Song created MESOS-9965: --- Summary: agent should not send `TASK_GONE_BY_OPERATOR` if the framework is not partition aware. Key: MESOS-9965 URL: https://issues.apache.org/jira/browse/MESOS-9965

[jira] [Commented] (MESOS-9960) Agent with cgroup support may destroy containers belonging to unrelated agents on startup

[ https://issues.apache.org/jira/browse/MESOS-9960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16928060#comment-16928060 ] Gilbert Song commented on MESOS-9960: - [~bennoe], do we want to close this issue? > Agent with

[jira] [Assigned] (MESOS-8840) `cpu.cfs_quota_us` may be accidentally set for command task using docker during agent recovery.

[ https://issues.apache.org/jira/browse/MESOS-8840?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-8840: --- Assignee: Qian Zhang > `cpu.cfs_quota_us` may be accidentally set for command task using

[jira] [Created] (MESOS-9935) The agent crashes after the disk du isolator supporting rootfs checks.

Gilbert Song created MESOS-9935: --- Summary: The agent crashes after the disk du isolator supporting rootfs checks. Key: MESOS-9935 URL: https://issues.apache.org/jira/browse/MESOS-9935 Project: Mesos

[jira] [Assigned] (MESOS-9908) Introduce a new agent flag and support docker volume chown to task user.

[ https://issues.apache.org/jira/browse/MESOS-9908?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9908: --- Assignee: Gilbert Song > Introduce a new agent flag and support docker volume chown to task

[jira] [Commented] (MESOS-9874) Add environment variable `MESOS_ALLOCATION_ROLE` to the task/container.

[ https://issues.apache.org/jira/browse/MESOS-9874?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16895825#comment-16895825 ] Gilbert Song commented on MESOS-9874: - commit fe89151e053e5c932f920b839ad00792f99ae42c Author: Qian

[jira] [Created] (MESOS-9908) Introduce a new agent flag and support docker volume chown to task user.

Gilbert Song created MESOS-9908: --- Summary: Introduce a new agent flag and support docker volume chown to task user. Key: MESOS-9908 URL: https://issues.apache.org/jira/browse/MESOS-9908 Project: Mesos

[jira] [Commented] (MESOS-9788) Configurable IPC namespace and shared memory in `namespaces/ipc` isolator

[ https://issues.apache.org/jira/browse/MESOS-9788?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16889201#comment-16889201 ] Gilbert Song commented on MESOS-9788: - commit 02b6467f9e8035166f400e0112015ac56c9281b6 Author: Qian

[jira] [Commented] (MESOS-9841) Integrate `IsolatorTracker` and `LinuxLauncher` with Mesos containerizer.

[ https://issues.apache.org/jira/browse/MESOS-9841?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16888125#comment-16888125 ] Gilbert Song commented on MESOS-9841: - commit 59c2c75d0982385271c3ba86e3cbbf6c21fa7bae Author: Andrei

[jira] [Commented] (MESOS-9833) Introduce an agent flag for the default `/dev/shm` size

[ https://issues.apache.org/jira/browse/MESOS-9833?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16885877#comment-16885877 ] Gilbert Song commented on MESOS-9833: - commit 633b1b5d4ef3f08b0abf057a3651f34116e1e45f Author: Qian

[jira] [Commented] (MESOS-9788) Configurable IPC namespace and shared memory in `namespaces/ipc` isolator

[ https://issues.apache.org/jira/browse/MESOS-9788?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16884419#comment-16884419 ] Gilbert Song commented on MESOS-9788: - commit e04b445f414e256866ba2e1f441bd7e86acc858e Author: Qian

[jira] [Created] (MESOS-9883) Check container timeout counting should be started when the check command is executed.

Gilbert Song created MESOS-9883: --- Summary: Check container timeout counting should be started when the check command is executed. Key: MESOS-9883 URL: https://issues.apache.org/jira/browse/MESOS-9883

[jira] [Created] (MESOS-9874) Add environment variable `MESOS_ALLOCATION_ROLE` to the task/container.

Gilbert Song created MESOS-9874: --- Summary: Add environment variable `MESOS_ALLOCATION_ROLE` to the task/container. Key: MESOS-9874 URL: https://issues.apache.org/jira/browse/MESOS-9874 Project: Mesos

[jira] [Created] (MESOS-9873) Document the container environment variables semantics on mesos.

Gilbert Song created MESOS-9873: --- Summary: Document the container environment variables semantics on mesos. Key: MESOS-9873 URL: https://issues.apache.org/jira/browse/MESOS-9873 Project: Mesos

[jira] [Commented] (MESOS-4781) Executor env variables should not be leaked to the command task.

[ https://issues.apache.org/jira/browse/MESOS-4781?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16876379#comment-16876379 ] Gilbert Song commented on MESOS-4781: - [~jieyu], sorry I missed your comment. No, not actively let me

[jira] [Assigned] (MESOS-4781) Executor env variables should not be leaked to the command task.

[ https://issues.apache.org/jira/browse/MESOS-4781?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-4781: --- Assignee: (was: Gilbert Song) > Executor env variables should not be leaked to the

[jira] [Created] (MESOS-9868) NetworkInfo from the agent /state endpoint is not correct.

Gilbert Song created MESOS-9868: --- Summary: NetworkInfo from the agent /state endpoint is not correct. Key: MESOS-9868 URL: https://issues.apache.org/jira/browse/MESOS-9868 Project: Mesos Issue

[jira] [Commented] (MESOS-9769) Add direct containerized support for filesystem operations.

[ https://issues.apache.org/jira/browse/MESOS-9769?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861582#comment-16861582 ] Gilbert Song commented on MESOS-9769: - commit 1961e41a61def2b7baca7563c0b7e1855880b55c Author: Qian

[jira] [Created] (MESOS-9830) Implement the container debug endpoint on slave/http.cpp

Gilbert Song created MESOS-9830: --- Summary: Implement the container debug endpoint on slave/http.cpp Key: MESOS-9830 URL: https://issues.apache.org/jira/browse/MESOS-9830 Project: Mesos Issue

[jira] [Created] (MESOS-9829) Implement the container debug endpoint on slave/http.cpp

Gilbert Song created MESOS-9829: --- Summary: Implement the container debug endpoint on slave/http.cpp Key: MESOS-9829 URL: https://issues.apache.org/jira/browse/MESOS-9829 Project: Mesos Issue

[jira] [Created] (MESOS-9828) Document the IPC namespace and shm on UCR.

Gilbert Song created MESOS-9828: --- Summary: Document the IPC namespace and shm on UCR. Key: MESOS-9828 URL: https://issues.apache.org/jira/browse/MESOS-9828 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9827) Introduce the configurable shm protobuf API.

Gilbert Song created MESOS-9827: --- Summary: Introduce the configurable shm protobuf API. Key: MESOS-9827 URL: https://issues.apache.org/jira/browse/MESOS-9827 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9826) Decouple the /dev/shm from container rootfs.

Gilbert Song created MESOS-9826: --- Summary: Decouple the /dev/shm from container rootfs. Key: MESOS-9826 URL: https://issues.apache.org/jira/browse/MESOS-9826 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9825) Introduce an agent flag to disallow sharing the IPC namespace from the host.

Gilbert Song created MESOS-9825: --- Summary: Introduce an agent flag to disallow sharing the IPC namespace from the host. Key: MESOS-9825 URL: https://issues.apache.org/jira/browse/MESOS-9825 Project:

[jira] [Created] (MESOS-9824) Support rdma cgroup subsystem.

Gilbert Song created MESOS-9824: --- Summary: Support rdma cgroup subsystem. Key: MESOS-9824 URL: https://issues.apache.org/jira/browse/MESOS-9824 Project: Mesos Issue Type: Task

[jira] [Assigned] (MESOS-9757) Design doc for container debug endpoint.

[ https://issues.apache.org/jira/browse/MESOS-9757?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9757: --- Assignee: Andrei Budnik > Design doc for container debug endpoint. >

[jira] [Created] (MESOS-9795) Support /dev/shm and configurable IPC namespace.

Gilbert Song created MESOS-9795: --- Summary: Support /dev/shm and configurable IPC namespace. Key: MESOS-9795 URL: https://issues.apache.org/jira/browse/MESOS-9795 Project: Mesos Issue Type:

[jira] [Commented] (MESOS-9775) Design doc for UCR shared memory.

[ https://issues.apache.org/jira/browse/MESOS-9775?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16846119#comment-16846119 ] Gilbert Song commented on MESOS-9775: -

[jira] [Assigned] (MESOS-9775) Design doc for UCR shared memory.

[ https://issues.apache.org/jira/browse/MESOS-9775?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9775: --- Assignee: Qian Zhang > Design doc for UCR shared memory. >

[jira] [Created] (MESOS-9794) Design doc for container debug endpoint.

Gilbert Song created MESOS-9794: --- Summary: Design doc for container debug endpoint. Key: MESOS-9794 URL: https://issues.apache.org/jira/browse/MESOS-9794 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9775) Design doc for UCR shared memory.

Gilbert Song created MESOS-9775: --- Summary: Design doc for UCR shared memory. Key: MESOS-9775 URL: https://issues.apache.org/jira/browse/MESOS-9775 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9757) Design doc for container debug endpoint.

Gilbert Song created MESOS-9757: --- Summary: Design doc for container debug endpoint. Key: MESOS-9757 URL: https://issues.apache.org/jira/browse/MESOS-9757 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9756) Introduce a container debug endpoint.

Gilbert Song created MESOS-9756: --- Summary: Introduce a container debug endpoint. Key: MESOS-9756 URL: https://issues.apache.org/jira/browse/MESOS-9756 Project: Mesos Issue Type: Epic

[jira] [Assigned] (MESOS-9672) Docker containerizer should ignore pids of executors that do not pass the connection check.

[ https://issues.apache.org/jira/browse/MESOS-9672?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9672: --- Assignee: Qian Zhang > Docker containerizer should ignore pids of executors that do not

[jira] [Assigned] (MESOS-9695) Remove the duplicate pid check in Docker containerizer

[ https://issues.apache.org/jira/browse/MESOS-9695?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9695: --- Shepherd: Gilbert Song Assignee: Qian Zhang Sprint: Containerization: RI13 Sp 45

[jira] [Assigned] (MESOS-8769) Agent crashes when CNI config not defined

[ https://issues.apache.org/jira/browse/MESOS-8769?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-8769: --- Assignee: Gilbert Song > Agent crashes when CNI config not defined >

[jira] [Assigned] (MESOS-9355) Persistence volume does not unmount correctly with wrong artifact URI

[ https://issues.apache.org/jira/browse/MESOS-9355?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9355: --- Assignee: Joseph Wu > Persistence volume does not unmount correctly with wrong artifact URI

[jira] [Assigned] (MESOS-9306) Mesos containerizer can get stuck during cgroup cleanup

[ https://issues.apache.org/jira/browse/MESOS-9306?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9306: --- Assignee: Andrei Budnik > Mesos containerizer can get stuck during cgroup cleanup >

[jira] [Comment Edited] (MESOS-8522) `prepareMounts` in Mesos containerizer is flaky.

[ https://issues.apache.org/jira/browse/MESOS-8522?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825419#comment-16825419 ] Gilbert Song edited comment on MESOS-8522 at 4/24/19 6:37 PM: -- probably we

[jira] [Commented] (MESOS-8522) `prepareMounts` in Mesos containerizer is flaky.

[ https://issues.apache.org/jira/browse/MESOS-8522?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825419#comment-16825419 ] Gilbert Song commented on MESOS-8522: - probably we could just simply check os::exists(mount.target)

[jira] [Commented] (MESOS-8522) `prepareMounts` in Mesos containerizer is flaky.

[ https://issues.apache.org/jira/browse/MESOS-8522?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825418#comment-16825418 ] Gilbert Song commented on MESOS-8522: - [~chhsia0][~bbannier] what is the priority of this issue? does

[jira] [Created] (MESOS-9737) Avoid allocating memory during fork-exec in subprocess.hpp.

Gilbert Song created MESOS-9737: --- Summary: Avoid allocating memory during fork-exec in subprocess.hpp. Key: MESOS-9737 URL: https://issues.apache.org/jira/browse/MESOS-9737 Project: Mesos

[jira] [Commented] (MESOS-9159) Support Foreign URLs in docker registry puller on windows.

[ https://issues.apache.org/jira/browse/MESOS-9159?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16819583#comment-16819583 ] Gilbert Song commented on MESOS-9159: - Closed since windows support on external URLs is already done

[jira] [Assigned] (MESOS-9704) Support docker manifest v2s2 config GC.

[ https://issues.apache.org/jira/browse/MESOS-9704?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9704: --- Shepherd: Qian Zhang Assignee: Gilbert Song Sprint: Containerization:

[jira] [Created] (MESOS-9720) Support specifying file name in URI fetcher fetch() interface.

Gilbert Song created MESOS-9720: --- Summary: Support specifying file name in URI fetcher fetch() interface. Key: MESOS-9720 URL: https://issues.apache.org/jira/browse/MESOS-9720 Project: Mesos

[jira] [Commented] (MESOS-6934) Support pulling Docker images with V2 Schema 2 image manifest

[ https://issues.apache.org/jira/browse/MESOS-6934?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16811150#comment-16811150 ] Gilbert Song commented on MESOS-6934: - commit db917f639e2d05fcf493e87649f42ddd2abfeae0 Author: Andrei

[jira] [Created] (MESOS-9704) Support docker manifest v2s2 config GC.

Gilbert Song created MESOS-9704: --- Summary: Support docker manifest v2s2 config GC. Key: MESOS-9704 URL: https://issues.apache.org/jira/browse/MESOS-9704 Project: Mesos Issue Type: Improvement

[jira] [Created] (MESOS-9703) Support docker manifest v2s2 external urls.

Gilbert Song created MESOS-9703: --- Summary: Support docker manifest v2s2 external urls. Key: MESOS-9703 URL: https://issues.apache.org/jira/browse/MESOS-9703 Project: Mesos Issue Type:

[jira] [Assigned] (MESOS-9676) Add prettyjws support for docker v2 s1 manifest.

[ https://issues.apache.org/jira/browse/MESOS-9676?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9676: --- Assignee: Gilbert Song > Add prettyjws support for docker v2 s1 manifest. >

[jira] [Commented] (MESOS-8972) when choose docker image use user network all mesos agent crash

[ https://issues.apache.org/jira/browse/MESOS-8972?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16810140#comment-16810140 ] Gilbert Song commented on MESOS-8972: - [~omegavveapon] [~saturnman], can you verify? > when choose

[jira] [Commented] (MESOS-8972) when choose docker image use user network all mesos agent crash

[ https://issues.apache.org/jira/browse/MESOS-8972?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16810139#comment-16810139 ] Gilbert Song commented on MESOS-8972: - seems like this issue was already fixed by

[jira] [Created] (MESOS-9694) Refactor UCR docker store to construct 'Image' protobuf at Puller.

Gilbert Song created MESOS-9694: --- Summary: Refactor UCR docker store to construct 'Image' protobuf at Puller. Key: MESOS-9694 URL: https://issues.apache.org/jira/browse/MESOS-9694 Project: Mesos

[jira] [Created] (MESOS-9693) Add master validation for SeccompInfo.

Gilbert Song created MESOS-9693: --- Summary: Add master validation for SeccompInfo. Key: MESOS-9693 URL: https://issues.apache.org/jira/browse/MESOS-9693 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9685) Backport docker manifest v2s2 support to 1.4.x

Gilbert Song created MESOS-9685: --- Summary: Backport docker manifest v2s2 support to 1.4.x Key: MESOS-9685 URL: https://issues.apache.org/jira/browse/MESOS-9685 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9683) Backport docker manifest v2s2 support to 1.6.x

Gilbert Song created MESOS-9683: --- Summary: Backport docker manifest v2s2 support to 1.6.x Key: MESOS-9683 URL: https://issues.apache.org/jira/browse/MESOS-9683 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9684) Backport docker manifest v2s2 support to 1.5.x

Gilbert Song created MESOS-9684: --- Summary: Backport docker manifest v2s2 support to 1.5.x Key: MESOS-9684 URL: https://issues.apache.org/jira/browse/MESOS-9684 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9682) Backport docker manifest v2s2 support to 1.7.x.

Gilbert Song created MESOS-9682: --- Summary: Backport docker manifest v2s2 support to 1.7.x. Key: MESOS-9682 URL: https://issues.apache.org/jira/browse/MESOS-9682 Project: Mesos Issue Type: Task

[jira] [Created] (MESOS-9676) Add prettyjws support for docker v2 s1 manifest.

Gilbert Song created MESOS-9676: --- Summary: Add prettyjws support for docker v2 s1 manifest. Key: MESOS-9676 URL: https://issues.apache.org/jira/browse/MESOS-9676 Project: Mesos Issue Type:

[jira] [Created] (MESOS-9675) Docker Manifest V2 Schema2 Support.

Gilbert Song created MESOS-9675: --- Summary: Docker Manifest V2 Schema2 Support. Key: MESOS-9675 URL: https://issues.apache.org/jira/browse/MESOS-9675 Project: Mesos Issue Type: Epic

[jira] [Created] (MESOS-9651) Design for docker registry v2 schema2 support.

Gilbert Song created MESOS-9651: --- Summary: Design for docker registry v2 schema2 support. Key: MESOS-9651 URL: https://issues.apache.org/jira/browse/MESOS-9651 Project: Mesos Issue Type: Task

[jira] [Issue Comment Deleted] (MESOS-8813) Support multiple tasks with different users can access a persistent volume.

[ https://issues.apache.org/jira/browse/MESOS-8813?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song updated MESOS-8813: Comment: was deleted (was: commit a5b9f6e1cdb2ec26baf6e49706e1a0d59f3ce4d1 Author: Qian Zhang

[jira] [Created] (MESOS-9642) Avoid reading host mount table when allocating a gid in GIDManager.

Gilbert Song created MESOS-9642: --- Summary: Avoid reading host mount table when allocating a gid in GIDManager. Key: MESOS-9642 URL: https://issues.apache.org/jira/browse/MESOS-9642 Project: Mesos

[jira] [Created] (MESOS-9641) Support GID manager with non-sharable persistent volume.

Gilbert Song created MESOS-9641: --- Summary: Support GID manager with non-sharable persistent volume. Key: MESOS-9641 URL: https://issues.apache.org/jira/browse/MESOS-9641 Project: Mesos Issue

[jira] [Commented] (MESOS-9610) Fetcher vulnerability - escaping from sandbox

[ https://issues.apache.org/jira/browse/MESOS-9610?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16787285#comment-16787285 ] Gilbert Song commented on MESOS-9610: - Probably we could create a separate JIRA to follow up on

[jira] [Commented] (MESOS-8810) Grant non-root task user the permissions to access the SANDBOX_PATH volume of PARENT type

[ https://issues.apache.org/jira/browse/MESOS-8810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16780181#comment-16780181 ] Gilbert Song commented on MESOS-8810: - commit 1003935e1c4021cecf3af637faa1588509a64065 Author: Qian

[jira] [Comment Edited] (MESOS-8813) Make multiple tasks with different users can access a shared persistent volume

[ https://issues.apache.org/jira/browse/MESOS-8813?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16780175#comment-16780175 ] Gilbert Song edited comment on MESOS-8813 at 2/28/19 6:46 AM: -- commit

[jira] [Commented] (MESOS-8813) Make multiple tasks with different users can access a shared persistent volume

[ https://issues.apache.org/jira/browse/MESOS-8813?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16780175#comment-16780175 ] Gilbert Song commented on MESOS-8813: - commit d0405160e60f60b3e3416e4a4bb7afb2b7e2907b Author: Qian

[jira] [Commented] (MESOS-8810) Grant non-root task user the permissions to access the SANDBOX_PATH volume of PARENT type

[ https://issues.apache.org/jira/browse/MESOS-8810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16780174#comment-16780174 ] Gilbert Song commented on MESOS-8810: - commit 9c44b31e73783a220e43098a1b117e83e6074fdc Author: Qian

[jira] [Created] (MESOS-9613) Support seccomp `unconfined` option for whitelisting.

Gilbert Song created MESOS-9613: --- Summary: Support seccomp `unconfined` option for whitelisting. Key: MESOS-9613 URL: https://issues.apache.org/jira/browse/MESOS-9613 Project: Mesos Issue

[jira] [Commented] (MESOS-9009) Support for creation non-existing host paths in a whitelist as source paths

[ https://issues.apache.org/jira/browse/MESOS-9009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16776488#comment-16776488 ] Gilbert Song commented on MESOS-9009: - Done. Thanks for the patch! > Support for creation

[jira] [Commented] (MESOS-9180) tasks get stuck in TASK_KILLING on the default executor

[ https://issues.apache.org/jira/browse/MESOS-9180?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16762217#comment-16762217 ] Gilbert Song commented on MESOS-9180: - [~Kirill P], could you add the agent logs for triaging. Also

[jira] [Commented] (MESOS-9159) Support Foreign URLs in docker registry puller

[ https://issues.apache.org/jira/browse/MESOS-9159?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16757583#comment-16757583 ] Gilbert Song commented on MESOS-9159: - [~jpepy], please follow up with

[jira] [Assigned] (MESOS-9507) Agent could not recover due to empty docker volume checkpointed files.

[ https://issues.apache.org/jira/browse/MESOS-9507?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9507: --- Assignee: Gilbert Song Sprint: Containerization RI10 Spr 39 Story Points:

[jira] [Commented] (MESOS-9533) CniIsolatorTest.ROOT_CleanupAfterReboot is flaky.

[ https://issues.apache.org/jira/browse/MESOS-9533?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16756440#comment-16756440 ] Gilbert Song commented on MESOS-9533: - yea, did not realize the test was backported. I will backport

[jira] [Created] (MESOS-9539) Mesos Containerizer Seccomp Improvement.

Gilbert Song created MESOS-9539: --- Summary: Mesos Containerizer Seccomp Improvement. Key: MESOS-9539 URL: https://issues.apache.org/jira/browse/MESOS-9539 Project: Mesos Issue Type: Epic

[jira] [Commented] (MESOS-9456) Set `SCMP_FLTATR_CTL_LOG` attribute during initialization of Seccomp context

[ https://issues.apache.org/jira/browse/MESOS-9456?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16753778#comment-16753778 ] Gilbert Song commented on MESOS-9456: - (y) > Set `SCMP_FLTATR_CTL_LOG` attribute during

[jira] [Commented] (MESOS-9386) Implement Seccomp profile inheritance for POD containers

[ https://issues.apache.org/jira/browse/MESOS-9386?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16753777#comment-16753777 ] Gilbert Song commented on MESOS-9386: - Probably we should close this as "won't do"? > Implement

[jira] [Commented] (MESOS-9080) Port mapping isolator leaks ephemeral ports when a container is destroyed during preparation

[ https://issues.apache.org/jira/browse/MESOS-9080?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16751405#comment-16751405 ] Gilbert Song commented on MESOS-9080: - Seems like it was fixed in 1.7.0. Do we need to backport it?

[jira] [Commented] (MESOS-9080) Port mapping isolator leaks ephemeral ports when a container is destroyed during preparation

[ https://issues.apache.org/jira/browse/MESOS-9080?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16751349#comment-16751349 ] Gilbert Song commented on MESOS-9080: - [~ipronin][~jieyu], could we close this ticket given

[jira] [Assigned] (MESOS-9533) CniIsolatorTest.ROOT_CleanupAfterReboot is flaky.

[ https://issues.apache.org/jira/browse/MESOS-9533?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9533: --- Assignee: Gilbert Song > CniIsolatorTest.ROOT_CleanupAfterReboot is flaky. >

[jira] [Created] (MESOS-9533) CniIsolatorTest.ROOT_CleanupAfterReboot is flaky.

Gilbert Song created MESOS-9533: --- Summary: CniIsolatorTest.ROOT_CleanupAfterReboot is flaky. Key: MESOS-9533 URL: https://issues.apache.org/jira/browse/MESOS-9533 Project: Mesos Issue Type:

[jira] [Commented] (MESOS-9530) Add timeout and logging to docker ps in docker containerizer recovery.

[ https://issues.apache.org/jira/browse/MESOS-9530?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16749317#comment-16749317 ] Gilbert Song commented on MESOS-9530: - given docker ps is only called once in docker containerizer

[jira] [Created] (MESOS-9532) ResourceOffersTest.ResourceOfferWithMultipleSlaves is flaky.

Gilbert Song created MESOS-9532: --- Summary: ResourceOffersTest.ResourceOfferWithMultipleSlaves is flaky. Key: MESOS-9532 URL: https://issues.apache.org/jira/browse/MESOS-9532 Project: Mesos

[jira] [Created] (MESOS-9531) chown error handling is incorrect in createSandboxDirectory.

Gilbert Song created MESOS-9531: --- Summary: chown error handling is incorrect in createSandboxDirectory. Key: MESOS-9531 URL: https://issues.apache.org/jira/browse/MESOS-9531 Project: Mesos

[jira] [Created] (MESOS-9530) Add timeout and logging to docker ps in docker containerizer recovery.

Gilbert Song created MESOS-9530: --- Summary: Add timeout and logging to docker ps in docker containerizer recovery. Key: MESOS-9530 URL: https://issues.apache.org/jira/browse/MESOS-9530 Project: Mesos

[jira] [Assigned] (MESOS-9502) IOswitchboard cleanup could get stuck.

[ https://issues.apache.org/jira/browse/MESOS-9502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9502: --- Shepherd: Gilbert Song Assignee: Andrei Budnik Sprint:

[jira] [Commented] (MESOS-6632) ContainerLogger might leak FD if container launch fails.

[ https://issues.apache.org/jira/browse/MESOS-6632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16735745#comment-16735745 ] Gilbert Song commented on MESOS-6632: - https://reviews.apache.org/r/69681/ > ContainerLogger might

[jira] [Created] (MESOS-9507) Agent could not recover due to empty docker volume checkpointed files.

Gilbert Song created MESOS-9507: --- Summary: Agent could not recover due to empty docker volume checkpointed files. Key: MESOS-9507 URL: https://issues.apache.org/jira/browse/MESOS-9507 Project: Mesos

[jira] [Created] (MESOS-9371) `FetcherCacheTest.RemoveLRUCacheEntries` is flaky.

Gilbert Song created MESOS-9371: --- Summary: `FetcherCacheTest.RemoveLRUCacheEntries` is flaky. Key: MESOS-9371 URL: https://issues.apache.org/jira/browse/MESOS-9371 Project: Mesos Issue Type:

[jira] [Commented] (MESOS-8545) AgentAPIStreamingTest.AttachInputToNestedContainerSession is flaky.

[ https://issues.apache.org/jira/browse/MESOS-8545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16670547#comment-16670547 ] Gilbert Song commented on MESOS-8545: - commit a296b820d4d4a25f47caaa3870bc56c6437dd63e Author: Andrei

[jira] [Commented] (MESOS-9320) UCR container launch stuck at PROVISIONING during image fetching.

[ https://issues.apache.org/jira/browse/MESOS-9320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16665793#comment-16665793 ] Gilbert Song commented on MESOS-9320: - The root caused is found. This issue shares the same root

[jira] [Assigned] (MESOS-9320) UCR container launch stuck at PROVISIONING during image fetching.

[ https://issues.apache.org/jira/browse/MESOS-9320?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Gilbert Song reassigned MESOS-9320: --- Assignee: Gilbert Song > UCR container launch stuck at PROVISIONING during image fetching.

[jira] [Commented] (MESOS-8128) Make os::pipe file descriptors O_CLOEXEC.

[ https://issues.apache.org/jira/browse/MESOS-8128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16654222#comment-16654222 ] Gilbert Song commented on MESOS-8128: - commit f9627b90521292add41432d15b4c12e036f94ca7 Author:

[jira] [Commented] (MESOS-9320) UCR container launch stuck at PROVISIONING during image fetching.

[ https://issues.apache.org/jira/browse/MESOS-9320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16652541#comment-16652541 ] Gilbert Song commented on MESOS-9320: - Related agent logs: {noformat} 6-b105-164a40b22d84 because:

[jira] [Commented] (MESOS-9322) Executor exited accidentally, but mesos-agent did not report TASK_FAILED event.

[ https://issues.apache.org/jira/browse/MESOS-9322?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16651239#comment-16651239 ] Gilbert Song commented on MESOS-9322: - Seems like your executor could not reregister with the agent

[jira] [Created] (MESOS-9320) UCR container launch stuck at PROVISIONING during image fetching.

Gilbert Song created MESOS-9320: --- Summary: UCR container launch stuck at PROVISIONING during image fetching. Key: MESOS-9320 URL: https://issues.apache.org/jira/browse/MESOS-9320 Project: Mesos

[jira] [Comment Edited] (MESOS-9295) Nested container launch could fail if the agent upgrade with new cgroup subsystems.

[ https://issues.apache.org/jira/browse/MESOS-9295?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16639936#comment-16639936 ] Gilbert Song edited comment on MESOS-9295 at 10/5/18 11:33 PM: ---

[jira] [Created] (MESOS-9295) Nested container launch could fail if the agent upgrade with new cgroup subsystems.

Gilbert Song created MESOS-9295: --- Summary: Nested container launch could fail if the agent upgrade with new cgroup subsystems. Key: MESOS-9295 URL: https://issues.apache.org/jira/browse/MESOS-9295

  1   2   3   4   5   6   7   8   9   >