Jie Yu created MESOS-9125: ----------------------------- Summary: Port mapper CNI plugin might fail with "Resource temporarily unavailable" Key: MESOS-9125 URL: https://issues.apache.org/jira/browse/MESOS-9125 Project: Mesos Issue Type: Bug Components: network Affects Versions: 1.6.1, 1.5.1, 1.4.1 Reporter: Jie Yu
https://github.com/apache/mesos/blob/master/src/slave/containerizer/mesos/isolators/network/cni/plugins/port_mapper/port_mapper.cpp#L345 Looks like we're missing a `-w` for the iptable command. This will lead to issues like {noformat} The CNI plugin '/opt/mesosphere/active/mesos/libexec/mesos/mesos-cni-port-mapper' failed to attach container a710dc89-7b22-493b-b8bb-fb80a99d5321 to CNI network 'mesos-bridge': stdout='{"cniVersion":"0.3.0","code":103,"msg":"Failed to add DNAT rule with tag: Resource temporarily unavailable"} {noformat} This becomes more likely if there are many concurrent launches of Mesos contianers that uses port mapper on the box. -- This message was sent by Atlassian JIRA (v7.6.3#76005)