[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16255005#comment-16255005
]
Varun Vasudev commented on YARN-7430:
-
Looks like we have consensus of making uid:gid the default
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16253831#comment-16253831
]
Eric Badger commented on YARN-7430:
---
Hey [~eyang], thanks for the updated explanation.
bq. This JIRA is
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16252023#comment-16252023
]
Eric Yang commented on YARN-7430:
-
[~ebadger]
{quote}
I agree, but I was under the assumption that this was
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16251940#comment-16251940
]
Eric Badger commented on YARN-7430:
---
bq. If someone is allowing jobs in the mix uid:gid environment
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16251805#comment-16251805
]
Eric Yang commented on YARN-7430:
-
[~ebadger] IT infrastructure keeps the entire company's user credential
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16251740#comment-16251740
]
Eric Badger commented on YARN-7430:
---
bq. I'm fine with it. Eric Badger - does it sounds ok to you?
I'm
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16250879#comment-16250879
]
Varun Vasudev commented on YARN-7430:
-
I'm fine with it. [~ebadger] - does it sounds ok to you?
> User
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16250334#comment-16250334
]
Shane Kumpf commented on YARN-7430:
---
Thanks for clarifying, I hadn't considered a system configured to
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16250312#comment-16250312
]
Eric Yang commented on YARN-7430:
-
[~ebadger] {quote}
I could be wrong, but I don't think Shane Kumpf's
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16250276#comment-16250276
]
Eric Badger commented on YARN-7430:
---
bq. User 12345 shouldn't belong to root group, but it has been given
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16250242#comment-16250242
]
Eric Yang commented on YARN-7430:
-
[~shaneku...@gmail.com]
{quote}
I'm concerned that we are changing
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16249824#comment-16249824
]
Shane Kumpf commented on YARN-7430:
---
{quote}
Is there any other concern to enable user/group mapping on
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16249817#comment-16249817
]
Eric Yang commented on YARN-7430:
-
[~ebadger] {quote}
What about the logs written via log4j or some other
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16249796#comment-16249796
]
Eric Badger commented on YARN-7430:
---
bq. This will redirect docker output by the shell script. It depends
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16248147#comment-16248147
]
Eric Yang commented on YARN-7430:
-
{quote}
I don't believe that is true? I'm referring to YARN containers,
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16247903#comment-16247903
]
Eric Badger commented on YARN-7430:
---
bq. Eric Badger My understanding is the container stderr, stdout are
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16246038#comment-16246038
]
Eric Yang commented on YARN-7430:
-
[~ebadger] My understanding is the container stderr, stdout are
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16245139#comment-16245139
]
Eric Badger commented on YARN-7430:
---
[~aceric], if the application is running as root inside of the
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16245016#comment-16245016
]
Shane Kumpf commented on YARN-7430:
---
IMO, I think this issue can be closed as invalid. Most of this does
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16244970#comment-16244970
]
Eric Yang commented on YARN-7430:
-
[~ebadger] They are two separate problems. A lot of conversation here
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16244948#comment-16244948
]
Eric Yang commented on YARN-7430:
-
[~ebadger] In a unix box, when a user run sudo commands, all logs are
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16244915#comment-16244915
]
Eric Badger commented on YARN-7430:
---
Also, this conversation seems to have morphed into a dup of
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16244910#comment-16244910
]
Eric Badger commented on YARN-7430:
---
{quote}
For users on LDAP, there is no good way to populate
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16244825#comment-16244825
]
Shane Kumpf commented on YARN-7430:
---
{quote}
User foo should not allow to execute script owned by skumpf,
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16244811#comment-16244811
]
Eric Badger commented on YARN-7430:
---
I don't see how running the container as root will work with log
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16244787#comment-16244787
]
Eric Yang commented on YARN-7430:
-
[~shaneku...@gmail.com] . {quote}
I still believe there will be an issue
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16244498#comment-16244498
]
Shane Kumpf commented on YARN-7430:
---
I still believe there will be an issue if we do not specify --user.
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=1623#comment-1623
]
Eric Yang commented on YARN-7430:
-
[~shaneku...@gmail.com] . Thank you for explaining your point of view.
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16243982#comment-16243982
]
Shane Kumpf commented on YARN-7430:
---
{quote}
This is not true, see the following examples:
{quote}
I
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16243031#comment-16243031
]
Eric Yang commented on YARN-7430:
-
[~shaneku...@gmail.com]
{quote}
Hey Eric Yang, I'm not sure that's the
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16242862#comment-16242862
]
Shane Kumpf commented on YARN-7430:
---
{quote}
Privileged container does not need to have --user flag. They
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16242590#comment-16242590
]
Eric Yang commented on YARN-7430:
-
Hi [~vvasudev], Privileged container does not need to have --user flag.
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16241947#comment-16241947
]
Varun Vasudev commented on YARN-7430:
-
[~eyang] - can you modify your path slightly - if the user is
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16240104#comment-16240104
]
Varun Vasudev commented on YARN-7430:
-
[~shaneku...@gmail.com], [~ebadger] - any objections to turning
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16238687#comment-16238687
]
Hadoop QA commented on YARN-7430:
-
| (x) *{color:red}-1 overall{color}* |
\\
\\
|| Vote || Subsystem ||
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16238428#comment-16238428
]
Eric Yang commented on YARN-7430:
-
Looks like we built too many knobs for this to occur. If
[
https://issues.apache.org/jira/browse/YARN-7430?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16237891#comment-16237891
]
Eric Yang commented on YARN-7430:
-
[~vvasudev] Sorry, raise this as a blocker. Anyone can become root user
37 matches
Mail list logo
