[ 
https://issues.apache.org/jira/browse/YARN-4595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15259917#comment-15259917
 ] 

Varun Vasudev edited comment on YARN-4595 at 4/27/16 10:14 AM:
---------------------------------------------------------------

Thanks for the explanation [~billie.rinaldi]. Just to summarize - the latest 
patch 
# allows users to only mount files and directories from the localized resources 
into the docker container
# in case of files, it does not allow symbolic links to be mounted into the 
docker container
# in case of directories, even if they have symbolic links pointing to 
directories outside the YARN local directories, since the target of the symlink 
is not mounted into the container, there is no access violation we need to take 
care of.

Is my understanding correct?


was (Author: vvasudev):
Thanks for the explanation [~billie.rinaldi]. 

> Add support for configurable read-only mounts
> ---------------------------------------------
>
>                 Key: YARN-4595
>                 URL: https://issues.apache.org/jira/browse/YARN-4595
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: yarn
>            Reporter: Billie Rinaldi
>            Assignee: Billie Rinaldi
>         Attachments: YARN-4595.1.patch, YARN-4595.2.patch, YARN-4595.3.patch, 
> YARN-4595.4.patch, YARN-4595.5.patch
>
>
> Mounting files or directories from the host is one way of passing 
> configuration and other information into a docker container.  We could allow 
> the user to set a list of mounts in the environment of ContainerLaunchContext 
> (e.g. /dir1:/targetdir1,/dir2:/targetdir2).  These would be mounted read-only 
> to the specified target locations.
> Due to permissions and user concerns, for this ticket we will require the 
> mounts to be resources that are in the distributed cache.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to