[
https://issues.apache.org/jira/browse/YARN-882?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16107216#comment-16107216
]
Naganarasimha G R commented on YARN-882:
----------------------------------------
[~karasing],
bq. For long term solution, user quota should be specified for
private/application cache.
Agree, But it should be handled in such a way that containers should not fail
after submission but allocation should not happen to these nodes
> Specify per user quota for private/application cache and user log files
> -----------------------------------------------------------------------
>
> Key: YARN-882
> URL: https://issues.apache.org/jira/browse/YARN-882
> Project: Hadoop YARN
> Issue Type: New Feature
> Reporter: Omkar Vinit Joshi
> Assignee: Omkar Vinit Joshi
>
> At present there is no limit on the number of files / size of the files
> localized by single user. Similarly there is no limit on the size of the log
> files created by user via running containers.
> We need to restrict the user for this.
> For LocalizedResources; this has serious concerns in case of secured
> environment where malicious user can start one container and localize
> resources whose total size >= DEFAULT_NM_LOCALIZER_CACHE_TARGET_SIZE_MB.
> Thereafter it will either fail (if no extra space is present on disk) or
> deletion service will keep removing localized files for other
> containers/applications.
> The limit for logs/localized resources should be decided by RM and sent to NM
> via secured containerToken. All these configurations should per container
> instead of per user or per nm.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]