Shane Kumpf commented on YARN-7815:

Attached a patch that implements the proposal. Given I had to touch a bulk of 
the test methods in {{TestDockerContainerRuntime}}, I went ahead a cleaned up 
some warnings and unused code as well. If you'd prefer that clean up be moved 
to a separate patch, I can do so.

> Mount the filecache as read-only in Docker containers
> -----------------------------------------------------
>                 Key: YARN-7815
>                 URL: https://issues.apache.org/jira/browse/YARN-7815
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>            Reporter: Shane Kumpf
>            Assignee: Shane Kumpf
>            Priority: Major
>         Attachments: YARN-7815.001.patch
> Currently, when using the Docker runtime, the filecache directories are 
> mounted read-write into the Docker containers. Read write access is not 
> necessary. We should make this more restrictive by changing that mount to 
> read-only.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org

Reply via email to