Casey Brotherton commented on YARN-4065:

Have worked on this, in the middle of testing, I realized that the ordering of 
the checks was wrong.

The code checks if the program is owned by root, and setuid after trying to 
access the configuration file.

I am changing the ordering, and will still add an error message, however, it 
likely doesn't need to print the effective user-id.

> container-executor error should include effective user id
> ---------------------------------------------------------
>                 Key: YARN-4065
>                 URL: https://issues.apache.org/jira/browse/YARN-4065
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: yarn
>            Reporter: Casey Brotherton
>            Assignee: Casey Brotherton
>            Priority: Trivial
> When container-executor fails to access it's config file, the following 
> message will be thrown:
> {code}
> org.apache.hadoop.yarn.server.nodemanager.LinuxContainerExecutor: Exit code 
> from container executor initialization is : 24
> ExitCodeException exitCode=24: Invalid conf file provided : 
> /etc/hadoop/conf/container-executor.cfg
> {code}
> The real problem may be a change in the container-executor not running as set 
> uid root.
> From:
> https://hadoop.apache.org/docs/r2.6.0/hadoop-yarn/hadoop-yarn-site/SecureContainer.html
> {quote}
> The container-executor program must be owned by root and have the permission 
> set ---sr-s---.
> {quote}
> The error message could be improved by printing out the effective user id 
> with the error message, and possibly the executable trying to access the 
> config file.

This message was sent by Atlassian JIRA

Reply via email to