[ 
https://issues.apache.org/jira/browse/MESOS-5278?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15259250#comment-15259250
 ] 

Ian Downes commented on MESOS-5278:
-----------------------------------

[~xujyan] yeah :-) it's got some code specific to Aurora's Thermos executor 
where it verifies the calling uid has access permission on the sandbox 
directory to implement crude access control when run under setuid root. It's 
only a small part though which could be generalized if people agreed with the 
broader approach.

[~vinodkone] I just tried various mesos subcommands and they seem to be broken 
on at least 0.26.x and 0.27.x...?
{code}
$ mesos ps
  File "/usr/local/bin/mesos-ps", line 194
    with ThreadingExecutor() as executor:
                         ^
SyntaxError: invalid syntax
{code}

> Add a CLI allowing a user to enter a container.
> -----------------------------------------------
>
>                 Key: MESOS-5278
>                 URL: https://issues.apache.org/jira/browse/MESOS-5278
>             Project: Mesos
>          Issue Type: Improvement
>            Reporter: Jie Yu
>
> Containers created by the unified containerizer (Mesos containerizer) uses 
> various namespaces (e.g., mount, network, etc.).
> To improve debugability, we should create a CLI that allows an operator or a 
> user to enter the namespaces associated with the container, and execute an 
> arbitrary command in that container (similar to `docker exec`).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to