[
https://issues.apache.org/jira/browse/MESOS-5278?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15259250#comment-15259250
]
Ian Downes commented on MESOS-5278:
-----------------------------------
[~xujyan] yeah :-) it's got some code specific to Aurora's Thermos executor
where it verifies the calling uid has access permission on the sandbox
directory to implement crude access control when run under setuid root. It's
only a small part though which could be generalized if people agreed with the
broader approach.
[~vinodkone] I just tried various mesos subcommands and they seem to be broken
on at least 0.26.x and 0.27.x...?
{code}
$ mesos ps
File "/usr/local/bin/mesos-ps", line 194
with ThreadingExecutor() as executor:
^
SyntaxError: invalid syntax
{code}
> Add a CLI allowing a user to enter a container.
> -----------------------------------------------
>
> Key: MESOS-5278
> URL: https://issues.apache.org/jira/browse/MESOS-5278
> Project: Mesos
> Issue Type: Improvement
> Reporter: Jie Yu
>
> Containers created by the unified containerizer (Mesos containerizer) uses
> various namespaces (e.g., mount, network, etc.).
> To improve debugability, we should create a CLI that allows an operator or a
> user to enter the namespaces associated with the container, and execute an
> arbitrary command in that container (similar to `docker exec`).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
