[ 
https://issues.apache.org/jira/browse/MESOS-5754?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15357994#comment-15357994
 ] 

Joseph Wu commented on MESOS-5754:
----------------------------------

I'd be curious if this has affected any users negatively.  If users have not 
noticed this, then they may be inadvertently relying on the incorrect behavior 
(of always running docker tasks as root).

The workaround is to specify a CLI parameter: 
https://github.com/apache/mesos/blob/db8b0f16c1c8c6e683a4b788262f307a8bc218e0/include/mesos/v1/mesos.proto#L1826-L1830
i.e.
{code}
"container" : {
  ...,
  "docker" : {
    ...,
    "parameters" : [{
      "key": "user",
      "value": "not-root"
    }]
  }
}
{code}

> CommandInfo.user not honored in docker containerizer
> ----------------------------------------------------
>
>                 Key: MESOS-5754
>                 URL: https://issues.apache.org/jira/browse/MESOS-5754
>             Project: Mesos
>          Issue Type: Bug
>    Affects Versions: 1.0.0
>            Reporter: Michael Gummelt
>
> Repro by creating a framework that starts a task with CommandInfo.user set, 
> and observe that the dockerized executor is still running as the default 
> (e.g. root).
> cc [~kaysoky]



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to