----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/50271/ -----------------------------------------------------------
(Updated Sept. 22, 2016, 11:48 p.m.) Review request for mesos, Jay Guo and Jie Yu. Changes ------- Addressed Jie's comments, * only build capabilities isolator under Linux, * do not yet reject tasks with empty requested capability set when no agent capability isolation active. Bugs: MESOS-5275 https://issues.apache.org/jira/browse/MESOS-5275 Repository: mesos Description ------- This isolator evaluates agent allowed capabilities and passes net capabilities on to `mesos-containerizer` which enforces the capabilities. Capability information is passed via a new field in `ContainerLaunchInfo`. Diffs (updated) ----- include/mesos/slave/containerizer.proto 20db010ea158a813034b411111ce9cddac7d8317 src/CMakeLists.txt 42c52b60cc850901f2eff1545cf7900f4a65ca81 src/Makefile.am bfdb66a6969a35660d545210c1c6951926117ef3 src/slave/containerizer/mesos/containerizer.cpp 144b0db501d40d4e0bba12672723616bedd76e7e src/slave/containerizer/mesos/isolators/linux/capabilities.hpp PRE-CREATION src/slave/containerizer/mesos/isolators/linux/capabilities.cpp PRE-CREATION src/slave/containerizer/mesos/launch.hpp 859990cb85e9e8c06400397256cfc512f0811800 src/slave/containerizer/mesos/launch.cpp 48ec3707d772ec68e34acfc5adb47e25336ae8d3 src/slave/flags.hpp 3952d04f6a00ac1dca1adf2bea7cc6e415620ce5 src/tests/containerizer/isolator_tests.cpp b4d25e57df7f0e157769c9ae4f7847657c505e78 Diff: https://reviews.apache.org/r/50271/diff/ Testing (updated) ------- `make check` and `sudo make check` (Debian jessie, gcc-4.9.2, w/o optimizations) `make` (OS X, clang-4.0 w/o optimizations) Thanks, Benjamin Bannier