> On June 13, 2017, 11:57 p.m., Jie Yu wrote: > > > > Jie Yu wrote: > Also, for nested container, we don't need to do another read only bind > mount.
fixed - Silas ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/57884/#review177833 ----------------------------------------------------------- On June 14, 2017, 1:06 a.m., Silas Snider wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/57884/ > ----------------------------------------------------------- > > (Updated June 14, 2017, 1:06 a.m.) > > > Review request for mesos and Jie Yu. > > > Bugs: MESOS-7268 > https://issues.apache.org/jira/browse/MESOS-7268 > > > Repository: mesos > > > Description > ------- > > Ensure that host /etc/* files are mounted RDONLY by the CNI Isolator. > > > Diffs > ----- > > src/slave/containerizer/mesos/isolators/network/cni/cni.hpp 36217d2e5 > src/slave/containerizer/mesos/isolators/network/cni/cni.cpp 3aecd8c5a > > > Diff: https://reviews.apache.org/r/57884/diff/4/ > > > Testing > ------- > > > Thanks, > > Silas Snider > >
