[jira] [Assigned] (SPARK-23680) entrypoint.sh does not accept arbitrary UIDs, returning as an error
[
https://issues.apache.org/jira/browse/SPARK-23680?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Felix Cheung reassigned SPARK-23680:
Assignee: Ricardo Martinelli de Oliveira
> entrypoint.sh does not accept arbitrary UIDs, returning as an error
> ---
>
> Key: SPARK-23680
> URL: https://issues.apache.org/jira/browse/SPARK-23680
> Project: Spark
> Issue Type: Bug
> Components: Kubernetes
>Affects Versions: 2.3.0
> Environment: OpenShift
>Reporter: Ricardo Martinelli de Oliveira
>Assignee: Ricardo Martinelli de Oliveira
>Priority: Major
> Labels: easyfix
>
> Openshift supports running pods using arbitrary UIDs
> ([https://docs.openshift.com/container-platform/3.7/creating_images/guidelines.html#openshift-specific-guidelines)]
> to improve security. Although entrypoint.sh was developed to cover this
> feature, the script is returning an error[1].
> The issue is that the script uses getent to find the passwd entry of the
> current UID, and if the entry is not found it creates an entry in
> /etc/passwd. According to the getent man page:
> {code:java}
> EXIT STATUS
> One of the following exit values can be returned by getent:
> 0 Command completed successfully.
> 1 Missing arguments, or database unknown.
> 2 One or more supplied key could not be found in the
> database.
> 3 Enumeration not supported on this database.
> {code}
> And since the script begin with a "set -ex" command, which means it turns on
> debug and breaks the script if the command pipelines returns an exit code
> other than 0.--
> Having that said, this line below must be changed to remove the "-e" flag
> from set command:
> https://github.com/apache/spark/blob/v2.3.0/resource-managers/kubernetes/docker/src/main/dockerfiles/spark/entrypoint.sh#L20
>
>
> [1]https://github.com/apache/spark/blob/v2.3.0/resource-managers/kubernetes/docker/src/main/dockerfiles/spark/entrypoint.sh#L25-L34
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
-
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org
[jira] [Assigned] (SPARK-23680) entrypoint.sh does not accept arbitrary UIDs, returning as an error
[
https://issues.apache.org/jira/browse/SPARK-23680?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Apache Spark reassigned SPARK-23680:
Assignee: (was: Apache Spark)
> entrypoint.sh does not accept arbitrary UIDs, returning as an error
> ---
>
> Key: SPARK-23680
> URL: https://issues.apache.org/jira/browse/SPARK-23680
> Project: Spark
> Issue Type: Bug
> Components: Kubernetes
>Affects Versions: 2.3.0
> Environment: OpenShift
>Reporter: Ricardo Martinelli de Oliveira
>Priority: Major
> Labels: easyfix
>
> Openshift supports running pods using arbitrary UIDs
> ([https://docs.openshift.com/container-platform/3.7/creating_images/guidelines.html#openshift-specific-guidelines)]
> to improve security. Although entrypoint.sh was developed to cover this
> feature, the script is returning an error[1].
> The issue is that the script uses getent to find the passwd entry of the
> current UID, and if the entry is not found it creates an entry in
> /etc/passwd. According to the getent man page:
> {code:java}
> EXIT STATUS
> One of the following exit values can be returned by getent:
> 0 Command completed successfully.
> 1 Missing arguments, or database unknown.
> 2 One or more supplied key could not be found in the
> database.
> 3 Enumeration not supported on this database.
> {code}
> And since the script begin with a "set -ex" command, which means it turns on
> debug and breaks the script if the command pipelines returns an exit code
> other than 0.--
> Having that said, this line below must be changed to remove the "-e" flag
> from set command:
> https://github.com/apache/spark/blob/v2.3.0/resource-managers/kubernetes/docker/src/main/dockerfiles/spark/entrypoint.sh#L20
>
>
> [1]https://github.com/apache/spark/blob/v2.3.0/resource-managers/kubernetes/docker/src/main/dockerfiles/spark/entrypoint.sh#L25-L34
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
-
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org
[jira] [Assigned] (SPARK-23680) entrypoint.sh does not accept arbitrary UIDs, returning as an error
[
https://issues.apache.org/jira/browse/SPARK-23680?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Apache Spark reassigned SPARK-23680:
Assignee: Apache Spark
> entrypoint.sh does not accept arbitrary UIDs, returning as an error
> ---
>
> Key: SPARK-23680
> URL: https://issues.apache.org/jira/browse/SPARK-23680
> Project: Spark
> Issue Type: Bug
> Components: Kubernetes
>Affects Versions: 2.3.0
> Environment: OpenShift
>Reporter: Ricardo Martinelli de Oliveira
>Assignee: Apache Spark
>Priority: Major
> Labels: easyfix
>
> Openshift supports running pods using arbitrary UIDs
> ([https://docs.openshift.com/container-platform/3.7/creating_images/guidelines.html#openshift-specific-guidelines)]
> to improve security. Although entrypoint.sh was developed to cover this
> feature, the script is returning an error[1].
> The issue is that the script uses getent to find the passwd entry of the
> current UID, and if the entry is not found it creates an entry in
> /etc/passwd. According to the getent man page:
> {code:java}
> EXIT STATUS
> One of the following exit values can be returned by getent:
> 0 Command completed successfully.
> 1 Missing arguments, or database unknown.
> 2 One or more supplied key could not be found in the
> database.
> 3 Enumeration not supported on this database.
> {code}
> And since the script begin with a "set -ex" command, which means it turns on
> debug and breaks the script if the command pipelines returns an exit code
> other than 0.--
> Having that said, this line below must be changed to remove the "-e" flag
> from set command:
> https://github.com/apache/spark/blob/v2.3.0/resource-managers/kubernetes/docker/src/main/dockerfiles/spark/entrypoint.sh#L20
>
>
> [1]https://github.com/apache/spark/blob/v2.3.0/resource-managers/kubernetes/docker/src/main/dockerfiles/spark/entrypoint.sh#L25-L34
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
-
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org
