Re: Enabling 'network' namespace for custom network isolators

2015-06-17 Thread Kapil Arya
Hi All, I have now filed a Jira ticket (MESOS-2884)[1] and created a couple of RRs[2] along the lines of the suggestions provided by Ian and Jie. There is one difference though. Instead of creating a LinuxIsolator class, I added the `int namespaces()` directly to Isolator class. By default, it re

Re: Enabling 'network' namespace for custom network isolators

2015-05-11 Thread Niklas Nielsen
(inlined) On 11 May 2015 at 14:30, Kapil Arya wrote: > On Mon, May 11, 2015 at 4:58 PM, Jie Yu wrote: > > > > > > > Yes. The simplest (cleanest?) way that I see would be to refactor the > > > launcher to take the desired flags when executing the executor, i.e., > > > (Linux)Launcher::fork() tak

Re: Enabling 'network' namespace for custom network isolators

2015-05-11 Thread Kapil Arya
On Mon, May 11, 2015 at 4:58 PM, Jie Yu wrote: > > > > Yes. The simplest (cleanest?) way that I see would be to refactor the > > launcher to take the desired flags when executing the executor, i.e., > > (Linux)Launcher::fork() takes the namespace flags. The launcher would be > > directed which na

Re: Enabling 'network' namespace for custom network isolators

2015-05-11 Thread Kapil Arya
On Mon, May 11, 2015 at 4:29 PM, Ian Downes wrote: > > > > TLDR: We want to use a custom network isolator, but there is no way to > > enable the 'network' namespace from within an isolator module. > > > > > > We are working on creating a custom network isolator as a Mesos module. > > However, the

Re: Enabling 'network' namespace for custom network isolators

2015-05-11 Thread Jie Yu
> > Yes. The simplest (cleanest?) way that I see would be to refactor the > launcher to take the desired flags when executing the executor, i.e., > (Linux)Launcher::fork() takes the namespace flags. The launcher would be > directed which namespaces to create by the caller, not inferring them > itse

Re: Enabling 'network' namespace for custom network isolators

2015-05-11 Thread Ian Downes
> > TLDR: We want to use a custom network isolator, but there is no way to > enable the 'network' namespace from within an isolator module. > > > We are working on creating a custom network isolator as a Mesos module. > However, the way Mesos Slave is setup, there is no way to enable 'network' > na

Enabling 'network' namespace for custom network isolators

2015-05-11 Thread Kapil Arya
Hi All, TLDR: We want to use a custom network isolator, but there is no way to enable the 'network' namespace from within an isolator module. We are working on creating a custom network isolator as a Mesos module. However, the way Mesos Slave is setup, there is no way to enable 'network' namespa