Re: Mesos containerizer & isolation

2016-11-02 Thread Jie Yu
To add to haosdent's reply: - I have a USER directive in my Dockerfile in order for the CMD to be > executed as that user, but that does not seem to be supported (yet?) by the > Docker image provider. Is there any method (except `sudo`/`setuser`) to > achieve running as a user present in the

Re: Mesos containerizer & isolation

2016-11-02 Thread haosdent
>- Is it possible to hide host processes from the container? You may consider to use the namespaces/pid isolator, add `namespaces/pid` in the `--isolation` flag when launch Mesos Agent > -Is it possible to run processes that open network ports (possibly already open on the host system) and have

Mesos containerizer & isolation

2016-11-02 Thread Tobias Pfeiffer
Hi, I asked this question also yesterday in the #mesos channel on IRC, but I guess due to timezone differences there were not many people awake and/or working, sorry for reposting. (Maybe someone answered after I left, but it seems that the IRC bot is only archiving channel joins/leaves? ->