[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16499212#comment-16499212 ] Hudson commented on YARN-8342: -- SUCCESS: Integrated in Jenkins build Hadoop-trunk-Commit #143

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16499206#comment-16499206 ] Billie Rinaldi commented on YARN-8342: -- The timelineservice and resourcemanager test

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16499148#comment-16499148 ] genericqa commented on YARN-8342: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote ||

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498751#comment-16498751 ] genericqa commented on YARN-8342: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote ||

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498643#comment-16498643 ] genericqa commented on YARN-8342: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote ||

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498589#comment-16498589 ] genericqa commented on YARN-8342: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote ||

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498497#comment-16498497 ] Billie Rinaldi commented on YARN-8342: -- I completed my testing and did not find any i

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498503#comment-16498503 ] Billie Rinaldi commented on YARN-8342: -- +1 for patch 5. I will plan to commit this af

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498498#comment-16498498 ] Eric Yang commented on YARN-8342: - Patch 005 includes a new example to show how to specify

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498349#comment-16498349 ] Eric Yang commented on YARN-8342: - [~billie.rinaldi] Thanks for the review. I made correc

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498247#comment-16498247 ] Billie Rinaldi commented on YARN-8342: -- Oh, I did notice one additional reference to

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16498239#comment-16498239 ] Billie Rinaldi commented on YARN-8342: -- I looked over patch 3 and didn't see any issu

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16497320#comment-16497320 ] Eric Yang commented on YARN-8342: - [~shaneku...@gmail.com] Could you help to review this p

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16497173#comment-16497173 ] Eric Yang commented on YARN-8342: - The failed unit tests are not related to this patch, an

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16497148#comment-16497148 ] genericqa commented on YARN-8342: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote ||

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16496810#comment-16496810 ] Eric Yang commented on YARN-8342: - Precommit build test report was for: YARN-8350. NPE in

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16495959#comment-16495959 ] genericqa commented on YARN-8342: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote ||

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16495831#comment-16495831 ] Eric Yang commented on YARN-8342: - Patch 002 includes: - Allow untrusted image to supply l

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16494123#comment-16494123 ] Eric Badger commented on YARN-8342: --- {quote}This is progression improvement that can be

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16494120#comment-16494120 ] Eric Yang commented on YARN-8342: - [~ebadger] {quote} You have high confidence in everythi

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16493990#comment-16493990 ] Eric Badger commented on YARN-8342: --- bq. Sudo users can easily change the configuration

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16493824#comment-16493824 ] Eric Yang commented on YARN-8342: - [~ebadger] Btw, docker.privileged-containers.enabled is

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16493804#comment-16493804 ] Eric Yang commented on YARN-8342: - [~ebadger] {quote} Depending on the registry it comes f

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16493743#comment-16493743 ] Eric Badger commented on YARN-8342: --- bq. Is there any reason to block sudo users from ru

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16491922#comment-16491922 ] Eric Yang commented on YARN-8342: - [~ebadger] {quote} 2. Registries from which we can run n

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16491128#comment-16491128 ] Eric Badger commented on YARN-8342: --- Naming conventions aside for the moment, I believe w

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16490997#comment-16490997 ] Shane Kumpf commented on YARN-8342: --- {quote}Allow exemption to bind-mount launch-containe

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16490956#comment-16490956 ] Eric Yang commented on YARN-8342: - [~vinodkv] The original design was: - Images in trusted

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16490364#comment-16490364 ] Vinod Kumar Vavilapalli commented on YARN-8342: --- bq. 2. Change the name docke

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16490027#comment-16490027 ] genericqa commented on YARN-8342: - | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote ||

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16488222#comment-16488222 ] Eric Yang commented on YARN-8342: - We have the following options: 1. Allow exemption to b

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16488073#comment-16488073 ] Eric Badger commented on YARN-8342: --- {quote}Looks like the name {{docker.privileged-conta

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16487992#comment-16487992 ] Shane Kumpf commented on YARN-8342: --- This sounds like a reasonable proposal. In cases whe

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16487952#comment-16487952 ] Eric Yang commented on YARN-8342: - [~vinodkv] Launch command was dropped in YARN-7516 due t

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16486545#comment-16486545 ] Vinod Kumar Vavilapalli commented on YARN-8342: --- Looks like the name {{docker

[jira] [Commented] (YARN-8342) Using docker image from a non-privileged registry, the launch_command is not honored

[ https://issues.apache.org/jira/browse/YARN-8342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16486530#comment-16486530 ] Eric Yang commented on YARN-8342: - The current behavior is documented in [YARN-7516|https: