[ https://issues.apache.org/jira/browse/YARN-7729?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Shane Kumpf updated YARN-7729: ------------------------------ Description: Docker has support for allowing containers to share the PID namespace with the host or other containers via the {{docker run --pid}} flag. There are a number of use cases where this is desirable: * Monitoring tools running in containers that use process IDs. * Debug containers that can attach to another container to run strace, gdb, etc. * Testing Docker on YARN in a container, where the docker socket is bind mounted. Enabling this feature should be considered privileged as it exposes host details inside the container. was: Docker has support for allowing containers to share the PID namespace with the host or other containers via the {{--pid}} {{docker run}} flag. There are a number of use cases where this is desirable: * Monitoring tools running in containers that use process IDs. * Debug containers that can attach to another container to run strace, gdb, etc. * Testing Docker on YARN in a container, where the docker socket is bind mounted. Enabling this feature should be considered privileged as it exposes host details inside the container. > Add support for setting the PID namespace mode > ---------------------------------------------- > > Key: YARN-7729 > URL: https://issues.apache.org/jira/browse/YARN-7729 > Project: Hadoop YARN > Issue Type: Sub-task > Components: nodemanager > Reporter: Shane Kumpf > > Docker has support for allowing containers to share the PID namespace with > the host or other containers via the {{docker run --pid}} flag. > There are a number of use cases where this is desirable: > * Monitoring tools running in containers that use process IDs. > * Debug containers that can attach to another container to run strace, gdb, > etc. > * Testing Docker on YARN in a container, where the docker socket is bind > mounted. > Enabling this feature should be considered privileged as it exposes host > details inside the container. -- This message was sent by Atlassian JIRA (v6.4.14#64029) --------------------------------------------------------------------- To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org