[ https://issues.apache.org/jira/browse/YARN-7815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16350424#comment-16350424 ]
Shane Kumpf commented on YARN-7815: ----------------------------------- Attached a patch that implements the proposal. Given I had to touch a bulk of the test methods in {{TestDockerContainerRuntime}}, I went ahead a cleaned up some warnings and unused code as well. If you'd prefer that clean up be moved to a separate patch, I can do so. > Mount the filecache as read-only in Docker containers > ----------------------------------------------------- > > Key: YARN-7815 > URL: https://issues.apache.org/jira/browse/YARN-7815 > Project: Hadoop YARN > Issue Type: Sub-task > Reporter: Shane Kumpf > Assignee: Shane Kumpf > Priority: Major > Attachments: YARN-7815.001.patch > > > Currently, when using the Docker runtime, the filecache directories are > mounted read-write into the Docker containers. Read write access is not > necessary. We should make this more restrictive by changing that mount to > read-only. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org