[
https://issues.apache.org/jira/browse/YARN-8783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16617795#comment-16617795
]
Eric Yang commented on YARN-8783:
---------------------------------
List of registries works fine in my test cluster using Hadoop 3.1.1. However,
centos, and ubuntu images are top level images that does not associate with any
repository. This prevents official images like centos:latest and ubuntu:latest
to be specified as trusted registries. You will need to tag the official
images like centos:latest to my.trusted.registry.com/centos:latest to utilize
the official images from docker hub. Otherwise, container-executor will only
trust images in centos/* and ubuntu/*, which might not be what you wanted.
Container executor forces the detection of [repo]/[image]:[version] format.
For images without [repo]/ prefix, they are not usable by default unless tagged
locally. Sorry for the inconvenience, the current code is written to enforce
format validation instead of a prefix match for safety reasons. In YARN-6456,
there are discussion on how to allow exact image name to run on the cluster.
That might improve the usability without tagging the images locally.
> Property docker.trusted.registries does not work when using a list
> ------------------------------------------------------------------
>
> Key: YARN-8783
> URL: https://issues.apache.org/jira/browse/YARN-8783
> Project: Hadoop YARN
> Issue Type: Bug
> Affects Versions: 3.1.1
> Reporter: Simon Prewo
> Priority: Major
> Labels: container-executor, docker
>
> I am deploying the default yarn distributed shell example:
> {code:java}
> yarn jar hadoop-yarn-applications-distributedshell.jar -shell_env
> YARN_CONTAINER_RUNTIME_TYPE=docker -shell_env
> YARN_CONTAINER_RUNTIME_DOCKER_IMAGE=centos -shell_command "sleep 90" -jar
> hadoop-yarn-applications-distributedshell.jar -num_containers 1{code}
> Having a *single trusted registry configured like this works*:
> {code:java}
> docker.trusted.registries=centos{code}
> But having *a list of trusted registries configured fails* ("Shell error
> output: image: centos is not trusted."):
> {code:java}
> docker.trusted.registries=centos,ubuntu{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org
