[ 
https://issues.apache.org/jira/browse/YARN-8783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16617795#comment-16617795
 ] 

Eric Yang commented on YARN-8783:
---------------------------------

List of registries works fine in my test cluster using Hadoop 3.1.1.  However, 
centos, and ubuntu images are top level images that does not associate with any 
repository.  This prevents official images like centos:latest and ubuntu:latest 
to be specified as trusted registries.  You will need to tag the official 
images like centos:latest to my.trusted.registry.com/centos:latest to utilize 
the official images from docker hub.  Otherwise, container-executor will only 
trust images in centos/* and ubuntu/*, which might not be what you wanted.  
Container executor forces the detection of [repo]/[image]:[version] format.  
For images without [repo]/ prefix, they are not usable by default unless tagged 
locally.  Sorry for the inconvenience, the current code is written to enforce 
format validation instead of a prefix match for safety reasons.  In YARN-6456, 
there are discussion on how to allow exact image name to run on the cluster.  
That might improve the usability without tagging the images locally.

> Property docker.trusted.registries does not work when using a list
> ------------------------------------------------------------------
>
>                 Key: YARN-8783
>                 URL: https://issues.apache.org/jira/browse/YARN-8783
>             Project: Hadoop YARN
>          Issue Type: Bug
>    Affects Versions: 3.1.1
>            Reporter: Simon Prewo
>            Priority: Major
>              Labels: container-executor, docker
>
> I am deploying the default yarn distributed shell example:
> {code:java}
> yarn jar hadoop-yarn-applications-distributedshell.jar -shell_env 
> YARN_CONTAINER_RUNTIME_TYPE=docker -shell_env 
> YARN_CONTAINER_RUNTIME_DOCKER_IMAGE=centos -shell_command "sleep 90" -jar 
> hadoop-yarn-applications-distributedshell.jar -num_containers 1{code}
> Having a *single trusted registry configured like this works*:
> {code:java}
> docker.trusted.registries=centos{code}
> But havingĀ *a list of trusted registries configured fails* ("Shell error 
> output: image: centos is not trusted."):
> {code:java}
> docker.trusted.registries=centos,ubuntu{code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org

Reply via email to