[ https://issues.apache.org/jira/browse/YARN-9060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16702438#comment-16702438 ]
Wangda Tan edited comment on YARN-9060 at 11/28/18 10:26 PM: ------------------------------------------------------------- [~tangzhankun], just want to understand some high level considerations before looking into details: 1) Could u add some examples about parameters of {{--module-devices}} 2) Inside c-e.cfg, what field needs to be set, and please share some example of configs. And what if user doesn't set the configs, will c-e allow all devices controlled by c-e or none devices. (the previous one sounds super dangerous). 3) Could u add changes to c-e.cfg (hadoop-yarn-project/hadoop-yarn/conf/container-executor.cfg) for the new config and example options like other options. was (Author: leftnoteasy): [~tangzhankun], just want to understand some high level considerations before looking into details: 1) Could u add some examples about parameters of {{--module-devices}} 2) Inside c-e.cfg, what field needs to be set, and please share some example of configs. And what if user doesn't set the configs, will c-e allow all devices controlled by c-e or none devices. (the previous one sounds super dangerous). 3) Could u add changes to c-e.cfg? > [YARN-8851] Phase 1 - Support device isolation in native container-executor > --------------------------------------------------------------------------- > > Key: YARN-9060 > URL: https://issues.apache.org/jira/browse/YARN-9060 > Project: Hadoop YARN > Issue Type: Sub-task > Reporter: Zhankun Tang > Assignee: Zhankun Tang > Priority: Major > Attachments: YARN-9060-trunk.001.patch > > > Due to the cgroups v1 implementation policy in linux kernel, we cannot update > the value of the device cgroups controller unless we have the root permission > ([here|https://github.com/torvalds/linux/blob/6f0d349d922ba44e4348a17a78ea51b7135965b1/security/device_cgroup.c#L604]). > So we need to support this in container-executor for Java layer to invoke. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org