You are viewing a plain text version of this content. The canonical link for it is here.

Posted to yarn-issues@hadoop.apache.org by "Andrey Stepachev (JIRA)" <ji...@apache.org> on 2014/04/16 10:17:15 UTC

[jira] [Updated] (YARN-1853) Allow containers to be ran under real user even in insecure mode

     [ https://issues.apache.org/jira/browse/YARN-1853?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrey Stepachev updated YARN-1853:
-----------------------------------

    Affects Version/s:     (was: 2.2.0)
                       2.3.0

> Allow containers to be ran under real user even in insecure mode
> ----------------------------------------------------------------
>
>                 Key: YARN-1853
>                 URL: https://issues.apache.org/jira/browse/YARN-1853
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: nodemanager, resourcemanager
>    Affects Versions: 2.3.0
>            Reporter: Andrey Stepachev
>         Attachments: YARN-1853.patch
>
>
> Currently unsecure cluster runs all containers under one user (typically nobody). That is not appropriate, because yarn applications doesn't play well with hdfs having enabled permissions. Yarn applications try to write data (as expected) into /user/nobody regardless of user, who launched application.
> Another sideeffect is that it is not possible to configure cgroups for particular users.



--
This message was sent by Atlassian JIRA
(v6.2#6252)