[jira] [Commented] (MESOS-4757) Mesos containerizer should get uid/gids before pivot_root.

["Ian Downes (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MESOS-4757?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15172817#comment-15172817 ] 

Ian Downes commented on MESOS-4757:
-----------------------------------

I skimmed the pull request and it looks reasonable.

[~jieyu] Then we should change the the ownership of the sandbox to match? There doesn't have to be a mapping in the user/group database to set ownership:
{noformat}
[1500][idownes:~]$ touch foo
[1500][idownes:~]$ sudo chown 1234 foo
[1500][idownes:~]$ cat /etc/passwd | grep 1234
[1500][idownes:~]$ stat -f "%N: %u" foo
foo: 1234
{noformat}

> Mesos containerizer should get uid/gids before pivot_root.
> ----------------------------------------------------------
>
>                 Key: MESOS-4757
>                 URL: https://issues.apache.org/jira/browse/MESOS-4757
>             Project: Mesos
>          Issue Type: Bug
>            Reporter: Jie Yu
>            Assignee: Jie Yu
>
> Currently, we call os::su(user) after pivot_root. This is problematic because /etc/passwd and /etc/group might be missing in container's root filesystem. We should instead, get the uid/gids before pivot_root, and call setuid/setgroups after pivot_root.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)