You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Zhankun Tang (JIRA)" <ji...@apache.org> on 2019/02/13 01:26:00 UTC
[jira] [Comment Edited] (YARN-8927) Support trust top-level image
like "centos" when "library" is configured in "docker.trusted.registries"
[ https://issues.apache.org/jira/browse/YARN-8927?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16766636#comment-16766636 ]
Zhankun Tang edited comment on YARN-8927 at 2/13/19 1:25 AM:
-------------------------------------------------------------
[~eyang], [~ebadger] Thanks for the review!
If a local image name contains "/" in it, it may not be considered as "top-level" image.
It seems if a user wants lcoal image "userA/imageA" to be allowed, he/she should configure "userA" in the "docker.trusted.registries"?
was (Author: tangzhankun):
[~eyang], [~ebadger] Thanks for the review!
If a local image name contains "/" in it, it may not be considered as "top-level" image.
It seems if a user wants lcoal image "userA/imageA" to be allowed, he/she should configure "user1" in the "docker.trusted.registries"?
> Support trust top-level image like "centos" when "library" is configured in "docker.trusted.registries"
> -------------------------------------------------------------------------------------------------------
>
> Key: YARN-8927
> URL: https://issues.apache.org/jira/browse/YARN-8927
> Project: Hadoop YARN
> Issue Type: Improvement
> Reporter: Zhankun Tang
> Assignee: Zhankun Tang
> Priority: Major
> Labels: Docker
> Attachments: YARN-8927-trunk.001.patch, YARN-8927-trunk.002.patch
>
>
> There are some missing cases that we need to catch when handling "docker.trusted.registries".
> The container-executor.cfg configuration is as follows:
> {code:java}
> docker.trusted.registries=tangzhankun,ubuntu,centos{code}
> It works if run DistrubutedShell with "tangzhankun/tensorflow"
> {code:java}
> "yarn ... -shell_env YARN_CONTAINER_RUNTIME_TYPE=docker -shell_env YARN_CONTAINER_RUNTIME_DOCKER_IMAGE=tangzhankun/tensorflow
> {code}
> But run a DistrubutedShell job with "centos", "centos[:tagName]", "ubuntu" and "ubuntu[:tagName]" fails:
> The error message is like:
> {code:java}
> "image: centos is not trusted"
> {code}
> We need better handling the above cases.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org