You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Wangda Tan (JIRA)" <ji...@apache.org> on 2018/11/28 22:27:00 UTC
[jira] [Comment Edited] (YARN-9060) [YARN-8851] Phase 1 - Support
device isolation in native container-executor
[ https://issues.apache.org/jira/browse/YARN-9060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16702438#comment-16702438 ]
Wangda Tan edited comment on YARN-9060 at 11/28/18 10:26 PM:
-------------------------------------------------------------
[~tangzhankun], just want to understand some high level considerations before looking into details:
1) Could u add some examples about parameters of {{--module-devices}}
2) Inside c-e.cfg, what field needs to be set, and please share some example of configs. And what if user doesn't set the configs, will c-e allow all devices controlled by c-e or none devices. (the previous one sounds super dangerous).
3) Could u add changes to c-e.cfg (hadoop-yarn-project/hadoop-yarn/conf/container-executor.cfg) for the new config and example options like other options.
was (Author: leftnoteasy):
[~tangzhankun], just want to understand some high level considerations before looking into details:
1) Could u add some examples about parameters of {{--module-devices}}
2) Inside c-e.cfg, what field needs to be set, and please share some example of configs. And what if user doesn't set the configs, will c-e allow all devices controlled by c-e or none devices. (the previous one sounds super dangerous).
3) Could u add changes to c-e.cfg?
> [YARN-8851] Phase 1 - Support device isolation in native container-executor
> ---------------------------------------------------------------------------
>
> Key: YARN-9060
> URL: https://issues.apache.org/jira/browse/YARN-9060
> Project: Hadoop YARN
> Issue Type: Sub-task
> Reporter: Zhankun Tang
> Assignee: Zhankun Tang
> Priority: Major
> Attachments: YARN-9060-trunk.001.patch
>
>
> Due to the cgroups v1 implementation policy in linux kernel, we cannot update the value of the device cgroups controller unless we have the root permission ([here|https://github.com/torvalds/linux/blob/6f0d349d922ba44e4348a17a78ea51b7135965b1/security/device_cgroup.c#L604]). So we need to support this in container-executor for Java layer to invoke.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org