You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@mesos.apache.org by "Nirav (JIRA)" <ji...@apache.org> on 2016/05/24 05:22:12 UTC

[jira] [Commented] (MESOS-5410) Support cgroup namespace in unified container

    [ https://issues.apache.org/jira/browse/MESOS-5410?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15297704#comment-15297704 ] 

Nirav commented on MESOS-5410:
------------------------------

Currently because "cgroup" namespace is not supported, following two test-case are failing:

1.  NsTest.ROOT_setns
2.  NsTest.ROOT_getns

The error observed is : "nstype: Unknown namespace 'cgroup'"
This is because the contents of the directory "/proc/self/ns" has been changed in kernel version 4.6 (cgroup is added).


> Support cgroup namespace in unified container
> ---------------------------------------------
>
>                 Key: MESOS-5410
>                 URL: https://issues.apache.org/jira/browse/MESOS-5410
>             Project: Mesos
>          Issue Type: Improvement
>            Reporter: Qian Zhang
>            Assignee: Qian Zhang
>
> In Linux 4.6 kernel, a new namespace (cgroup namespace) was introduced to make a process can be created in its own cgroup namespace so that the global cgroup hierarchy will not be leaked to the process. See the following link for more details about this namespace:
> http://man7.org/linux/man-pages/man7/cgroup_namespaces.7.html
> We need to support this namespace in unified container to provide better isolation for the containers created by Mesos.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)