3 ms·

Mesos: Cluster management platform

• nwmcsween 16y ago
  * Isolation between tasks using Linux Containers. I would just like to point out that lxc offers zero isolation of tasks. UID/GID mapping isn't done thus a root user in a lxc container has all the power as root on the host among many other things. LXC is glorified resource control with a few minor isolation features (syslog in 2.6.38 and posix caps I think and current namespacing in Linux) right now and nowhere realiable as a real isolation environment
  • equark 16y ago
    The standard setup for compute clusters is that there is an admin ops team that is assumed to be trustworthy and then many untrusted users. Is this a problem for these use cases? I think the untrusted admin is less of an issue for most organizations.
  • xtacy 16y ago
    EDIT: Oops, I misunderstood the parent. Regarding CPU isolation: It's in the pipeline. The CFS bandwidth patches and they seem to solve the CPU isolation problem. http://lkml.org/lkml/2011/3/22/477 http://lkml.org/lkml/2011/3/22/477