question Re: why does the ambari sandbox run in priviliged mode? in Support Questions

why does the ambari sandbox run in priviliged mode?

doronz — Sun, 29 Jan 2017 17:21:36 GMT

i'm fairly new to docker and hdp altogether so please excuse me if i make any wrong assumptions...

i'm trying to run ambari (agent and server) in a container and in all relevant documentation i find i see that when issuing the run command, people always add the --priviliged attribute....

does anyone know why does this attribute is needed?

thanks in advance....

Re: why does the ambari sandbox run in priviliged mode?

jsensharma — Sun, 29 Jan 2017 21:57:10 GMT

@doron zukerman

You can remove "--privileged" if you don't intend to use Kerberos.

By default, Docker containers are “unprivileged” and cannot, for example, run a Docker daemon inside a Docker container. This is because by default a container is not allowed to access any devices, but a “privileged” container is given access to all device. Please see:

https://docs.docker.com/engine/reference/run/#/runtime-privilege-and-linux-capabilities

Re: why does the ambari sandbox run in priviliged mode?

jsensharma — Sun, 29 Jan 2017 21:57:10 GMT

@doron zukerman

You can remove "--privileged" if you don't intend to use Kerberos.

https://docs.docker.com/engine/reference/run/#/runtime-privilege-and-linux-capabilities

Re: why does the ambari sandbox run in priviliged mode?

doronz — Sun, 29 Jan 2017 22:07:30 GMT

thanks @Jay SenSharma!

Re: why does the ambari sandbox run in priviliged mode?

jwhitmore — Tue, 31 Jan 2017 07:04:59 GMT

@doron zukerman,

Will you please accept the answer that Jay SenSharma provided? It helps everyone see that the question was answered adequately.

Thanks!