Project: Apache Mesos (Orchestration & Management / Scheduling & Orchestration)
File: 2019-01-24-mesos-1-5-2-released.md

layout: post title: Apache Mesos 1.5.2 Released permalink: /blog/mesos-1-5-2-released/ published: true post_author: display_name: Gilbert Song gravatar: 05d3596cf7ef7751c02545b1eaac64ac twitter: Gilbert_Songs tags: Release The latest Mesos 1.5.x release, 1.5.2, is now available for . This release includes important bug fixes and improvements on top of 1.5.0. It is recommended to use this version if you are considering using Mesos 1.5. More specifically, this release includes the following: - ZooKeeper connection should retry on `EAI_NONAME`. - Mesos fetcher cache doesn't retry when missed. - Make os::pipe file descriptors O_CLOEXEC. - mesos-agent high cpu usage because of numerous /proc/mounts reads. - AgentAPIStreamingTest.AttachInputToNestedContainerSession is flaky. - Command checks should always call `WAITNESTEDCONTAINER` before `REMOVENESTEDCONTAINER`. - Containers stuck in FETCHING possibly due to unresponsive server. - Agent gc on old slave sandboxes could empty persistent volume data. - Agent may fail to recover if the agent dies before image store cache checkpointed. - Master crash when removing quota. - `UriDiskProfileAdaptor` fails to update profile selectors. - Docker image fetcher fails with HTTP/2. - Agent leaking file descriptors into forked processes. - Autotools don't work with newer OpenJDK versions. - Quota limit "chopping" can lead to cpu-only and memory-only offers. - Implement a Random Sorter for offer allocations. - Master streaming API does not send (health) check updates for tasks. - Master check failure due to CHECK_SOME(providerId). - Improve the container preparing logging in IOSwitchboard and volume/secret isolator. - process::await/collect n^2 performance issue. - Executor crash trying to print container ID. - Command executor calling setsid breaks the tty support. - mesos-slave can deadlock with docker pull. - `slave.available()` in the allocator is expensive and drags down allocation performance. - Master asks agent to shutdown upon auth errors. - Mesos master segfaults with stack overflow under load. - Agent GC could unmount a dangling persistent volume multiple times. - Launch nested container session fails due to incorrect detection of `mnt` namespace of command executor's task. - Port mapper CNI plugin might fail with "Resource temporarily unavailable". - Port mapper CNI plugin might deadlock iptables on the agent. - Health checks launching nested containers while a container is being destroyed lead to unkillable tasks. - CNI detach might fail due to missing network config file. - Master authentication handling leads to request amplification. - Master has a fragile burned-in 5s authentication

- Agent has a fragile burn-in 5s authentication timeout. - Agent and scheduler driver authentication retry backoff time could overflow. - Container stuck at ISOLATING due to FD leak. - Zookeeper doesn't compile with newer gcc due to format error. - Removing rootfs mounts may fail with EBUSY. - `docker inspect` may return an unexpected result to Docker executor due to a race condition. - Mesos agent crashes when CNI network is not configured but used. - Docker Containerizer 'usage' call might be expensive if mount table is big. - Docker containerizer actor can get backlogged with large number of containers. - Create cgoup recursively to workaround systemd deleting cgroups_root. - URI disk profile adaptor could deadlock. - Some master endpoints do not handle failed authorization properly. - Nested container should run as the same user of its parent container by default. - Container stuck at ISOLATING state due to libevent poll never returns. - Validation of JWT tokens using HS256 hashing algorithm is not thread safe. - Executor to framework message crashes master if framework has not re-registered. - Master may skip processing authorization results for `LAUNCH_GROUP`. - Persist CNI working directory across reboot. - Mesos executor fails to terminate and gets stuck after agent host reboot. - IOswitchboard cleanup could get stuck due to FD leak from a race. - Disallowed nan, inf and so on in `Value::Scalar`. - Extend `minallocatableresources` flag to cover non-scalar resources. - CNI_NETNS should not be set for orphan containers that do not have network namespace. Full release notes are available in the release Rolling upgrades from a Mesos 1.5.0 cluster to Mesos 1.5.2 are straightforward. Please refer to the for detailed information on upgrading to Mesos 1.5.2 from 1.4.x, 1.3.x, or 1.2.x. Please try out this release and let us know what you think. If you run into any issues, let us know on the . Thanks to the 29 contributors who made 1.5.2 possible: Alexander Rojas, Alexander Rukletsov, Andrei Budnik, Andrew Schwartzmeyer, Armand Grillet, Benjamin Bannier, Benjamin Mahler, Benno Evers, Chun-Hung Hsiao, Deepak Goel, Gastn Kleiman, Gilbert Song, Greg Mann, James Peach, Jie Yu, Joseph Wu, Kapil Arya, Kevin Klues, Kjetil Joergensen, Meng Zhu, Michael Park, Qian Zhang, Radhika Jandhyala, Till Toenshoff, Vinod Kone, Zhitao Li, bin zheng, fei long, he yi hua