|
| 1 | +#!/bin/bash |
| 2 | +# |
| 3 | +# Licensed to the Apache Software Foundation (ASF) under one or more |
| 4 | +# contributor license agreements. See the NOTICE file distributed with |
| 5 | +# this work for additional information regarding copyright ownership. |
| 6 | +# The ASF licenses this file to You under the Apache License, Version 2.0 |
| 7 | +# (the "License"); you may not use this file except in compliance with |
| 8 | +# the License. You may obtain a copy of the License at |
| 9 | +# |
| 10 | +# http://www.apache.org/licenses/LICENSE-2.0 |
| 11 | +# |
| 12 | +# Unless required by applicable law or agreed to in writing, software |
| 13 | +# distributed under the License is distributed on an "AS IS" BASIS, |
| 14 | +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 15 | +# See the License for the specific language governing permissions and |
| 16 | +# limitations under the License. |
| 17 | +# |
| 18 | +attempt_setup_fake_passwd_entry() { |
| 19 | + # Check whether there is a passwd entry for the container UID |
| 20 | + local myuid; myuid="$(id -u)" |
| 21 | + # If there is no passwd entry for the container UID, attempt to fake one |
| 22 | + # You can also refer to the https://github.com/docker-library/official-images/pull/13089#issuecomment-1534706523 |
| 23 | + # It's to resolve OpenShift random UID case. |
| 24 | + # See also: https://github.com/docker-library/postgres/pull/448 |
| 25 | + if ! getent passwd "$myuid" &> /dev/null; then |
| 26 | + local wrapper |
| 27 | + for wrapper in {/usr,}/lib{/*,}/libnss_wrapper.so; do |
| 28 | + if [ -s "$wrapper" ]; then |
| 29 | + NSS_WRAPPER_PASSWD="$(mktemp)" |
| 30 | + NSS_WRAPPER_GROUP="$(mktemp)" |
| 31 | + export LD_PRELOAD="$wrapper" NSS_WRAPPER_PASSWD NSS_WRAPPER_GROUP |
| 32 | + local mygid; mygid="$(id -g)" |
| 33 | + printf 'spark:x:%s:%s:${SPARK_USER_NAME:-anonymous uid}:%s:/bin/false\n' "$myuid" "$mygid" "$SPARK_HOME" > "$NSS_WRAPPER_PASSWD" |
| 34 | + printf 'spark:x:%s:\n' "$mygid" > "$NSS_WRAPPER_GROUP" |
| 35 | + break |
| 36 | + fi |
| 37 | + done |
| 38 | + fi |
| 39 | +} |
| 40 | + |
| 41 | +if [ -z "$JAVA_HOME" ]; then |
| 42 | + JAVA_HOME=$(java -XshowSettings:properties -version 2>&1 > /dev/null | grep 'java.home' | awk '{print $3}') |
| 43 | +fi |
| 44 | + |
| 45 | +SPARK_CLASSPATH="$SPARK_CLASSPATH:${SPARK_HOME}/jars/*" |
| 46 | +for v in "${!SPARK_JAVA_OPT_@}"; do |
| 47 | + SPARK_EXECUTOR_JAVA_OPTS+=( "${!v}" ) |
| 48 | +done |
| 49 | + |
| 50 | +if [ -n "$SPARK_EXTRA_CLASSPATH" ]; then |
| 51 | + SPARK_CLASSPATH="$SPARK_CLASSPATH:$SPARK_EXTRA_CLASSPATH" |
| 52 | +fi |
| 53 | + |
| 54 | +if ! [ -z ${PYSPARK_PYTHON+x} ]; then |
| 55 | + export PYSPARK_PYTHON |
| 56 | +fi |
| 57 | +if ! [ -z ${PYSPARK_DRIVER_PYTHON+x} ]; then |
| 58 | + export PYSPARK_DRIVER_PYTHON |
| 59 | +fi |
| 60 | + |
| 61 | +# If HADOOP_HOME is set and SPARK_DIST_CLASSPATH is not set, set it here so Hadoop jars are available to the executor. |
| 62 | +# It does not set SPARK_DIST_CLASSPATH if already set, to avoid overriding customizations of this value from elsewhere e.g. Docker/K8s. |
| 63 | +if [ -n "${HADOOP_HOME}" ] && [ -z "${SPARK_DIST_CLASSPATH}" ]; then |
| 64 | + export SPARK_DIST_CLASSPATH="$($HADOOP_HOME/bin/hadoop classpath)" |
| 65 | +fi |
| 66 | + |
| 67 | +if ! [ -z ${HADOOP_CONF_DIR+x} ]; then |
| 68 | + SPARK_CLASSPATH="$HADOOP_CONF_DIR:$SPARK_CLASSPATH"; |
| 69 | +fi |
| 70 | + |
| 71 | +if ! [ -z ${SPARK_CONF_DIR+x} ]; then |
| 72 | + SPARK_CLASSPATH="$SPARK_CONF_DIR:$SPARK_CLASSPATH"; |
| 73 | +elif ! [ -z ${SPARK_HOME+x} ]; then |
| 74 | + SPARK_CLASSPATH="$SPARK_HOME/conf:$SPARK_CLASSPATH"; |
| 75 | +fi |
| 76 | + |
| 77 | +# Switch to spark if no USER specified (root by default) otherwise use USER directly |
| 78 | +switch_spark_if_root() { |
| 79 | + if [ $(id -u) -eq 0 ]; then |
| 80 | + echo gosu spark |
| 81 | + fi |
| 82 | +} |
| 83 | + |
| 84 | +case "$1" in |
| 85 | + driver) |
| 86 | + shift 1 |
| 87 | + CMD=( |
| 88 | + "$SPARK_HOME/bin/spark-submit" |
| 89 | + --conf "spark.driver.bindAddress=$SPARK_DRIVER_BIND_ADDRESS" |
| 90 | + --deploy-mode client |
| 91 | + "$@" |
| 92 | + ) |
| 93 | + attempt_setup_fake_passwd_entry |
| 94 | + # Execute the container CMD under tini for better hygiene |
| 95 | + exec $(switch_spark_if_root) /usr/bin/tini -s -- "${CMD[@]}" |
| 96 | + ;; |
| 97 | + executor) |
| 98 | + shift 1 |
| 99 | + CMD=( |
| 100 | + ${JAVA_HOME}/bin/java |
| 101 | + "${SPARK_EXECUTOR_JAVA_OPTS[@]}" |
| 102 | + -Xms$SPARK_EXECUTOR_MEMORY |
| 103 | + -Xmx$SPARK_EXECUTOR_MEMORY |
| 104 | + -cp "$SPARK_CLASSPATH:$SPARK_DIST_CLASSPATH" |
| 105 | + org.apache.spark.scheduler.cluster.k8s.KubernetesExecutorBackend |
| 106 | + --driver-url $SPARK_DRIVER_URL |
| 107 | + --executor-id $SPARK_EXECUTOR_ID |
| 108 | + --cores $SPARK_EXECUTOR_CORES |
| 109 | + --app-id $SPARK_APPLICATION_ID |
| 110 | + --hostname $SPARK_EXECUTOR_POD_IP |
| 111 | + --resourceProfileId $SPARK_RESOURCE_PROFILE_ID |
| 112 | + --podName $SPARK_EXECUTOR_POD_NAME |
| 113 | + ) |
| 114 | + attempt_setup_fake_passwd_entry |
| 115 | + # Execute the container CMD under tini for better hygiene |
| 116 | + exec $(switch_spark_if_root) /usr/bin/tini -s -- "${CMD[@]}" |
| 117 | + ;; |
| 118 | + |
| 119 | + *) |
| 120 | + # Non-spark-on-k8s command provided, proceeding in pass-through mode... |
| 121 | + exec "$@" |
| 122 | + ;; |
| 123 | +esac |
0 commit comments