RE: [Condor-users] condor_rm not killing subprocesses

[Bruce Beckles <mbb10@xxxxxxxxx>]

On Fri, 3 Jun 2005, Michael Yoder wrote:

> Mark is right - there really is no good OS support.  All a process has
> to do is fork twice and have the intermediate process exit.  Then the
> grandchild will be inherited by init.  Condor's method of taking
> snapshots of the process tree catches this...if it doesn't happen too
> fast.  The problem is, it frequently happens too fast.

You can, of course, use dedicated user accounts for each "virtual machine" 
on the execute machine and configure Condor to run jobs under those user 
accounts.  Then when Condor kills a job it should kill all processes 
associated with that job since, as I understand it, in this scenario it 
kills *all* processes running under the UID of the dedicated user account.

See:

	http://www.cs.wisc.edu/condor/manual/v6.6/3_7Security_In.html#SECTION00471200000000000000

or (for the 6.7 series):

	http://www.cs.wisc.edu/condor/manual/v6.7/3_7Security_In.html#SECTION00471200000000000000

Note, of course, that you would not want to do this if you need users' 
jobs to run under the UID of the submitting user.

	-- Bruce

--
Bruce Beckles,
e-Science Specialist,
University of Cambridge Computing Service.