资源隔离，Apache Spark YARN和Standalone，关于在云中运行VM

For Spark YARN and Standalone resource allocation is achieved for example via spark-submit. This limits for example that containers are strictly limited to the memory requested. This is done with using CGroups a linux kernel feature. But how is the research isolation done for YARN and standalone? Here I am especially curious how the in-memory computation is secured when running your VM on a server shared with users you might not know, for example when running on the machine of a cloud provider. For Spark YARN and Standalone resource allocati