Abstract: Embodiments of this specification provide a container-based task execution method and apparatus. The method can be performed by a container management platform. When receiving a task description file that is for a to-be-executed task and that is submitted by a user, the container management platform can determine whether a first identifier of a first image file carried in the description file is in a whitelist, where the first identifier can be added to the whitelist when it is determined that specified executable file information included in the first image file is secure; and if the first identifier is in the whitelist, considers that the to-be-executed task is secure, and can execute the to-be-executed task based on a container group created by using the task description file and the specified executable file information included in the first image file.

Abstract: A master device, a slave device and computing methods thereof for a cluster computing system are provided. The master device is configured to receive device information of the slave device, select a resource feature model for the slave device according to the device information and a job, estimate a container configuration parameter of the slave device according to the resource feature model, transmit the container configuration parameter to the slave device, and assign the job to the slave device. The slave device is configured to transmit the device information to the master device, receive the job assigned by the master device with the container configuration parameter from the master device, generate at least one container to compute the job according to the container configuration parameter, and generate the resource feature model according to job information corresponding to the job and a metric file.