[jira] [Commented] (HADOOP-15456) create base image for running secure ozone cluster

["Elek, Marton (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-15456?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16554002#comment-16554002 ] 

Elek, Marton commented on HADOOP-15456:
---------------------------------------

Thank you very much the patch [~ajayydv]. Overall it looks good to me, but I can't test it as it doesn't apply any more for me. Could you be so kind to rebase?

Some other comments based on the patch file:

1. I prefer to keep the Hadoop user as the default user. I think it's a more realistic test to use a restricted user by default. But hadoop user can use sudo passwordless. Can we use sudo in the command string when we need root access? (datanode/jsvc start) 

2. Sleep second part is moved to the kerberos part. I would prefer to keep it on the main level not in the KERBEROS_ENABLED block. It could be useful for other services.

3. krb5.conf may require ASF license header (if it's acceptable by the kerberos client apps)

> create base image for running secure ozone cluster
> --------------------------------------------------
>
>                 Key: HADOOP-15456
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15456
>             Project: Hadoop Common
>          Issue Type: Sub-task
>            Reporter: Ajay Kumar
>            Assignee: Ajay Kumar
>            Priority: Major
>         Attachments: HADOOP-15456-docker-hadoop-runner.001.patch, HADOOP-15456-docker-hadoop-runner.002.patch, secure-ozone.tar
>
>
> Create docker image to run secure ozone cluster.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org