You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Shwetha G S (JIRA)" <ji...@apache.org> on 2017/12/27 08:15:00 UTC

[jira] [Issue Comment Deleted] (HIVE-18341) Add repl load support for adding "raw" namespace for TDE with same encryption keys

     [ https://issues.apache.org/jira/browse/HIVE-18341?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shwetha G S updated HIVE-18341:
-------------------------------
    Comment: was deleted

(was: If distcp uses raw namespace for replication between source and target, and source and target have different encryption keys, distcp should succeed as it just reads and writes raw bytes. But read from target will probably fail or read garbled data)

> Add repl load support for adding "raw" namespace for TDE with same encryption keys
> ----------------------------------------------------------------------------------
>
>                 Key: HIVE-18341
>                 URL: https://issues.apache.org/jira/browse/HIVE-18341
>             Project: Hive
>          Issue Type: Bug
>    Affects Versions: 3.0.0
>            Reporter: anishek
>            Assignee: anishek
>             Fix For: 3.0.0
>
>         Attachments: HIVE-18341.0.patch
>
>
> https://hadoop.apache.org/docs/stable/hadoop-project-dist/hadoop-hdfs/TransparentEncryption.html#Running_as_the_superuser
> "a new virtual path prefix, /.reserved/raw/, that gives superusers direct access to the underlying block data in the filesystem. This allows superusers to distcp data without needing having access to encryption keys, and also avoids the overhead of decrypting and re-encrypting data."
> We need to introduce a new option in "Repl Load" command that will change the files being copied in distcp to have this "/.reserved/raw/" namespace before the file paths.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)