Page MenuHomePhabricator

[Hive] Investigate Hadoop packaging, install, security monitoring.
Closed, ResolvedPublic

Description

Hadoop is a dependency for Hive, which is a dependency for Trino.

We need to investigate how we want to fetch, install and configure the service, and develop a process to monitor for vulnerabilities and handle software updates.

See https://kontext.tech/article/448/install-hadoop-330-on-linux for example.

Event Timeline

First pass of getting the prototype config into puppet is done:

  • /etc/default/hadoop - has environment variables from the prototype .bashrc
  • /var/lib/hadoop/etc-test - has config files from /var/lib/hadoop/etc/hadoop, templated for several site variables
  • /var/log/hadoop - created and writable by user hadoop
  • hadoop user has ssh keys configured and host keys are cached

Still to do:

  • go through the configs and make sure everything is according to plan
  • systemd units for each of the hadoop-related processes
  • security tracking and maintenance process
Jgreen triaged this task as Medium priority.Oct 28 2024, 5:25 PM

Puppet config is done, it does the install and configuration to the point where hadoop is up and running. The following are known and deferred for the moment:

  • firejail config needed, it is not running in firejail yet
  • firewall policy
  • monitoring
  • security tracking and maintenance process

Moving the task to Backlog for now.

Jgreen renamed this task from [Hadoop] Investigate packaging, install, security monitoring. to [Hive] Investigate Hadoop packaging, install, security monitoring..Apr 16 2025, 2:11 PM