accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sean Busbey (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-3338) Update example classpath configuration
Date Mon, 17 Nov 2014 16:00:35 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-3338?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14214759#comment-14214759
] 

Sean Busbey commented on ACCUMULO-3338:
---------------------------------------

-1

I've run into many _many_ cases where users treat the example configurations as appropriate
for production use. That is, they copy them and then they only change something if stuff doesn't
appear to work. We can deny this with our messaging all we want, but our actions (specifically
in having a bootstrap_config.sh file and telling people to run it) don't line up with that.

This change seems to encourage that practice, IMO. If there are classpaths that are better
suited for running in HDP, then HDP should include an example configuration that does that
or have its cluster configuration management software include the correct paths when it generates
the configuration for an Accumulo instance. We do not include vendor specific paths for any
other distribution and I don't think we should start now.

{quote}
bq. That's not quite true. The risk of extra paths in the classpath is that the extra path
might be writable by other users, depending on the platform and circumstance, and could conceivably
contain undesirable classes at some future point, regardless of whether they currently contain
any. In other words, the risk is not "known bad jars present", it's "not known to be free
of bad jars". (by "bad jars", I mean anything incompatible, malicious, or unintentional)

That's true. I was assuming that children of /usr (aside from /usr/local) will not be writable
by anyone but a super-user.
{quote}

Systems get misconfigured all the time and we should be conservative in this regard.

> Update example classpath configuration
> --------------------------------------
>
>                 Key: ACCUMULO-3338
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-3338
>             Project: Accumulo
>          Issue Type: Improvement
>          Components: docs
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>            Priority: Trivial
>             Fix For: 1.6.2, 1.7.0
>
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> Make sure the example configuration general.classpaths contain some extra paths for HDFS
jars which make them more likely to generally work.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message