[HDDS-1632] Make the hadoop home world readable and avoid sudo in hadoop-runner

• Type: Improvement
• Status: Resolved
• Priority: Trivial
• Resolution: Fixed
• Fix Version/s: 0.4.1
• Labels: pull-request-available
• Target Version/s: 0.4.1
• Sprint: Done
• Assignee: Marton Elek
• Reporter: Marton Elek
• Created: 03/Jun/19 08:19
• Updated: 05/Aug/19 14:46
• Resolved: 04/Jun/19 06:16

Description

eyang reporeted in HDDS-1609 that the hadoop-runner image can be started without mounting a real hadoop (usually, it's ounted) AND using a different uid:

docker run -it  -u $(id -u):$(id -g) apache/hadoop-runner bash
docker: Error response from daemon: OCI runtime create failed: container_linux.go:345: starting container process caused "chdir to cwd (\"/opt/hadoop\") set in config.json failed: permission denied": unknown.

There are two blocking problems here:

• the /opt/hadoop directory (which is the CWD inside the container) is 700 instead of 755
• The usage of sudo in started scripts (sudo is not possible if the real user is not added to the /etc/passwd)

Both of them are addressed by this patch.

Issue Links

• links to: GitHub Pull Request #890
• links to: GitHub Pull Request #893