[HADOOP-8984] S3 File Permissions

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Incomplete
• Affects Version/s: 2.0.2-alpha

Environment

Hadoop cluster using 3 small Amazon EC2 machines and the S3FileSystem.
Hadoop compiled from latest trunc: 0.22.0-SNAPSHOT

core-site:
fs.default.name=s3://my-s3-bucket
fs.s3.awsAccessKeyId=[key id omitted]
fs.s3.awsSecretAccessKey=[secret key omitted]
hadoop.tmp.dir=/mnt/hadoop.tmp.dir

hdfs-site: empty

mapred-site:
mapred.job.tracker=[domU-XX-XX-XX-XX-XX-XX.compute-1.internal:9001]
mapred.map.tasks=6
mapred.reduce.tasks=6

• Tags: s3filesystem permissions owner staging
• Assignee: Unassigned
• Reporter: Danny Leshem
• Created: 28/Apr/10 07:10
• Updated: 30/Jul/14 18:31
• Resolved: 30/Jul/14 18:31

Description

Till lately I've been using 0.20.2 and everything was ok. Now I'm using the latest trunc 0.22.0-SNAPSHOT and getting the following thrown:

Exception in thread "main" java.io.IOException: The ownership/permissions on the staging directory s3://my-s3-bucket/mnt/hadoop.tmp.dir/mapred/staging/root/.staging is not as expected. It is owned by and permissions are rwxrwxrwx. The directory must be owned by the submitter root or by root and permissions must be rwx------
at
org.apache.hadoop.mapreduce.JobSubmissionFiles.getStagingDir(JobSubmissionFiles.java:107)
at
org.apache.hadoop.mapreduce.JobSubmitter.submitJobInternal(JobSubmitter.java:312)
at org.apache.hadoop.mapreduce.Job.submit(Job.java:961)
at org.apache.hadoop.mapreduce.Job.waitForCompletion(Job.java:977)
at com.mycompany.MyJob.runJob(MyJob.java:153)
at com.mycompany.MyJob.run(MyJob.java:177)
at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:65)
at com.mycompany.MyOtherJob.runJob(MyOtherJob.java:62)
at com.mycompany.MyOtherJob.run(MyOtherJob.java:112)
at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:65)
at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:79)
at com.mycompany.MyOtherJob.main(MyOtherJob.java:117)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.hadoop.util.RunJar.main(RunJar.java:187)

(The "it is owned by ... and permissions " is not a mistake, seems like the empty string is printed there)

Issue Links

• relates to: MAPREDUCE-181 Secure job submission
• relates to: HADOOP-9042 Add a test for umask in FileSystemContractBaseTest