[HDFS-7003] Add NFS Gateway support for reading and writing to encryption zones

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.0
• Component/s: encryption, nfs
• Target Version/s: 2.6.0
• Assignee: Charles Lamb
• Reporter: Stephen Chu
• Created: 05/Sep/14 17:35
• Updated: 01/Dec/14 03:08
• Resolved: 18/Sep/14 21:59

Description

Currently, reading and writing within encryption zones does not work through the NFS gateway.

For example, we have an encryption zone /enc. Here's the difference of reading the file from hadoop fs and the NFS gateway:

[hdfs@schu-enc2 ~]$ hadoop fs -cat /enc/hi
hi
[hdfs@schu-enc2 ~]$ cat /hdfs_nfs/enc/hi
??

If we write a file using the NFS gateway, we'll see behavior like this:

[hdfs@schu-enc2 ~]$ echo "hello" > /hdfs_nfs/enc/hello
[hdfs@schu-enc2 ~]$ cat /hdfs_nfs/enc/hello
hello
[hdfs@schu-enc2 ~]$ hdfs dfs -cat /enc/hello
???tp[hdfs@schu-enc2 ~]$