Comments (3)
I don't see this being a bug with Priam. This is expected behavior in Linux environment. Because you ran tomcat as root, Priam's threads run with root privileges and the default umask on Linux systems is 022, so if you restore files, perhaps they will have root as the owner. IMHO running Tomcat or Cassandra as root is not recommended, I recommend configuring tomcat to run as cassandra user or giving it sudo rights to execute cassandra start/stop script.
from priam.
I agree this is expected behavior of the open system call. However if you are running as root, there should be a property indicating what the proper owner of the files should be.
IMHO running Tomcat or Cassandra as root is not recommended
Again, this is usually correct, but that's what the priam docs say. From https://github.com/Netflix/Priam/wiki/Setup:
Web Container setup
Since Priam changes the configuration files for Cassandra and starts/stops the services, the web container it's running in must either run as root, or it must have sufficient passwordless sudo rights to modify the cassandra.yaml file and execute the /etc/init.d/cassandra script.
There's a further lack of clarity here: note that sudo is not mentioned as the way of granting these rights - I would assume that the above should be read as granting execute rights on the script, and not granting sudo rights. What I recall from the code is that Priam actually does use sudo.
In any case, the overall point here is that if cassandra+tomcat can end up getting run as root, and if it is root, it should have a property, something like priam.cassandra_user which will default to "cassandra" that it will chown all files to.
from priam.
I've removed the confusing (if not slightly psychotic) advice to run as root, just need privs to execute rights on the script, as per pcn's recommendation. Thanks.
from priam.
Related Issues (20)
- Build Failed
- Backup SSTables from attached EBS volumes
- Sample Issue: Checking slack integration.
- Priam should order stop and start HOT 2
- why to Install Cassandra and web container (such as tomcat) on EC2 instances for netflix-Priam setup? HOT 1
- Architecture diagram of Priam with Cassandra HOT 1
- Priam is not checking the C* process health.
- .travis.yml: The 'sudo' tag is now deprecated in Travis CI
- Double-Checked Locking HOT 1
- Unreleased Resource: Streams HOT 1
- Please open a security advisory
- IDEA Sync fail
- There is a vulnerability in Quartz Enterprise Job Scheduler 2.3.0 ,upgrade recommended
- There is a vulnerability in Apache Commons Configuration 2.4 ,upgrade recommended
- There is a vulnerability in Cassandra 2.1.17 ,upgrade recommended
- There is a vulnerability in SnakeYAML 1.23,upgrade recommended
- There is a vulnerability in Guava: Google Core Libraries for Java 21.0 ,upgrade recommended
- There is a vulnerability in Apache HttpComponents Client(aka Apache HttpClient) 4.5.6 ,upgrade recommended HOT 1
- Document to setup the same with Scylladb, as there are muliple param changes
- Multiple warnings while buliding Priam HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from priam.