question Re: HDP on hardened CentOS (by CIS). in Archives of Support Questions (Read Only)

HDP on hardened CentOS (by CIS).

jakub_igla1 — Mon, 13 Aug 2018 17:22:27 GMT

Hi, I want to deploy HDP 2.6 (using cloudbreak 2.7.1) using prehardened images by CIS in Azure.
What should I take into consideration? By default only port 22 is opened by iptables.

(I also struggle to deploy cbd 2.7 on that image as docker containers seem to not talk to each other, but will raise another issue if I won't have further luck with it).

Re: HDP on hardened CentOS (by CIS).

darvasip — Mon, 13 Aug 2018 21:22:31 GMT

@Jakub Igla

I am not sure that I understood your question correctly, but you should definitely use the custom image facility of Cloudbreak and use your own base image with the pre-hardening and the pre-requisites of Cloudbreak will be burnt by our scripts.

The remaining steps to utilize your custom image are documented here.

Hope this helps!

Re: HDP on hardened CentOS (by CIS).

jakub_igla1 — Mon, 13 Aug 2018 22:41:20 GMT

Thans @pdarvasi. I will let you know how it did go. Also do you mean, that cb scripts will open required ports etc?

Cheers!

Re: HDP on hardened CentOS (by CIS).

darvasip — Tue, 14 Aug 2018 04:30:01 GMT

The open ports are determined by the network security group settings, which can be set in cluster creation wizard using Cloudbreak UI or cluster skeleton using Cloudbreak CLI.

Re: HDP on hardened CentOS (by CIS).

jakub_igla1 — Tue, 14 Aug 2018 12:57:07 GMT

Hi,

By open open ports I mean communication between nodes for hadoop operations.