Created 10-22-2019 08:01 AM
hi
I created a CentOS 7.7 Linux machine (but also happens with RHEL 7.4) on Azure.
I installed the cloudera-manager RPM packages via yum
When i try to start the cloudera-scm-server-db service I get "permission denied" on /var/lib/cloudera-scm-server-db/data
I added -x flag to the /usr/share/cmf/bin/initialize_embedded_db.sh, and added the "strace" command before the initdb command.
I see that the command is running as cloudera-scm user (in the /var/log/messages file)
and Is see in the strace output, that it fails on "chmod("/var/lib/cloudera-scm-server-db/data", 0700) = -1 EACCES (Permission denied)"
When I run the command from Linux CLI as user cloudera-scm it runs OK.
Does the Linux behave differently on Azure (i.e. more security features)
I don't think it relates to firewall
I see in the /var/log/messages the following messages:
Oct 22 12:53:14 cdh-doxi-1 systemd: Created slice User Slice of cloudera-scm.
Oct 22 12:53:14 cdh-doxi-1 systemd: Started Session c1 of user cloudera-scm.
Oct 22 12:53:16 cdh-doxi-1 systemd: Removed slice User Slice of cloudera-scm.
could this slices are doing the damage?
I see it relates to cgroups (but I'm not sure what it actually means) - can I turn this off somewhere?
do i need to reinstall the Linux with different flags?
TIA
Doron
Created 10-22-2019 09:24 AM
Can you verify the proper ownership of the cloudera-scm-server-db folder by running below commands :
chown -R cloudera-scm:cloudera-scm /var/lib/cloudera-scm-server-db/
chmod 700 /var/lib/cloudera-scm-server-db/
chmod 700 /var/lib/cloudera-scm-server-db/data
service cloudera-scm-server-db start
Also verify the selinux status by running
sestatus
Created 10-22-2019 09:24 AM
Can you verify the proper ownership of the cloudera-scm-server-db folder by running below commands :
chown -R cloudera-scm:cloudera-scm /var/lib/cloudera-scm-server-db/
chmod 700 /var/lib/cloudera-scm-server-db/
chmod 700 /var/lib/cloudera-scm-server-db/data
service cloudera-scm-server-db start
Also verify the selinux status by running
sestatus
Created 10-22-2019 09:38 AM
hi
thanks for replying. the direcory ownership is cloudera-scm for sure - I am able to run the same commands from CLI.
I will check selinux.
Thanks
Created 10-22-2019 12:00 PM
Thanks @ssulav !!
it was indeed selinux!
on premise we've set the selinux to be disabled as default, so I've forgot all about it...
I've disabled it and Cloudera server db and server are running well.
Thanks again
DV
Created 10-22-2019 12:05 PM
Good news.
If that resolves your issue, please spare some time in accepting the solution. Thanks.