[
https://issues.apache.org/jira/browse/HDFS-6509?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14071025#comment-14071025
]
Charles Lamb commented on HDFS-6509:
------------------------------------
HDFS-6509.001.patch:
. Add a /.reserved/raw HDFS filesystem namespace.
. Most of the work is done in FSDirectory#resolvePath which has been refactored
to handle both /.reserved/.inodes and /.reserved/raw. In general, resolvePath
just strips off the /.reserved/raw prefix and returns the rest of the path.
. Before resolvePath is called in FSNamesystem for the read and create
operations, we determine if the path is in the /.reserved/raw namespace and if
it is, make note of that. Then, later on we return an HdfsFileStatus that
either has a FileEncryptionInfo or not. This tells the client side whether or
not to use an encryption stream.
> create a /.reserved/raw filesystem namespace
> --------------------------------------------
>
> Key: HDFS-6509
> URL: https://issues.apache.org/jira/browse/HDFS-6509
> Project: Hadoop HDFS
> Issue Type: Sub-task
> Components: security
> Affects Versions: fs-encryption (HADOOP-10150 and HDFS-6134)
> Reporter: Charles Lamb
> Assignee: Charles Lamb
> Attachments: HDFS-6509.001.patch,
> HDFS-6509distcpandDataatRestEncryption-2.pdf,
> HDFS-6509distcpandDataatRestEncryption.pdf
>
>
> This is part of the work for making distcp work with Data at Rest Encryption.
> Per the attached document, create a /.reserved/raw HDFS filesystem namespace
> that allows access to the encrypted bytes of a file.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
