[
https://issues.apache.org/jira/browse/HIVE-18341?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16305193#comment-16305193
]
Shwetha G S commented on HIVE-18341:
------------------------------------
{quote}
One thing to note is since for regular file copies we use the fileSystem copy,
even for TDE deployments with same keys we wont be able to leverage the
optimization that distcp does
{quote}
If the filesystem read uses /.reserved/raw in the path, even file copy should
copy encrypted bytes, right?
> Add repl load support for adding "raw" namespace for TDE with same encryption
> keys
> ----------------------------------------------------------------------------------
>
> Key: HIVE-18341
> URL: https://issues.apache.org/jira/browse/HIVE-18341
> Project: Hive
> Issue Type: Bug
> Affects Versions: 3.0.0
> Reporter: anishek
> Assignee: anishek
> Fix For: 3.0.0
>
> Attachments: HIVE-18341.0.patch, HIVE-18341.1.patch
>
>
> https://hadoop.apache.org/docs/stable/hadoop-project-dist/hadoop-hdfs/TransparentEncryption.html#Running_as_the_superuser
> "a new virtual path prefix, /.reserved/raw/, that gives superusers direct
> access to the underlying block data in the filesystem. This allows superusers
> to distcp data without needing having access to encryption keys, and also
> avoids the overhead of decrypting and re-encrypting data."
> We need to introduce a new option in "Repl Load" command that will change the
> files being copied in distcp to have this "/.reserved/raw/" namespace before
> the file paths.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
