Reamer commented on PR #4835:
URL: https://github.com/apache/zeppelin/pull/4835#issuecomment-2360732927

   In general, I am not a friend of user impersonation. In my opinion, both the 
attempt with `sudo` and `ssh` are hacked solutions.
   In general, there are such approaches that the running program changes the 
user. This can be seen, for example, with the Apache web server, which changes 
from `root` to `www-data`. As far as I know, this is done because Apache opens 
privileged ports (<1024). In the case of Apache, this is usually 80 or 443.
   Zeppelin is already running on a high port e.g. 8080, so it is not necessary 
to change the user here, but you can start directly with an unprivileged user.
   
   Both ssh and sudo may have problems passing signals to the JVM. This can 
lead to the Zeppelin interpreter not shutting down properly.
   
   I had the signal problem in K8s, which is why I switched to `exec`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to