1.  Secure the Gateway Directories

Installing Knox Gateway with the platform-specific installers creates the following directories:

  • /usr/lib/knox is the $gateway_home directory, see table below.

  • /var/log/knox contains the output files from the Knox Gateway.

  • /var/run/knox contains the Process ID (PID) for the currently running Knox Gateway.

The table below describes the files and directories in $gateway_home:

 

Table 2.1. Gateway Home Directory Contents

Directory/file nameDescription
confContains global gateway configuration files.
binContains the executable shell scripts, batch files, and JARs for clients and servers.
deploymentsContains cluster topology descriptor files that define Hadoop clusters, see Configure Cluster Topologies.
libContains the JARs for all the components that make up the gateway.
depContains the JARs for all of the components upon which the gateway depends.
extA directory where user supplied extension JARs can be placed to extends the gateways functionality.
samplesContains a number of samples that can be used to explore the functionality of the gateway.
templatesContains default configuration files that can be copied and customized.
READMEProvides basic information about the Apache Knox Gateway.
ISSUESDescribes significant known issues.
CHANGESEnumerates the changes between releases.
LICENSEDocuments the license under which this software is provided.
NOTICEDocuments required attribution notices for included dependencies.
DISCLAIMERDocuments that this release is from a project undergoing incubation at Apache.

Hortonworks recommends creating a specific user, such as knox, to run and secure the gateway. The following outlines the recommended ownership when running the Knox Gateway:

  • /usr/lib/knox ($gateway_home): Contains the installed application files (i.e. binaries). Owned by root and read-only for others.

  • /etc/knox: Contains the gateway configuration files. Owned by root and read-only for others.

  • /var/lib/knox/data: Contains gateway security, cluster deployments, and auditing information; the gateway writes to this directory at runtime. Owned, writable and readable by the knox user.

  • /var/log/knox: Contains gateway log files. Owned and writableby the knox user and read-only for others.

  • /var/run/knox: Contains the gateway PID files. Owned and writableby the knox user and read-only for others.

[Note]Note

For instructions on setting up security, such as Kerberos and SSL configuration, see Configuring Knox Gateway Security.


loading table of contents...