Encrypting Other Hive Directories
Reference information on encrypting other Hive directories.
LOCALSCRATCHDIR: The MapJoin optimization in Hive writes HDFS tables to a local directory and then uploads them to distributed cache. To enable encryption, either disable MapJoin (set
false) or encrypt the
localHive Scratch directory (
hive.exec.local.scratchdir). Performance note: disabling MapJoin will result in slower join performance.
DOWNLOADED_RESOURCES_DIR: Jars that are added to a user session and stored in HDFS are downloaded to
hive.downloaded.resources.dir. If you want these Jar files to be encrypted, configure
hive.downloaded.resources.dirto be part of an encryption zone. This directory needs to be accessible to the HiveServer2.
- NodeManager Local Directory List: Hive stores Jars and MapJoin files in the distributed
cache, so if you'd like to use MapJoin or encrypt Jars and other resource files,
the YARN configuration property NodeManager Local Directory List
yarn.nodemanager.local-dirs) must be configured to a set of encrypted local directories on all nodes.
Alternatively, to disable MapJoin, set