Creating a Run User

Create a run user and set the user password.

For security purposes, you are not allowed to run OmniShuffle as the root user.
The user model in the following sections is for reference only. Modify the user model based on the actual service environment.

The O&M account has operation permissions on the run account.

The following uses ockadmin as an example. Alternatively, you can use the O&M user to invoke the create user.json file. (For details about the create user.json file, see create user.json. You can copy the corresponding content in the JSON file in the appendix and save it as the create user.json file.)

Suggestions for creating a run user:

Add environment variable export HISTSIZE=0 for the ockadmin user so that they cannot query historical records.

Create an ockadmin user.
1
useradd ockadmin
Add the ockadmin user to the ockadmin group and set the password.
```
usermod -a -G ockadmin ockadmin
passwd ockadmin
```
To ensure your account security, you are advised to change your password every 90 days.
Add the ZooKeeper and Spark users to the ockadmin owner group.
In this example, the ZooKeeper and Spark users are zookeeperadmin and sparkadmin, respectively.
```
usermod -a -G ockadmin zookeeperadmin
usermod -a -G ockadmin sparkadmin
```

Add the following content to the /etc/security/limits.conf file:

echo "ockadmin  hard    nofile  102400" >> /etc/security/limits.conf

Parent topic: Installing OmniShuffle