Creating a Run User

Create a run user and set the user password.

• For security purposes, you are not allowed to run OmniShuffle as the root user.
• The user model in the following sections is for reference only. Modify the user model based on the actual service environment.

Create an ockadmin user for all nodes in the cluster. The O&M account has operation permissions on the run account.The following uses ockadmin as an example. Alternatively, you can use the O&M user to invoke the create user.json file.

Suggestions for creating a run user:

Add environment variable export HISTSIZE=0 for the ockadmin user so that they cannot query historical records.

1. Create an ockadmin user.

   1	useradd ockadmin

2. Add the ockadmin user to the ockadmin group and set the password.

   usermod -a -G ockadmin ockadmin
   passwd ockadmin

   

   To ensure your account security, you are advised to change your password every 90 days.

3. Add the ZooKeeper and Spark users to the ockadmin owner group.

   In this example, the ZooKeeper and Spark users are zookeeperadmin and sparkadmin, respectively.

   usermod -a -G ockadmin zookeeperadmin
   usermod -a -G ockadmin sparkadmin

4. Add the following content to the /etc/security/limits.conf file:

   1	echo "ockadmin hard nofile 102400" >> /etc/security/limits.conf