Sqoop Encryption and Data Integrity in Transit¶
Table of Contents
Introduction¶
To use Oracle Native Network Encryption and Oracle Network Data Integrity for all connections from Sqoop the following should all be set.
Gluent Data Platform OS User Profile¶
On the node on which Sqoop commands are initiated, perform the following actions as the OFFLOAD_TRANSPORT_USER:
$ cat << EOF >> ~/.bashrc
export HADOOP_OPTS="-Doracle.net.crypto_checksum_client=REQUIRED -Doracle.net.crypto_checksum_types_client=SHA1 -Doracle.net.encryption_client=REQUIRED -Doracle.net.encryption_types_client=AES256 \${HADOOP_OPTS}"
EOF
Update Gluent Environment File¶
Set SQOOP_OVERRIDES to "-Dmapreduce.map.java.opts='-Doracle.net.crypto_checksum_client=REQUIRED -Doracle.net.crypto_checksum_types_client=SHA1 -Doracle.net.encryption_client=REQUIRED -Doracle.net.encryption_types_client=AES256'".
If OFFLOAD_TRANSPORT_CMD_HOST is set to localhost then this should be changed to the hostname of the server on which the offload command is run.