A Docker image to quick start Apache Phoenix on Apache HBase to provide an SQL interface in a Kerberos secured single-node Hadoop cluster.

Apache Phoenix is a SQL skin over HBase delivered as a client-embedded JDBC driver targeting low latency queries over HBase data. Apache Phoenix takes your SQL query, compiles it into a series of HBase scans, and orchestrates the running of those scans to produce regular JDBC result sets. The table metadata is stored in an HBase table and versioned, such that snapshot queries over prior versions will automatically use the correct schema. Direct use of the HBase API, along with coprocessors and custom filters, results in performance on the order of milliseconds for small queries, or seconds for tens of millions of rows. MIT Kerberos is the authentication system of Hadoop that is widely used in production grade Hadoop clusters together with an authorisation system like Apache Ranger or Apache Sentry.

This image is very useful for Hadoop engineers that work with Apache Phoenix and HBase who want to have a real world scenario with highly secured Hadoop clusters in order to test their code locally to prevent the need of deploying it to remote servers.

The Docker image is also available on Docker Hub.

• Apache Hadoop - 2.7.4
• Apache Zookeeper - 3.4.10
• Apache HBase - 1.3.1
• Apache Phoenix - 4.11.0

You can simply define these variables in the docker-compose.yml.

Clone the Github project and run

docker-compose up -d

You can also build the Docker image locally with

docker build -t knappek/phoenix-secure .

Login to the Phoenix container with

docker exec -it <container-name> /bin/bash

Check whether you have a valid Kerberos ticket with klist and create one with kinit by entering the password afterwards, default is password.

hbase shell

/usr/local/phoenix/bin/sqlline.py localhost

https://phoenix.apache.org/faq.html

docker-compose up fails for the first time with the error

Login failure for nn/[email protected] from keytab /etc/security/keytabs/nn.service.keytab: javax.security.auth.login.LoginException: Unable to obtain password from user

Stop the containers with docker-compose down and start again with docker-compose up -d.