1、服務端安裝

1.1 安裝wget

yum -y install wget

1.2?進入 home 目錄

cd /home

1.3?下載centos6.7.iso文件，并掛載

wget https://archive.kernel.org/centos-vault/6.7/isos/x86_64/CentOS-6.7-x86_64-bin-DVD1.iso# 并掛載到mnt目錄
mount -o loop /home/CentOS-6.7-x86_64-bin-DVD1.iso /mnt/

1.4?下載 cloudera/quickstart:5.5.0-0-beta 鏡像，并啟動

docker pull cloudera/quickstart:5.5.0-0-betadocker run --name cdh -idt --hostname=quickstart.cloudera --privileged=true -p 8888:8888 -p 80:80 -p 88:88 -p 88:88/udp -p 8020:8020 -p 8022:8022 -p 7180:7180 -p 21050:21050 -p 50070:50070 -p 50075:50075 -p 50010:50010 -p 8990:8990 -p 1004:1004  -p 50020:50020 -p 8890:8890 -p 60010:60010 -p 10000:10000 -p 10002:10002 -p 1006:1006 -p 25010:25010 -p 25020:25020 -p 18088:18088 -p 8088:8088 -p 19888:19888 -p 7187:7187 -p 11000:11000 -v /mnt/:/mnt/ cloudera/quickstart:5.5.0-0-beta /usr/bin/docker-quickstart

1.5??進入容器，設置時區，并啟動ntpd

docker exec -it cdh /bin/bash
cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime #輸入y
echo 'Asia/Shanghai' >/etc/timezone
service ntpd start

mkdir /root/repo
mv /etc/yum.repos.d/*repo /root/repo/
cd /etc/yum.repos.d/
vi local.repo
# 寫入以下內容
[base]
name=kuhn
baseurl=file:///mnt/
enable=1
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6# 查看當前系統有效的源
yum repolist
yum clean all && yum makecache fast

yum install -y krb5-server krb5-lib krb5-workstation krb5-libs krb5-workstation krb5-auth-dialog gcc-c++

Success! Kerberos is now running. You can enable Kerberos in a Cloudera Manager
cluster from the drop-down menu for that cluster on the CM home page. It will
ask you to confirm that this script performed the following steps:* set up a working KDC.* checked that the KDC allows renewable tickets.* installed the client libraries.* created a proper account for Cloudera Manager.Then, it will prompt you for the following details (accept defaults if not
specified here):KDC Type:                MIT KDCKDC Server Host:         quickstart.clouderaKerberos Security Realm: CLOUDERALater, it will prompt you for KDC account manager credentials:Username: cloudera-scm/admin (@ CLOUDERA)Password: cloudera

/home/cloudera/cloudera-manager --express --force

# 瀏覽器打開
http://IP:7180
Username: cloudera
Password: cloudera

1.10?進入管理，security，啟用kerberos

1.12??繼續填寫信息，這里的信息和控制臺中輸出的內容一致（一模一樣）

KDC Type:                MIT KDC
KDC Server Host:         quickstart.cloudera
Kerberos Security Realm: CLOUDERA

?1.14?填寫account manager憑據，需要與控制臺輸出內容一致，填寫后繼續

Later, it will prompt you for KDC account manager credentials:Username: cloudera-scm/admin (@ CLOUDERA)
Password: cloudera
# 注意：
# 請手動輸入，不要復制粘貼
# 請手動輸入，不要復制粘貼
# 請手動輸入，不要復制粘貼
# 復制粘貼會在下一步報錯

1.18??等待重啟完成，第一條報錯，是因為原本沒有啟動任何服務

1.19?kerberos啟動完成

2??服務端生成客戶端使用的票據

2.1??登錄服務器,進入容器

docker exec -it cdh bash

2.2?通過kb命令，生成keytab

kadmin.local
# 查看用戶列表
listprincs
# 提取主體
xst -k hive.keytab -norandkey hive/quickstart.cloudera@CLOUDERA
# 輸入q退出

docker cp cdh:/home/hive.keytab ./
docker cp cdh:/etc/krb5.conf ./

2.4?下載到客戶端機器