rya_vm_postboot.sh

#!/bin/bash

# Initial sections copied from Accumulo recipe:
# https://github.com/RENCI-NRIG/exogeni-recipes/tree/master/accumulo/accumulo_exogeni_postboot.txt

############################################################
# Hadoop
############################################################

HADOOP_VERSION=hadoop-2.7.3

# setup /etc/hosts
############################################################
echo 172.25.8.178 accu-nn >> /etc/hosts
echo 172.25.8.179 accu-rm >> /etc/hosts
echo 172.25.8.188 accu-wrkr0 >> /etc/hosts
echo 172.25.8.189 accu-wrkr1 >> /etc/hosts
echo 172.25.8.193 accu-wrkr2 >> /etc/hosts

SELF_NAME=`hostname | cut -d. -f1`

# Install Java
############################################################
yum makecache fast
yum -y update # disabled only during testing. should be enabled in production
yum install -y wget java-1.8.0-openjdk-devel

export JAVA_HOME=$(readlink -f /usr/bin/java | sed "s:/bin/java::")

cat > /etc/profile.d/java.sh << EOF
export JAVA_HOME=$(readlink -f /usr/bin/java | sed "s:/bin/java::")
export PATH=\$JAVA_HOME/bin:\$PATH
EOF

# Install Hadoop
############################################################
mkdir -p /opt/${HADOOP_VERSION}
curl --location --insecure --show-error https://dist.apache.org/repos/dist/release/hadoop/common/${HADOOP_VERSION}/${HADOOP_VERSION}.tar.gz > /opt/${HADOOP_VERSION}.tgz
tar -C /opt/${HADOOP_VERSION} --extract --file /opt/${HADOOP_VERSION}.tgz --strip-components=1
rm -f /opt/${HADOOP_VERSION}.tgz*

export HADOOP_PREFIX=/opt/${HADOOP_VERSION}
export HADOOP_YARN_HOME=${HADOOP_PREFIX}
HADOOP_CONF_DIR=${HADOOP_PREFIX}/etc/hadoop

cat > /etc/profile.d/hadoop.sh << EOF
export HADOOP_PREFIX=${HADOOP_PREFIX}
export HADOOP_YARN_HOME=${HADOOP_PREFIX}
export HADOOP_CONF_DIR=${HADOOP_PREFIX}/etc/hadoop
export PATH=\$HADOOP_PREFIX/bin:\$PATH
EOF

# Configure iptables for Hadoop (Centos 6)
############################################################
# https://www.vultr.com/docs/setup-iptables-firewall-on-centos-6
iptables -F; iptables -X; iptables -Z
#Allow all loopback (lo) traffic and drop all traffic to 127.0.0.0/8 other than lo:
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -d 127.0.0.0/8 -j REJECT
#Block some common attacks:
iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP
#Accept all established inbound connections:
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#Allow SSH connections:
iptables -A INPUT -p tcp --dport 22 -j ACCEPT

# Allow internal cluster connections
#iptables -I INPUT -i eth1 -p tcp -j ACCEPT
iptables -A INPUT -p tcp -s 172.25.8.0/24 --dport 22 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT

#Node specific iptables config
if [[ ${SELF_NAME} == accu-nn ]]
then
  # connections to namenode allowed from outside the cluster
  iptables -A INPUT -p tcp --dport 50070 -j ACCEPT
elif [[ ${SELF_NAME} == accu-rm ]]
then
  # connections to resource manager from outside the cluster
  iptables -A INPUT -p tcp --dport 8088 -j ACCEPT
elif [[ ${SELF_NAME} == accu-wrkr* ]]
then
  # TODO ?
  : #no-op
elif [[ ${SELF_NAME} == accu-master ]]
then
  # connections to accumulo monitor from outside the cluster
  iptables -A INPUT -p tcp --dport 9995 -j ACCEPT
fi

# complete the iptables config
#set the default policies:
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
#Save the iptables configuration with the following command:
service iptables save

# Create hadoop user and setup SSH
############################################################
useradd -U hadoop
mkdir /home/hadoop/.ssh

# Namenode will generate private SSH key
if [[ ${SELF_NAME} == accu-nn ]]
then
  ssh-keygen -t rsa -N "" -f /home/hadoop/.ssh/id_rsa
  cat /home/hadoop/.ssh/id_rsa.pub >> /home/hadoop/.ssh/authorized_keys

  # allow cluster to download SSH public key
  # port is only accessible to internal cluster
  mkdir /public_html
  cp -u /home/hadoop/.ssh/id_rsa.pub /public_html/
  (cd /public_html; python -c 'import SimpleHTTPServer,BaseHTTPServer; BaseHTTPServer.HTTPServer(("", 8080), SimpleHTTPServer.SimpleHTTPRequestHandler).serve_forever()') &
else
  # Need to download SSH public key from master
  until wget -O /home/hadoop/.ssh/id_rsa.pub "http://accu-nn:8080/id_rsa.pub"
  do
    sleep 2
  done
  cat /home/hadoop/.ssh/id_rsa.pub >> /home/hadoop/.ssh/authorized_keys
fi

# Add host RSA keys to SSH known hosts files
# Need to wait until these succeed
until ssh-keyscan accu-nn >> /home/hadoop/.ssh/known_hosts; do sleep 2; done
until ssh-keyscan accu-rm >> /home/hadoop/.ssh/known_hosts; do sleep 2; done
until ssh-keyscan accu-wrkr0 >> /home/hadoop/.ssh/known_hosts; do sleep 2; done
until ssh-keyscan accu-wrkr1 >> /home/hadoop/.ssh/known_hosts; do sleep 2; done
until ssh-keyscan accu-wrkr2 >> /home/hadoop/.ssh/known_hosts; do sleep 2; done

# Fix permissions in .ssh
chown -R hadoop:hadoop /home/hadoop/.ssh
chmod -R g-w /home/hadoop/.ssh
chmod -R o-w /home/hadoop/.ssh

# see if the NameNode can copy private key to other nodes
if [[ ${SELF_NAME} == accu-nn ]]
then
  until sudo -u hadoop scp -o BatchMode=yes /home/hadoop/.ssh/id_rsa accu-rm:/home/hadoop/.ssh/id_rsa; do sleep 2; done
  until sudo -u hadoop scp -o BatchMode=yes /home/hadoop/.ssh/id_rsa accu-wrkr0:/home/hadoop/.ssh/id_rsa; do sleep 2; done
  until sudo -u hadoop scp -o BatchMode=yes /home/hadoop/.ssh/id_rsa accu-wrkr1:/home/hadoop/.ssh/id_rsa; do sleep 2; done
  until sudo -u hadoop scp -o BatchMode=yes /home/hadoop/.ssh/id_rsa accu-wrkr2:/home/hadoop/.ssh/id_rsa; do sleep 2; done
fi

# Configure Hadoop
############################################################
CORE_SITE_FILE=${HADOOP_CONF_DIR}/core-site.xml
HDFS_SITE_FILE=${HADOOP_CONF_DIR}/hdfs-site.xml
MAPRED_SITE_FILE=${HADOOP_CONF_DIR}/mapred-site.xml
YARN_SITE_FILE=${HADOOP_CONF_DIR}/yarn-site.xml
SLAVES_FILE=${HADOOP_CONF_DIR}/slaves

echo "hadoop_exogeni_postboot: configuring Hadoop"

cat > $CORE_SITE_FILE << EOF
<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
<configuration>
  <property>
   <name>fs.default.name</name>
   <value>hdfs://accu-nn:9000</value>
  </property>
</configuration>
EOF

cat > $HDFS_SITE_FILE << EOF
<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
<configuration>
  <property>
   <name>dfs.replication</name>
   <value>2</value>
  </property>
</configuration>
EOF

cat > $MAPRED_SITE_FILE << EOF
<configuration>
 <property>
   <name>mapreduce.framework.name</name>
   <value>yarn</value>
 </property>
</configuration>
EOF

cat > $YARN_SITE_FILE << EOF
<?xml version="1.0"?>
<configuration>
<!-- Site specific YARN configuration properties -->
  <property>
    <name>yarn.resourcemanager.hostname</name>
    <value>accu-rm</value>
  </property>
  <property>
    <name>yarn.resourcemanager.bind-host</name>
    <value>0.0.0.0</value>
  </property>
  <property>
    <name>yarn.nodemanager.aux-services</name>
    <value>mapreduce_shuffle</value>
  </property>
  <property>
    <name>yarn.nodemanager.aux-services.mapreduce_shuffle.class</name>
    <value>org.apache.hadoop.mapred.ShuffleHandler</value>
  </property>
</configuration>
EOF

cat > $SLAVES_FILE << EOF
accu-wrkr0
accu-wrkr1
accu-wrkr2
EOF

# make sure the hadoop user owns /opt/hadoop
chown -R hadoop:hadoop ${HADOOP_PREFIX}

# Centos 7 only
############################################################
# Why is the firewall not cooperating??
# This should probably work, but it is not currently
#echo "hadoop_exogeni_postboot: attempting to fix eth0 trusted zone"
#nmcli connection modify eth0 connection.zone internal
firewall-cmd --zone=trusted --change-interface=eth0

# Start Hadoop
############################################################
echo "hadoop_exogeni_postboot: starting Hadoop"

if [[ ${SELF_NAME} == accu-nn ]]
then
  sudo -E -u hadoop $HADOOP_PREFIX/bin/hdfs namenode -format
  sudo -E -u hadoop $HADOOP_PREFIX/sbin/hadoop-daemon.sh --config $HADOOP_CONF_DIR --script hdfs start namenode
elif [[ ${SELF_NAME} == accu-rm ]]
then
  # make sure the NameNode has had time to send the SSH private key
  until [ -f /home/hadoop/.ssh/id_rsa ]
  do
    sleep 2
  done
  sudo -E -u hadoop $HADOOP_YARN_HOME/sbin/yarn-daemon.sh --config $HADOOP_CONF_DIR start resourcemanager
elif [[ ${SELF_NAME} == accu-wrkr* ]]
then
  # make sure the NameNode has had time to send the SSH private key
  until [ -f /home/hadoop/.ssh/id_rsa ]
  do
    sleep 2
  done
  sudo -E -u hadoop $HADOOP_PREFIX/sbin/hadoop-daemon.sh --config $HADOOP_CONF_DIR --script hdfs start datanode
  sudo -E -u hadoop $HADOOP_YARN_HOME/sbin/yarn-daemon.sh --config $HADOOP_CONF_DIR start nodemanager
fi


############################################################
# ZooKeeper
# Assumes cluster has already been configured for Hadoop
############################################################

ZOOKEEPER_VERSION=zookeeper-3.4.6

# setup /etc/hosts
############################################################
echo 172.25.8.181 accu-master >> /etc/hosts
echo 172.25.8.178 zoo1 >> /etc/hosts
echo 172.25.8.179 zoo2 >> /etc/hosts
echo 172.25.8.181 zoo3 >> /etc/hosts

# Install ZooKeeper
############################################################
mkdir -p /opt/${ZOOKEEPER_VERSION}
wget -nv --output-document=/opt/${ZOOKEEPER_VERSION}.tgz https://dist.apache.org/repos/dist/release/zookeeper/${ZOOKEEPER_VERSION}/${ZOOKEEPER_VERSION}.tar.gz
tar -C /opt --extract --file /opt/${ZOOKEEPER_VERSION}.tgz
#rm /opt/${ZOOKEEPER_VERSION}.tgz*

export ZOOKEEPER_HOME=/opt/${ZOOKEEPER_VERSION}

cat > /etc/profile.d/zookeeper.sh << EOF
export ZOOKEEPER_HOME=/opt/${ZOOKEEPER_VERSION}
export ZOO_DATADIR_AUTOCREATE_DISABLE=1
export PATH=\$ZOOKEEPER_HOME/bin:\$PATH
EOF

# Configure ZooKeeper
############################################################
ZOOKEEPER_DATADIR=/var/lib/zookeeper/
mkdir -p ${ZOOKEEPER_DATADIR}

cat > ${ZOOKEEPER_HOME}/conf/zoo.cfg << EOF
# The number of milliseconds of each tick
tickTime=2000
# The number of ticks that the initial 
# synchronization phase can take
initLimit=10
# The number of ticks that can pass between 
# sending a request and getting an acknowledgement
syncLimit=5
# the directory where the snapshot is stored.
dataDir=${ZOOKEEPER_DATADIR}
# the port at which the clients will connect
clientPort=2181
# the maximum number of client connections.
# increase this if you need to handle more clients
#maxClientCnxns=60
#
# Be sure to read the maintenance section of the 
# administrator guide before turning on autopurge.
#
# http://zookeeper.apache.org/doc/current/zookeeperAdmin.html#sc_maintenance
#
# The number of snapshots to retain in dataDir
#autopurge.snapRetainCount=3
# Purge task interval in hours
# Set to "0" to disable auto purge feature
#autopurge.purgeInterval=1
server.1=zoo1:2888:3888
server.2=zoo2:2888:3888
server.3=zoo3:2888:3888
EOF

if [[ ${SELF_NAME} == accu-nn ]]
then
  echo 1 > ${ZOOKEEPER_DATADIR}/myid
elif [[ ${SELF_NAME} == accu-rm ]]
then
  echo 2 > ${ZOOKEEPER_DATADIR}/myid
elif [[ ${SELF_NAME} == accu-master ]]
then
  echo 3 > ${ZOOKEEPER_DATADIR}/myid
fi

# Start ZooKeeper
############################################################
if [[ ${SELF_NAME} == accu-nn ]] || [[ ${SELF_NAME} == accu-rm ]] || [[ ${SELF_NAME} == accu-master ]]
then
  echo "accumulo_exogeni_postboot: starting ZooKeeper"
  ${ZOOKEEPER_HOME}/bin/zkServer.sh start
fi


############################################################
# Accumulo
# Assumes cluster has already been configured for Hadoop and Zookeeper
############################################################

ACCUMULO_VERSION=1.8.1

# Complete SSH setup for Accumulo Master
############################################################
until ssh-keyscan accu-master >> /home/hadoop/.ssh/known_hosts; do sleep 2; done

# see if the NameNode can copy private key to other nodes
if [[ ${SELF_NAME} == accu-nn ]]
then
  until sudo -u hadoop scp -o BatchMode=yes /home/hadoop/.ssh/id_rsa accu-master:/home/hadoop/.ssh/id_rsa; do sleep 2; done
fi

# Install Accumulo
############################################################
mkdir -p /opt/accumulo-${ACCUMULO_VERSION}
curl --location --insecure --show-error https://dist.apache.org/repos/dist/release/accumulo/${ACCUMULO_VERSION}/accumulo-${ACCUMULO_VERSION}-bin.tar.gz > /opt/accumulo-${ACCUMULO_VERSION}.tgz
tar -C /opt/accumulo-${ACCUMULO_VERSION} --extract --file /opt/accumulo-${ACCUMULO_VERSION}.tgz --strip-components=1
#rm -f /opt/accumulo-${ACCUMULO_VERSION}.tgz*

export ACCUMULO_HOME=/opt/accumulo-${ACCUMULO_VERSION}

cat > /etc/profile.d/accumulo.sh << EOF
export ACCUMULO_HOME=/opt/accumulo-$ACCUMULO_VERSION
#export PATH=\$ACCUMULO_HOME/bin:\$PATH
EOF

# make sure the hadoop user owns /opt/accumulo
chown -R hadoop:hadoop ${ACCUMULO_HOME}

# Configure Accumulo
# This assumes default accumulo password of 'secret'
############################################################

# accumulo bootstrap_config.sh tries to create a temp file in CWD.
# 512MB bug https://issues.apache.org/jira/browse/ACCUMULO-4585
# WARNING: overwrites any existing config
cd ${ACCUMULO_HOME}
sudo -E -u hadoop ${ACCUMULO_HOME}/bin/bootstrap_config.sh --overwrite --size 1GB --jvm --version 2

# tell accumulo where to run each service
sed -i "/localhost/ s/.*/accu-master.edc.renci.org/" ${ACCUMULO_HOME}/conf/masters
sed -i "/localhost/ s/.*/accu-master.edc.renci.org/" ${ACCUMULO_HOME}/conf/monitor
sed -i "/localhost/ s/.*/accu-master.edc.renci.org/" ${ACCUMULO_HOME}/conf/gc
sed -i "/localhost/ s/.*/accu-master.edc.renci.org/" ${ACCUMULO_HOME}/conf/tracers # not sure where these should be run ?

cat > ${ACCUMULO_HOME}/conf/slaves << EOF
accu-wrkr0.edc.renci.org
accu-wrkr1.edc.renci.org
accu-wrkr2.edc.renci.org
EOF

# Need monitor to bind to public port
sed -i "/ACCUMULO_MONITOR_BIND_ALL/ s/^# //" ${ACCUMULO_HOME}/conf/accumulo-env.sh

# setup zookeeper hosts
sed -i "/localhost:2181/ s/localhost:2181/zoo1:2181,zoo2:2181,zoo3:2181/" ${ACCUMULO_HOME}/conf/accumulo-site.xml

# disable SASL (?) Kerberos ??
# this is disabled correctly by bootstrap_config.sh
#sed -i '/instance.rpc.sasl.enabled/!b;n;s/true/false/' ${ACCUMULO_HOME}/conf/accumulo-site.xml

# if you change the accumulo password in the 'init' stage below, you will need to change it here too
#sed -i '/trace.token.property.password/!b;n;s/secret/NEW_PASSWORD/' ${ACCUMULO_HOME}/conf/accumulo-site.xml

# Start Accumulo
# Start each host separately, as they may be at different 
# stages of configuration
############################################################
if [[ ${SELF_NAME} == accu-master ]]
then
  # wait until we have the SSH private key
  until [ -f /home/hadoop/.ssh/id_rsa ]
  do
    sleep 2
  done

  # init and run accumulo
  # This assumes default accumulo password of 'secret'
  # WARNING: any existing instance of the same name will be deleted
  sudo -E -u hadoop ${ACCUMULO_HOME}/bin/accumulo init --clear-instance-name --instance-name exogeni --password secret --user root
  sudo -E -u hadoop ${ACCUMULO_HOME}/bin/start-here.sh

elif [[ ${SELF_NAME} == accu-wrkr* ]]
then
  # make sure the NameNode has had time to send the SSH private key
  until [ -f /home/hadoop/.ssh/id_rsa ]
  do
    sleep 2
  done

  # need to wait for 'init' of accumulo to finish
  until sudo -E -u hadoop ${HADOOP_PREFIX}/bin/hdfs dfs -ls /accumulo/instance_id > /dev/null 2>&1
  do
    sleep 1
  done

  sudo -E -u hadoop ${ACCUMULO_HOME}/bin/start-here.sh
fi


############################################################
# Apache Rya
#
# Some steps from the Rya Vagrantfile:
# https://github.com/apache/incubator-rya/blob/master/extras/vagrantExample/src/main/vagrant/Vagrantfile
############################################################

RYA_VERSION=3.2.10

### wait for a directory to exist or timeout
function waitForDir {
    waitfordir="$1"
    timeout=120
    until [[ -d  "$waitfordir" ]]  
    do
        sleep 5
        let timeout-=5
        if [[ $timeout -le "0" ]]; then
            echo "Timeout waiting for war to deploy, $waitfordir still does not exist."; 
            exit
        fi
    done
}

# Install Apache Maven
APACHE_MAVEN_VERSION=3.3.9
APACHE_MAVEN=apache-maven-${APACHE_MAVEN_VERSION}
APACHE_MAVEN_HOME=/opt/${APACHE_MAVEN}

if [[ ${SELF_NAME} == accu-master ]]
then
  mkdir -p ${APACHE_MAVEN_HOME}
  curl --location --insecure --show-error https://archive.apache.org/dist/maven/maven-3/${APACHE_MAVEN_VERSION}/binaries/${APACHE_MAVEN}-bin.tar.gz > /opt/${APACHE_MAVEN}.tgz
  tar -C ${APACHE_MAVEN_HOME}  --extract --file /opt/${APACHE_MAVEN}.tgz --strip-components=1
  rm -f /opt/${APACHE_MAVEN}.tgz*

  
  cat > /etc/profile.d/apache-maven.sh << EOF
export M2_HOME=${APACHE_MAVEN_HOME}
export PATH=\${M2_HOME}/bin:\${PATH}
EOF

fi

# Install Tomcat
if [[ ${SELF_NAME} == accu-master ]]
then
  yum -y install tomcat
  service tomcat start
fi

# Install OpenRDF Sesame
SESAME_VERSION=2.7.6

if [[ ${SELF_NAME} == accu-master ]]
then
  mkdir -p /usr/share/tomcat/.aduna
  chown -R tomcat:tomcat /usr/share/tomcat
  ln --force -s /usr/share/tomcat/.aduna/openrdf-sesame/logs /var/log/tomcat/openrdf-sesame

  SESAME_WAR=/var/lib/tomcat/webapps/openrdf-sesame.war

  curl --location --insecure --show-error http://repo1.maven.org/maven2/org/openrdf/sesame/sesame-http-server/${SESAME_VERSION}/sesame-http-server-${SESAME_VERSION}.war > ${SESAME_WAR}

  WORKBENCH_WAR=/var/lib/tomcat/webapps/openrdf-workbench.war

  curl --location --insecure --show-error http://repo1.maven.org/maven2/org/openrdf/sesame/sesame-http-workbench/${SESAME_VERSION}/sesame-http-workbench-${SESAME_VERSION}.war > ${WORKBENCH_WAR}

fi

# Download, compile, and 'install' Rya
if [[ ${SELF_NAME} == accu-master ]]
then
  
  mkdir -p /opt/rya-source-${RYA_VERSION}
  curl --location --insecure --show-error https://github.com/apache/incubator-rya/archive/rel/rya-incubating-${RYA_VERSION}.tar.gz > /opt/rya-source-${RYA_VERSION}.tgz
  tar -C /opt/rya-source-${RYA_VERSION} --extract --file /opt/rya-source-${RYA_VERSION}.tgz --strip-components=1
  rm -f /opt/rya-source-${RYA_VERSION}.tgz*

  cd /opt/rya-source-${RYA_VERSION}

  # skip tests when building the release
  ${APACHE_MAVEN_HOME}/bin/mvn clean install -DskipTests

  cp /opt/rya-source-${RYA_VERSION}/web/web.rya/target/web.rya.war /var/lib/tomcat/webapps/web.rya.war
fi

# wait for tomcat to deploy wars
if [[ ${SELF_NAME} == accu-master ]]
then
  waitForDir /var/lib/tomcat/webapps/openrdf-workbench/WEB-INF/lib/
  waitForDir /var/lib/tomcat/webapps/openrdf-sesame/WEB-INF/lib/
  waitForDir /var/lib/tomcat/webapps/web.rya/WEB-INF/classes/

  # copy Rya files to OpenRDF Sesame
  yes | cp --update /opt/rya-source-${RYA_VERSION}/web/web.rya/target/web.rya/WEB-INF/lib/* /var/lib/tomcat/webapps/openrdf-workbench/WEB-INF/lib/
  yes | cp --update /opt/rya-source-${RYA_VERSION}/web/web.rya/target/web.rya/WEB-INF/lib/* /var/lib/tomcat/webapps/openrdf-sesame/WEB-INF/lib/
  
  # These are older libs that breaks tomcat 7
  rm -f /var/lib/tomcat/webapps/web.rya/WEB-INF/lib/servlet-api-2.5*.jar
  rm -f /var/lib/tomcat/webapps/web.rya/WEB-INF/lib/jsp-api-2.1.jar

  # templates for OpenRDF Sesame
  yes | cp --force /opt/rya-source-${RYA_VERSION}/extras/vagrantExample/src/main/resources/* /var/lib/tomcat/webapps/openrdf-workbench/transformations/

  # fix ownership
  chown -R tomcat:tomcat /var/lib/tomcat
fi

# Configure Rya
# Accumulo settings must match settings from above Accumulo section
if [[ ${SELF_NAME} == accu-master ]]
then

cat > /var/lib/tomcat/webapps/web.rya/WEB-INF/classes/environment.properties <<EOF
# Accumulo instance name
instance.name=exogeni
# Accumulo Zookeepers
instance.zk=zoo1:2181,zoo2:2181,zoo3:2181
# Accumulo username
instance.username=root
# Accumulo password
instance.password=secret

# Rya Table Prefix
rya.tableprefix=triplestore_
# To display the query plan
rya.displayqueryplan=true
EOF

fi

# Open tomcat port in iptables
if [[ ${SELF_NAME} == accu-master ]]
then
  # connections to Rya/tomcat from outside the cluster
  iptables -A INPUT -p tcp --dport 8080 -j ACCEPT
  service iptables save
fi

# Restart Tomcat (?)
if [[ ${SELF_NAME} == accu-master ]]
then
  service tomcat restart
fi