There are also no PGP-signed Hadoop packages last time I looked... The other often misunderstood problem with Hadoop/Spark/... is that the security model is ba

There are also no PGP-signed Hadoop packages last time I looked... The other often misunderstood problem with Hadoop/Spark/... is that the security model is basically the same as NFS. If you don't use Kerberos any user with access to the Hadoop cluster has at least full read-access and likely even write access if he has superuser rights* on the client machine. => http://www.openwall.com/lists/oss-security/2015/04/16/21 http://www.openwall.com/lists/oss-security/2015/04/16/21 If you have important data on your HDFS and you did not put everything behind a thick firewall and you are not using Kerberos you have a problem. You'll likely still have a problem... * This should also work without superuser rights, Hadoop just takes the username from the client.