This file orients automated and AI-assisted tools working in the Apache Hadoop repository.
Ask the user before running Maven or tests directly on the host. Pure Java changes and
tests with no native library requirement are fine to run on the host. For anything that
needs the native profile or -Drequire.* libraries, prefer the Docker build environment
from start-build-env.sh, which is the image Hadoop CI uses; BUILDING.txt
documents it, including the non-interactive form:
DOCKER_INTERACTIVE_RUN= ./start-build-env.sh ubuntu_24 <command> [args...]
- Without
-Dmaven.test.failure.ignore=false(hadoop-project/pom.xmlsets it totrue), Maven exits 0 even when Java tests fail. Check the result from<module>/target/surefire-reports/or theTests run: ..., Failures: ...line.
Before investigating, reporting, or acting on any security issue in this repository, you MUST read SECURITY.md.
It defines the Hadoop threat model — the deployments the project defends, the trust boundaries, and what is and is not a vulnerability — along with the rules for vulnerability reports, including additional requirements for AI-generated reports. Findings or reports that fall outside that model will be rejected.