Settings and Configuration Tasks for TERR Service
You can use these settings to limit the capabilities of running TERR data functions.
Setting / Configuration task | Default value | Description |
---|---|---|
terr.restricted.execution.mode (Enforce
restricted execution )
|
TRUE
|
Enforce restricted execution mode for all scripts. Restricted execution mode in the TERR service allows executing arbitrary scripts without worrying that the script could do malicious things, such as deleting files or uploading confidential data to a server over the internet. For more information, see the topic "Safeguarding Your Environment" in the TIBCO® Enterprise Runtime for R - Server Edition documentation. |
use.engine.containers
|
|
Available on Linux only.
If your deployment is on a Linux server, then the default
configuration for the
TERR service
is to use containers (the property
|
disable.spotfire.trust.checks
|
FALSE
|
Disable the trust check only if the TERR service is installed on Linux, with Docker containers, where extra means have been taken to secure the container environment or if all Spotfire users in the environment can be trusted. |
Set file size upload limit | 100MB | See the topic "File Size Upload Limit" in the TIBCO® Enterprise Runtime for R - Server Edition documentation for more information. |
Set TERR engine ports range | 61000 - 62000 | See "TERR Engine Ports" in the TIBCO® Enterprise Runtime for R - Server Edition documentation for more information. |
Enable JMX Monitoring | OFF | See "Monitoring the TERR service using JMX" in the TIBCO® Enterprise Runtime for R - Server Edition documentation for more information. |
- Restrict Network Access for TERR Scripts in Containers
By default, the containers in which TERR scripts are running have access to network resources given to it. - Use a Custom Docker Image for Containerized TERR
If the node manager is running on a Linux computer, then you can run TERR service in a Docker container.
- Restrict Network Access for TERR Scripts in Containers
By default, the containers in which TERR scripts are running have access to network resources given to it. - Use a Custom Docker Image for Containerized TERR
If the node manager is running on a Linux computer, then you can run TERR service in a Docker container.
Parent topic: TIBCO Enterprise Runtime for R - Server Edition
Related concepts