Project

General

Profile

Actions

Bug #24284

closed

cephfs: allow prohibiting user snapshots in CephFS

Added by Patrick Donnelly almost 6 years ago. Updated almost 6 years ago.

Status:
Resolved
Priority:
Urgent
Assignee:
Category:
Administration/Usability
Target version:
% Done:

0%

Source:
Development
Tags:
Backport:
mimic
Regression:
No
Severity:
2 - major
Reviewed:
Affected Versions:
ceph-qa-suite:
Component(FS):
Client, MDS, kceph
Labels (FS):
snapshots
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Since snapshots can be used to circumvent (accidentally or not) the quotas as snapshot file data that has since been modified or deleted does not count towards the quota.

(This may already be implemented?)

Alternatively, we could also just start counting the snapshot data but this seems non-trivial?


Related issues 2 (1 open1 closed)

Related to CephFS - Feature #11154: snapshots: support rstats betterNew

Actions
Copied to CephFS - Backport #24705: mimic: cephfs: allow prohibiting user snapshots in CephFSResolvedNathan CutlerActions
Actions #1

Updated by Patrick Donnelly almost 6 years ago

Actions #2

Updated by Zheng Yan almost 6 years ago

change default of mds_snap_max_uid to 0

Actions #3

Updated by Patrick Donnelly almost 6 years ago

Zheng Yan wrote:

change default of mds_snap_max_uid to 0

Okay, but we should enforce that as a file system option (`ceph fs set`) so it's consistently enforced by all MDS and visible to clients.

Actions #4

Updated by Greg Farnum almost 6 years ago

We should actually discuss what kind of interface admins want. Dan van der Ster certainly has thoughts; others might as well.

eg an "fs set" max uid is better than nothing, but they might prefer it be set for subtrees similarly to layouts? So a privileged user can grant permission to an unprivileged user to snapshot their directory on a case-by-case basis or something.

Actions #5

Updated by Zheng Yan almost 6 years ago

maybe we can use 'auth string'

Actions #6

Updated by Dan van der Ster almost 6 years ago

change default of mds_snap_max_uid to 0

Use-cases such as Manila let the users mount with root so this will be ineffective.

My humble opinion about this topic is to document the behaviour (limitation) until incremental snapshot usage can be accounted properly by the quota.

We can document that "quota" refers to space used by current head, and e.g. "snapquota" is a snapshot aware quota still to be developed...

Actions #7

Updated by Zheng Yan almost 6 years ago

  • Status changed from New to Fix Under Review
Actions #8

Updated by Patrick Donnelly almost 6 years ago

  • Status changed from Fix Under Review to Pending Backport
Actions #9

Updated by Patrick Donnelly almost 6 years ago

  • Copied to Backport #24705: mimic: cephfs: allow prohibiting user snapshots in CephFS added
Actions #10

Updated by Nathan Cutler almost 6 years ago

  • Status changed from Pending Backport to Resolved
Actions

Also available in: Atom PDF