noobaa-core icon indicating copy to clipboard operation
noobaa-core copied to clipboard

NSFS - supporting GPFS DL for Encryption

Open jackyalbo opened this issue 2 years ago • 4 comments

Signed-off-by: jackyalbo [email protected]

Explain the changes

  1. Adding initial support for Encryption for NSFS
  2. Will check for files/objects only on GPFS volumes if they are encrypted
  3. Added a tool for checking encryption check on files on the FS - nsfs-enc

Issues: Fixed #xxx / Gap #xxx

Testing Instructions:

  • [ ] Doc added/updated
  • [ ] Tests added

jackyalbo avatar Jun 01 '22 13:06 jackyalbo

@jackyalbo We discussed that we want to fail PUT-object if the request is for encryption, but the underlying filesystem provides non-encrypted storage.

guymguym avatar Jun 15 '22 16:06 guymguym

@jackyalbo rebase and resolve conflicts?

guymguym avatar Jul 13 '22 16:07 guymguym

@jackyalbo rebase and resolve conflicts?

@guymguym Can you check I resolved in the way you intended for the GPFS sub module? thanks.

jackyalbo avatar Jul 13 '22 17:07 jackyalbo

@guymguym Added the requests you asked on our last talk. Please re-review or remove request for changes. Thanks

jackyalbo avatar Sep 08 '22 14:09 jackyalbo

@guymguym @jackyalbo 2 questions about this decision -

  1. What about the dir cache? Will we use the xattr of the stat result of the cache entry? if yes we need to invalidate it correctly, if no we still need to call getxattr again (and there is a performance issue here)
  2. Thoughts about the performance of calling stat + getallxattr when one of them is not really needed?

romayalon avatar Oct 31 '22 13:10 romayalon