[lustre-discuss] seclabel

[Dilger, Andreas]

On Mar 2, 2017, at 05:55, Robin Humble <rjh+lustre at cita.utoronto.ca> wrote:
> 
> Hiya,
> 
> I'm updating an image for a root-on-lustre cluster from centos6 to 7
> and I've hit a little snag. I can't seem to mount lustre so that it
> understands seclabel. ie. setcap/getcap don't work. the upshot is that
> root can use ping (and a few other tools), but users can't.
> 
> any idea what I'm doing wrong?
> 
> from what little I understand about it I think seclabel is a form of
> xattr.

I try to stay away from that myself, but newer Lustre clients support SELinux
and similar things.  You probably need to strace and/or collect some kernel
debug logs (maybe with debug=-1 set) to see where the error is being generated.

Cheers, Andreas
--
Andreas Dilger
Lustre Principal Architect
Intel Corporation