<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p>><font size="2"><span style="font-size:10pt">so that it becomes difficult(not impossible though) for users<br>
to use :). Users don't have access to MDS to get the entire lists of<br>
pools defined.</span></font></p>
<p><br>
</p>
<p>Users can see what pools have been assigned to existing directories with "lfs getstripe" though.. so it's it's not very secure!</p>
<p><br>
</p>
<p>Regards,<br>
</p>
<p>Marco Passerini<br>
</p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Raj <rajgautam@gmail.com><br>
<b>Sent:</b> Monday, November 7, 2022 6:23:48 PM<br>
<b>To:</b> Andreas Dilger<br>
<b>Cc:</b> Passerini Marco; lustre-discuss@lists.lustre.org<br>
<b>Subject:</b> Re: [lustre-discuss] Restrict who can assign OST pools to directories</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">Marco, One other idea is to give an unfriendly pool name that users<br>
can't guess. Like "myfs.mkpilaxluia" instead of myfs.flash or<br>
myfs.ssd so that it becomes difficult(not impossible though) for users<br>
to use :). Users don't have access to MDS to get the entire lists of<br>
pools defined.<br>
Thanks,<br>
Raj<br>
<br>
On Mon, Nov 7, 2022 at 4:28 AM Andreas Dilger via lustre-discuss<br>
<lustre-discuss@lists.lustre.org> wrote:<br>
><br>
> Unfortunately, this is not possible today, though I don't think it would be too hard for someone to implement this by copying "enable_remote_dir_gid" and similar checks on the MDS.<br>
><br>
> In Lustre 2.14 and later, it is possible to set an OST pool quota that can restrict users from creating too many files in a pool. This doesn't directly prevent them from setting the pool on a directory (though I guess this _could_ be checked), but they would
get an EDQUOT error when trying to create in that directory, and quickly tire of trying to use it.<br>
><br>
> Cheers, Andreas<br>
><br>
> On Nov 4, 2022, at 05:57, Passerini Marco <marco.passerini@cscs.ch> wrote:<br>
><br>
> Hi,<br>
><br>
> Is there a way in Lustre to restrict who can assign OST pools to directories? In specific, can we limit the following command so that it can be run by root only?<br>
><br>
> lfs setstripe --pool myfs.mypool test_dir<br>
><br>
> I would need something similar to what can be done for remote directories:<br>
> lctl set_param mdt.*.enable_remote_dir_gid=1<br>
><br>
> Regards,<br>
> Marco Passerini<br>
><br>
><br>
> Cheers, Andreas<br>
> --<br>
> Andreas Dilger<br>
> Lustre Principal Architect<br>
> Whamcloud<br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> lustre-discuss mailing list<br>
> lustre-discuss@lists.lustre.org<br>
> <a href="http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org">http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org</a><br>
</div>
</span></font>
</body>
</html>