<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Manilla is one of the projects to provide “shared” access to file-systems.</div>
<div><br>
</div>
<div>I thought that at the moment, Manilla doesn’t support the GPFS protocol but is implemented on top of Ganesha so it provided as NFS access. So you wouldn’t get mmunlinkfileset.</div>
<div><br>
</div>
<div>This sorta brings me back to one of the things I talked about at the GPFS UG, as in the GPFS security model is trusting, which in multi-tenant environments is a bad thing. I know I’ve spoken to a few people recently who’ve commented / agreed / had thoughts
on it, so can I ask that if multi-tenancy security is something that you think is of concern with GPFS, can you drop me an email (directly is fine) which your use case and what sort of thing you’d like to see, then I’ll collate this and have a go at talking
to IBM again about this.</div>
<div><br>
</div>
<div>Thanks</div>
<div><br>
</div>
<div>Simon</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><Wahl>, Edward <<a href="mailto:ewahl@osc.edu">ewahl@osc.edu</a>><br>
<span style="font-weight:bold">Reply-To: </span>gpfsug main discussion list <<a href="mailto:gpfsug-discuss@gpfsug.org">gpfsug-discuss@gpfsug.org</a>><br>
<span style="font-weight:bold">Date: </span>Monday, 15 June 2015 14:59<br>
<span style="font-weight:bold">To: </span>gpfsug main discussion list <<a href="mailto:gpfsug-discuss@gpfsug.org">gpfsug-discuss@gpfsug.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [gpfsug-discuss] OpenStack Manila Driver<br>
</div>
<div><br>
</div>
<div dir="ltr"><style>
<!--
@font-face
{font-family:Helvetica}
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:"Trebuchet MS"}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:#0563C1;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
p
{margin-right:0cm;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
-->
</style><style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
<div ocsi="0" fpstyle="1" lang="EN-GB" link="#0563C1" vlink="#954F72">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Perhaps I misunderstand here, but if the tenants have administrative (ie:root) privileges to the underlying file system management commands I think mmunlinkfileset might be a minor
concern here. There are FAR more destructive things that could occur. <br>
<br>
I am not an OpenStack expert and I've not even looked at anything past Kilo, but my understanding was that these commands were not necessary for tenants. They access a virtual block device that backs to GPFS, correct?
<br>
<br>
Ed Wahl<br>
OSC<br>
<br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF292296"><font color="#000000" face="Tahoma" size="2"><b><br>
<br>
++<br>
From:</b> <a href="mailto:gpfsug-discuss-bounces@gpfsug.org">gpfsug-discuss-bounces@gpfsug.org</a> [<a href="mailto:gpfsug-discuss-bounces@gpfsug.org">gpfsug-discuss-bounces@gpfsug.org</a>] on behalf of Luke Raimbach [<a href="mailto:Luke.Raimbach@crick.ac.uk">Luke.Raimbach@crick.ac.uk</a>]<br>
<b>Sent:</b> Monday, June 15, 2015 4:35 AM<br>
<b>To:</b> <a href="mailto:gpfsug-discuss@gpfsug.org">gpfsug-discuss@gpfsug.org</a><br>
<b>Subject:</b> [gpfsug-discuss] OpenStack Manila Driver<br>
</font><br>
</div>
<div></div>
<div>
<div class="WordSection1">
<p style="margin:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);">Dear All,</span></p>
<p style="margin:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);"> </span></p>
<p style="margin:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);">We are looking forward to using the manila driver for auto-provisioning of file shares using GPFS. However, I have some concerns...</span></p>
<p style="margin-right:0cm; margin-bottom:0cm; margin-left:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white; orphans:auto; text-align:start; widows:1; word-spacing:0px">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);"> </span></p>
<p style="margin-right:0cm; margin-bottom:0cm; margin-left:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);">Manila presumably gives tenant users access to file system commands like mmlinkfileset and mmunlinkfileset. Given that mmunlinkfileset quiesces the file system, there
is potentially an impact from one tenant on another - i.e. someone unlinking and deleting a lot of filesets during a tenancy cleanup might cause a cluster pause long enough to trigger other failure events or even start evicting nodes. You can see why this
would be bad in a cloud environment.</span></p>
<p style="margin-right:0cm; margin-bottom:0cm; margin-left:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white; orphans:auto; text-align:start; widows:1; word-spacing:0px">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);"> </span></p>
<p style="margin-right:0cm; margin-bottom:0cm; margin-left:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);"><br>
</span></p>
<p style="margin-right:0cm; margin-bottom:0cm; margin-left:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);">Has this scenario been addressed at all?</span></p>
<p style="margin-right:0cm; margin-bottom:0cm; margin-left:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white; orphans:auto; text-align:start; widows:1; word-spacing:0px">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);"> </span></p>
<p style="margin-right:0cm; margin-bottom:0cm; margin-left:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white; orphans:auto; text-align:start; widows:1; word-spacing:0px">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);">Cheers,</span></p>
<p style="margin-right:0cm; margin-bottom:0cm; margin-left:0cm; margin-bottom:.0001pt; line-height:13.5pt; background:white; orphans:auto; text-align:start; widows:1; word-spacing:0px">
<span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(34, 34, 34);">Luke.</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal" style="background:white"><b><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);">Luke Raimbach</span></b><b><span style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(89, 89, 89);"></span></b><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(33, 33, 33);"></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);">Senior HPC Data and Storage Systems Engineer</span><b><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(33, 33, 33);"></span></b></p>
<p class="MsoNormal" style="background:white"><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);">The Francis Crick Institute</span><b><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(33, 33, 33);"></span></b></p>
<p class="MsoNormal" style="background:white"><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);">Gibbs Building</span><b><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(33, 33, 33);"></span></b></p>
<p class="MsoNormal" style="background:white"><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);">215 Euston Road</span><b><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(33, 33, 33);"></span></b></p>
<p class="MsoNormal" style="background:white"><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);">London NW1 2BE</span><b><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(33, 33, 33);"></span></b></p>
<p class="MsoNormal" style="background:white"><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);"> </span><b><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(33, 33, 33);"></span></b></p>
<p class="MsoNormal" style="background:white"><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);">E: </span><b><span style="font-size:10.0pt; font-family:"Trebuchet MS","sans-serif"; color:#212121"><a href="mailto:luke.raimbach@crick.ac.uk" target="_blank"><span style="color:blue; font-weight:normal">luke.raimbach@crick.ac.uk</span></a></span></b></p>
<p class="MsoNormal" style="background:white"><span style="font-size: 10pt; font-family: 'Trebuchet MS', sans-serif; color: rgb(89, 89, 89);">W: </span><b><span style="font-size:10.0pt; font-family:"Trebuchet MS","sans-serif"; color:#212121"><a href="http://www.crick.ac.uk/" target="_blank"><span style="color:blue; font-weight:normal">www.crick.ac.uk</span></a></span></b></p>
<p class="MsoNormal"> </p>
</div>
<p style="color:rgb(112,113,115); font-family:'Trebuchet MS','Lucida Grande'; font-style:italic; font-size:10pt">
The Francis Crick Institute Limited is a registered charity in England and Wales no. 1140062 and a company registered in England and Wales no. 06885462, with its registered office at 215 Euston Road, London NW1 2BE.
</p>
</div>
</div>
</div>
</div>
</div>
</span>
</body>
</html>