<div dir="ltr"><pre>Hello,
we decided to convert NFS4 acl to POSIX (we need share same data
between SMB, NFS and GPFS clients), so I created script to convert
NFS4 to posix ACL. It is very simple, first I do "chmod -R 770 DIR" and
then "setfacl -R ..... DIR". I was surprised that conversion to posix
acl has taken more then 2TB of metadata space.There is about one hundred<br>million files at GPFS filesystem. Is this expected behavior?
Thanks,
Michal
Example of NFS4 acl:
#NFSv4 ACL
#owner:root
#group:root
special:owner@:rwx-:allow
(X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL (X)READ_ATTR (X)READ_NAMED
(-)DELETE (X)DELETE_CHILD (-)CHOWN (X)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED
special:group@:----:allow
(-)READ/LIST (-)WRITE/CREATE (-)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL (X)READ_ATTR (X)READ_NAMED
(-)DELETE (-)DELETE_CHILD (-)CHOWN (-)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (-)WRITE_NAMED
special:everyone@:----:allow
(-)READ/LIST (-)WRITE/CREATE (-)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL (X)READ_ATTR (X)READ_NAMED
(-)DELETE (-)DELETE_CHILD (-)CHOWN (-)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (-)WRITE_NAMED
group:ag_cud_96_lab:rwx-:allow:FileInherit:DirInherit
(X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL (X)READ_ATTR (X)READ_NAMED
(-)DELETE (X)DELETE_CHILD (-)CHOWN (X)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED
group:ag_cud_96_lab_ro:r-x-:allow:FileInherit:DirInherit
(X)READ/LIST (-)WRITE/CREATE (-)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL (X)READ_ATTR (X)READ_NAMED
(-)DELETE (-)DELETE_CHILD (-)CHOWN (X)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (-)WRITE_NAMED
converted to posix acl:
# owner: root
# group: root
user::rwx
group::rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:mask::rwx
default:other::---
group:ag_cud_96_lab:rwx
default:group:ag_cud_96_lab:rwx
group:ag_cud_96_lab_ro:r-x
default:group:ag_cud_96_lab_ro:r-x
</pre></div>