[gpfsug-discuss] Smallest block quota/limit and file quota/limit possible to set?

Stephen Ulmer ulmer at ulmer.org
Mon Dec 4 13:46:31 GMT 2017


I don’t understand why not having permission(s) doesn’t prevent the user from writing into the fileset...

As described, your case is about not wanting userA to be able to write to a fileset if userA isn’t in some groups. Don’t put them in those groups. That’s not even Spectrum Scale specific, it’s about generic *nix permissions.

What am I missing? I don’t understand why you would want to use quota to enforce permissions. (There could be a legitimate reason here, but I don’t understand it.)

Liberty,

-- 
Stephen Ulmer

Sent from a mobile device; please excuse autocorrect silliness.

> On Dec 3, 2017, at 10:49 PM, IBM Spectrum Scale <scale at us.ibm.com> wrote:
> 
> Hi Keith,
> 
> You can use ACLs for fine grained permissions. A quota limit of 0 in GPFS implies no limits.
> 
> Regards, The Spectrum Scale (GPFS) team
> 
> ------------------------------------------------------------------------------------------------------------------
> If you feel that your question can benefit other users of  Spectrum Scale (GPFS), then please post it to the public IBM developerWroks Forum at https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479. 
> 
> If your query concerns a potential software error in Spectrum Scale (GPFS) and you have an IBM software maintenance contract please contact  1-800-237-5511 in the United States or your local IBM Service Center in other countries. 
> 
> The forum is informally monitored as time permits and should not be used for priority messages to the Spectrum Scale (GPFS) team.
> 
> 
> 
> From:        Keith Ball <bipcuds at gmail.com>
> To:        gpfsug-discuss at spectrumscale.org
> Date:        12/04/2017 08:19 AM
> Subject:        [gpfsug-discuss] Smallest block quota/limit and file quota/limit        possible to set?
> Sent by:        gpfsug-discuss-bounces at spectrumscale.org
> 
> 
> 
> From: Keith Ball <kball at redlineperf.com>
> To: gpfsug-discuss at spectrumscale.org
> Cc: 
> Bcc: 
> Date: Sun, 3 Dec 2017 16:13:13 -0500
> Subject: Smallest block quota/limit and file quota/limit possible to set?
> HI All,
> 
> We have a system where all users have their own private group as well. However, for a given fileset (we are using --perfileset-quota), we would like to ONLY allow users who also belong to just a few central groups to be able to write to the fileset. 
> 
> That is, user "userA" has its own "groupA", but we only want the user to be able to write to the fileset if:
>  - userA belongs to one of the groups (e.g. group1, group2, group3) that have explicitly set quotas
>  - The group(s) in question are within quota/limits.
> 
> In general, we do not want any users that do NOT belong to one of the three groups with enabled quotas to be able to write anything at all to the fileset.
> 
> Is there a way to set a ZERO quota for block/file in GPFS, that means what it actually should mean? i.e. "Your limit is 0 file = you cannot create files in this fileset". Creating some kind of "supergroup" owner of the fileset (with entitled users as members of the group) could work, but that will only work for *one* group. 
> 
> If we cannot set the block and file limits to zero, what *are* the smallest block and fie limits? In GPFS 3.5, they seem to be 1760MB for block. Is there a smallest quota for files? (blocksize is 16MB, which will be reduced to 4MB probably, in a subsequent cluster).
> 
> Many Thanks,
>   Keith 
> 
> 
> 
> -- 
> Keith D. Ball, PhD
> RedLine Performance Solutions, LLC
> web:  http://www.redlineperf.com/
> email: kball at redlineperf.com
> cell: 540-557-7851_______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at spectrumscale.org
> https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=IbxtjdkPAM2Sbon4Lbbi4w&m=N0b8UJpG1zFuuQjvCE1SaaIG2EUDv4v783wDc3TbnyM&s=vuNQN4VJonV9nmcTEOKKr-hL2LAWSOUV7HKAQBKWcK4&e=
> 
> 
> 
> _______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at spectrumscale.org
> http://gpfsug.org/mailman/listinfo/gpfsug-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20171204/9b42e1fc/attachment-0002.htm>


More information about the gpfsug-discuss mailing list