Re: How to hide monitoring ip in cephfs mounted clients

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi John,

         Any further update on this.

Regards
Prabu GJ


---- On Thu, 28 Jul 2016 16:05:00 +0530 gjprabu <gjprabu@xxxxxxxxxxxx>wrote ----

Hi John,
        
       Thanks for your reply,  Its a normal docker container can see the mount information like /dev/sda... but this cause ip is exposed and it may security reason should avoid ip address.  As of now we will try to change hostname instead of monitor ip address but is there any way to prevent to see monitors ip in containers .

Regards
Prabu GJ


---- On Wed, 20 Jul 2016 15:32:48 +0530 John Spray <jspray@xxxxxxxxxx>wrote ----



_______________________________________________
ceph-users mailing list
On Wed, Jul 20, 2016 at 8:33 AM, gjprabu <gjprabu@xxxxxxxxxxxx> wrote:
>
> Hi Team,
>
> We are using chepfs file systems to mount client machines, here
> while mount we should provide monitoring ip address, is there any option to
> hide monitoring ips address in the mounted partition. We are using container
> in all ceph clients and which all able see monitoring ip's, this could be a
> security issue for us. Kindly let us know is there any solution on this.

Hmm, so you have a situation where the containers are prevented from
actually communicating with the monitor IPs, but the cephfs mounts are
exposed to the containers in a way that lets them see them when they
run `mount`?

I don't think we've thought about this case before. Is it normal that
when you have e.g. a docker container with a volume attached, the
container can see the mount information for the filesystem that the
volume lives on?

John

> Regards
> Prabu GJ
>
> _______________________________________________
> ceph-users mailing list
>

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Ceph Dev]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux