Mandi! Alwin Antreich In chel di` si favelave... > > I'm not a ceph expert, but solution iii) seems decent for me, with a > > little overhead (a readlinkk and a stat for every osd start). > However you like it. But to note that in Ceph Nautilus the udev rules > aren't shipped anymore. Ok. I make a note. > > But still i don't understood why, if i have: > > and: > > (so, journal partition group-owned by 'disk' and 'ceph' user in group > > 'disk'), still i have permission access. > > The ceph-osd process reset group ownership on runtime? > In Luminous udev is handling all of that, see 95-ceph-osd.rules. No, sorry, evidently i'm not explaining myself correctly. I've added the 'ceph' user to group 'disk': > > root@capitanmarvel:~# LANG=C id ceph > > uid=64045(ceph) gid=64045(ceph) groups=64045(ceph),6(disk) and journal devices are group-owned by 'disk' and have read and write permission for the group (660): > > brw-rw---- 1 root disk 8, 6 ago 28 14:38 /dev/sda6 So, because user 'ceph' are in group 'disk', and group 'disk' have read and write permission to the device, i can ACTUALLY read and write to the device. But is not the case. So, seems to me that 'ceph-osd' process ''reset'' group membership and ignore the 'disk' group. Note, that if i 'su' to ceph, i can read the disks: ceph@capitanmarvel:~$ ls -la /dev/sda6 brw-rw---- 1 root disk 8, 6 ago 28 14:38 /dev/sda6 ceph@capitanmarvel:~$ dd if=/dev/sda6 count=1 | strings 1+0 record dentro 1+0 record fuori 512 bytes copied, 0,000479581 s, 1,1 MB/s bm?hF lB@4 l+<t -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA) _______________________________________________ ceph-users mailing list -- ceph-users@xxxxxxx To unsubscribe send an email to ceph-users-leave@xxxxxxx
 |