Re: [LSF/MM/BPF TOPIC] network storage transports managed within a container

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2/28/22 18:04, Chris Leech wrote:
There are various challenges when users start trying to manage SAN
attachments from within a container, and how we deal with network
namespaces.  I think it would be worth a discussion around what can be
agreed on as desired behavior, and what it means to attach block
devices from a containerized environment.

iSCSI has a number of issues here with the kernel to iscsid
interfaces, netlink and sysfs, which are largely fixable without
needing to break anything.  But for kernel maintained network
connections, there's an issue of interacting with namespace lifetimes
without a process.

NVMe/TCP has avoided complex user-space control planes, but when I
checked subsystem connection occurred within the active namespace of
nvme-cli, but afterwords all fabrics subsystems were visible,
controllable, and disconnectable from any namespace.


Lee Duncan had submitted a proposal to discuss this for iSCSI last
year [1], partially based on some older work I did that never
completed [2] (I need to update that code)

[1]
https://lore.kernel.org/linux-scsi/e9f0297a-a914-ba83-f706-5a2d508c666b@xxxxxxxx/

[2] https://github.com/cleech/linux/commits/iscsi-netns-old-wip

- Chris Leech


I would certainly be interested in attending this.

--
Lee Duncan




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [SCSI Target Devel]     [Linux SCSI Target Infrastructure]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Linux IIO]     [Samba]     [Device Mapper]

  Powered by Linux