Gluster users - Oct 2016 - FUSE mounts and Docker integration

I would like to use Gluster as shared storage for apps deployed
through a PaaS that we are creating.
Currently I'm able to mount a gluster volume in each "compute"
nodes
and then mount a sudirectory from this shared volume to each Docker
app.

Obviously this is not very secure, as also wrote on official docker
docs. There are some cases where users could exit from the mount point
and be able to traverse the whole FS

One solution (I think) would be to use docker volume plugin like this:
https://github.com/amarkwalder/docker-volume-glusterfs

but have to create 1 volume (with replica and so on) for each app is
resource wasting.

Any solution?

Hi,

We have a similar setup and we use Kubernetes and its Persistent Volumes
subsystem for this purpose.
However, how can a user exit from a mount point?

Best Regards,
Olia

-----Original Message-----
From: gluster-users-bounces at gluster.org [mailto:gluster-users-bounces at
gluster.org] On Behalf Of Gandalf Corvotempesta
Sent: Thursday, September 22, 2016 3:39 PM
To: gluster-users <Gluster-users at gluster.org>
Subject: [Gluster-users] FUSE mounts and Docker integration

I would like to use Gluster as shared storage for apps deployed
through a PaaS that we are creating.
Currently I'm able to mount a gluster volume in each "compute"
nodes
and then mount a sudirectory from this shared volume to each Docker
app.

Obviously this is not very secure, as also wrote on official docker
docs. There are some cases where users could exit from the mount point
and be able to traverse the whole FS

One solution (I think) would be to use docker volume plugin like this:
https://github.com/amarkwalder/docker-volume-glusterfs

but have to create 1 volume (with replica and so on) for each app is
resource wasting.

Any solution?
_______________________________________________
Gluster-users mailing list
Gluster-users at gluster.org
http://www.gluster.org/mailman/listinfo/gluster-users