search for: qtree

Good morning, folks. I'm involved in a project to enforce NFSv4 ACL's across a variety of storage platforms, in particular NetApps sharing NFS. That works fiine with the NetApp NFS qtrees, but we'd like to share those with CIFS clients as well. This works, and restricts access the way we expect NFSv4 ACL's to work, but the Windows clients cannot view any of the security settings on the directories or files. Cue the music, and enter Samba 3.5.2. I've reviewed various pu...

Hi, I am looking for a method of syncing NFS directories (Netapp qtrees) that contains NFSv4 ACLs. We copy qtrees (millions of files, xx TB) from one qutree into another one. The only tool we currently use is (netapp internal) ndmpcopy, it preserves ACLs but is slow. Netapp "xcopy" tool is also not aware of NFSv4 ACLs. rsync that is aware of NFSV4 ACLs woul...

Good morning! I'm reviewing some corporate storage setups involving NetApps, where the NetApp stores what they call "UNIX Qtrees". So far, so good: those allow the setting of access to the data with NFS4 ACL's, which are fairly sophisticated and allow multiple groups or even multiple users to be granted write access.or read access, besides the normal UNIX group owner. That works fine. But we'd like Windows cli...

...ticate with the ultravisor, be verified (along with its ramdisk) etc... and copied (by the UV) into secure memory & run from there. At that point, the hypervisor is informed that the VM has become secure. So at that point, we could exit to qemu to inform it of the change, and have it walk the qtree and "Switch" all the virtio devices to use the IOMMU I suppose, but it feels a lot grosser to me. That's the only other option I can think of. > However in this specific case, the flag does not need to come from the > hypervisor, it can be set by arch boot code I think. > C...

...ticate with the ultravisor, be verified (along with its ramdisk) etc... and copied (by the UV) into secure memory & run from there. At that point, the hypervisor is informed that the VM has become secure. So at that point, we could exit to qemu to inform it of the change, and have it walk the qtree and "Switch" all the virtio devices to use the IOMMU I suppose, but it feels a lot grosser to me. That's the only other option I can think of. > However in this specific case, the flag does not need to come from the > hypervisor, it can be set by arch boot code I think. > C...

On Fri, 2018-08-03 at 00:05 -0700, Christoph Hellwig wrote: > > 2- Make virtio use the DMA API with our custom platform-provided > > swiotlb callbacks when needed, that is when not using IOMMU *and* > > running on a secure VM in our case. > > And total NAK the customer platform-provided part of this. We need > a flag passed in from the hypervisor that the device

On Fri, 2018-08-03 at 00:05 -0700, Christoph Hellwig wrote: > > 2- Make virtio use the DMA API with our custom platform-provided > > swiotlb callbacks when needed, that is when not using IOMMU *and* > > running on a secure VM in our case. > > And total NAK the customer platform-provided part of this. We need > a flag passed in from the hypervisor that the device

Hi, For anyone who is interested; I created some basic scripts based on my current iSCSI block script. http://kinkrsoftware.nl/contrib/xen/block-netapp http://kinkrsoftware.nl/contrib/xen/netapp-lun.py Basically these two scripts allow you to start a vfiler with a qtree of customers. You log in the NetApp upon boot, and can use: netapp://customer1/disk1 It is work in progress... because I would prefer the vfiler IP to be in that line too, but it seems the iSCSI portal IP != the NetApp shell IP. Suggestions can be made on the list or as private reply. The helper...

Hi, For anyone who is interested; I created some basic scripts based on my current iSCSI block script. http://kinkrsoftware.nl/contrib/xen/block-netapp http://kinkrsoftware.nl/contrib/xen/netapp-lun.py Basically these two scripts allow you to start a vfiler with a qtree of customers. You log in the NetApp upon boot, and can use: netapp://customer1/disk1 It is work in progress... because I would prefer the vfiler IP to be in that line too, but it seems the iSCSI portal IP != the NetApp shell IP. Suggestions can be made on the list or as private reply. The helper...

I'm working on some data pipeline issues, and found some interesting results in comparing win2k vs samba. The volume being mounted is a NetApp 960. NetApp provides a way see the # of cifs operations on a given volume/qtree. So I compared how many ops are generated by copying a 12MB file ( a single 2k image ). The initial reasoning behind this testing was seeing if copying a file at the end of a render was more efficient than trickling data in as it rendered. Here are the results, and the script used to simulate the...

I'm newbies in SAMBA and NetApp filer , I use Filer with OpenLDAP as an authentication and authorization server , but look like NetApp doesn't work properly ( can't authentication ) , NetApp engineer suggest me that NetApp work properly with pure ActiveDirectory Environment. not SAMBA + OpenLDAP backend like me have. so I solve this problem by make Samba as native PDC and use

...to tell qemu eventually for migration, as we'll need some kind of key exchange phase etc... to deal with the crypto aspects (the actual page copy is sorted via encrypting the secure pages back to normal pages in qemu, but we'll need extra metadata). > > and > > have it walk the qtree and "Switch" all the virtio devices to use the > > IOMMU I suppose, but it feels a lot grosser to me. > > That part feels gross, yes. > > > That's the only other option I can think of. > > > > > However in this specific case, the flag does not ne...

...to tell qemu eventually for migration, as we'll need some kind of key exchange phase etc... to deal with the crypto aspects (the actual page copy is sorted via encrypting the secure pages back to normal pages in qemu, but we'll need extra metadata). > > and > > have it walk the qtree and "Switch" all the virtio devices to use the > > IOMMU I suppose, but it feels a lot grosser to me. > > That part feels gross, yes. > > > That's the only other option I can think of. > > > > > However in this specific case, the flag does not ne...

...ticate with the ultravisor, be verified (along with its ramdisk) etc... and copied (by the UV) into secure memory & run from there. At that point, the hypervisor is informed that the VM has become secure. So at that point, we could exit to qemu to inform it of the change, and have it walk the qtree and "Switch" all the virtio devices to use the IOMMU I suppose, but it feels a lot grosser to me. That's the only other option I can think of. > However in this specific case, the flag does not need to come from the > hypervisor, it can be set by arch boot code I think. > C...

...d copied (by the UV) into secure memory & run from there. > > At that point, the hypervisor is informed that the VM has become > secure. > > So at that point, we could exit to qemu to inform it of the change, That's probably a good idea too. > and > have it walk the qtree and "Switch" all the virtio devices to use the > IOMMU I suppose, but it feels a lot grosser to me. That part feels gross, yes. > That's the only other option I can think of. > > > However in this specific case, the flag does not need to come from the > > hyper...

...gration, as we'll > need some kind of key exchange phase etc... to deal with the crypto > aspects (the actual page copy is sorted via encrypting the secure pages > back to normal pages in qemu, but we'll need extra metadata). > > > > and > > > have it walk the qtree and "Switch" all the virtio devices to use the > > > IOMMU I suppose, but it feels a lot grosser to me. > > > > That part feels gross, yes. > > > > > That's the only other option I can think of. > > > > > > > However in this...

(note: i asked this a few days ago but it *appears* that that post was tossed due to getting excessive bounces from my account. so i'm posting it again, apologies if you're seeing it a second time.) over the next several weeks, i'm teaching some courses in RHEL admin but (unsurprisingly) i'll be using centos 5.5. it's a decently-written, 3rd party course, all the generic,

We are looking for a replacement enterprise file system to handle storage needs for our campus. For the past 10 years, we have been happily using DFS (the distributed file system component of DCE), but unfortunately IBM killed off that product and we have been running without support for over a year now. We have looked at a variety of possible options, none of which have proven fruitful. We are