zfs discuss - Sep 2006 - creating zvols in a non-global zone (or ''Doctor, it hurts when I do this'')

A colleague just asked if zfs delegation worked with zvols too.
Thought I''d give it a go and got myself in a mess
 (tank/linkfixer is the delegated dataset):

root at non-global / # zfs create -V 500M tank/linkfixer/foo
cannot create device links for ''tank/linkfixer/foo'':
permission denied
cannot create ''tank/linkfixer/foo'': permission denied

Ok, so we''ll try a normal filesystem:

root at non-global / # zfs create  tank/linkfixer/foo
cannot create ''tank/linkfixer/foo'': dataset already exists
root at non-global / # zfs list
NAME                   USED  AVAIL  REFER  MOUNTPOINT
tank                  2.09G  33.8G  24.5K  legacy
tank/linkfixer        36.3M  9.96G  24.5K  legacy
tank/linkfixer/foo    22.5K  9.96G  22.5K  -
root at non-global / # zfs destroy -f  tank/linkfixer/foo
cannot remove device links for ''tank/linkfixer/foo'':
permission denied
root at non-global / # zfs list
NAME                   USED  AVAIL  REFER  MOUNTPOINT
tank                  2.09G  33.8G  24.5K  legacy
tank/linkfixer        36.3M  9.96G  24.5K  legacy
tank/linkfixer/foo    22.5K  9.96G  22.5K  -

I can destroy it ok from the global zone, and I know I could just
create a top-level zvol and grant the zone access.
Not sure if the ''fix'' is :

a) prevent attempts to create zvols in non-global zones
b) somehow allow it (?) or
c) Don''t do That

I vote for a) myself - should I raise an RFE?

-- 
Rasputin :: Jack of All Trades - Master of Nuns
http://number9.hellooperator.net/

On Wed, Sep 06, 2006 at 04:23:32PM +0100, Dick Davies
wrote:
> 
> a) prevent attempts to create zvols in non-global zones
> b) somehow allow it (?) or
> c) Don''t do That
> 
> I vote for a) myself - should I raise an RFE?
Yes, that was _supposed_ to be the original behavior, and I thought we
had it working that way at one point.  Apparently I''m imagining things,
or it got broken somewhere along the way.  Please file a bug.

- Eric

--
Eric Schrock, Solaris Kernel Development       http://blogs.sun.com/eschrock

On 06/09/06, Eric Schrock <eric.schrock at sun.com>
wrote:
> On Wed, Sep 06, 2006 at 04:23:32PM +0100, Dick Davies wrote:
> >
> > a) prevent attempts to create zvols in non-global zones
> > b) somehow allow it (?) or
> > c) Don''t do That
> >
> > I vote for a) myself - should I raise an RFE?
>
> Yes, that was _supposed_ to be the original behavior, and I thought we
> had it working that way at one point.  Apparently I''m imagining
things,
> or it got broken somewhere along the way.  Please file a bug.
For the record, it''s filed as :

http://bugs.opensolaris.org/view_bug.do?bug_id=6498038

--
Rasputin :: Jack of All Trades - Master of Nuns
http://number9.hellooperator.net/