On Tue, Sep 03, 2019 at 05:42:22PM +0200, Marco Gaiarin wrote:
> Mandi! Alwin Antreich
> In chel di` si favelave...
>
> > > I'm not a ceph expert, but solution iii) seems decent for me, with a
> > > little overhead (a readlinkk and a stat for every osd start).
> > However you like it. But to note that in Ceph Nautilus the udev rules
> > aren't shipped anymore.
>
> Ok. I make a note.
>
>
> > > But still i don't understood why, if i have:
> > > and:
> > > (so, journal partition group-owned by 'disk' and 'ceph' user in group
> > > 'disk'), still i have permission access.
> > > The ceph-osd process reset group ownership on runtime?
> > In Luminous udev is handling all of that, see 95-ceph-osd.rules.
>
> No, sorry, evidently i'm not explaining myself correctly.
>
> I've added the 'ceph' user to group 'disk':
> > > root@capitanmarvel:~# LANG=C id ceph
> > > uid=64045(ceph) gid=64045(ceph) groups=64045(ceph),6(disk)
>
> and journal devices are group-owned by 'disk' and have read and write
> permission for the group (660):
> > > brw-rw---- 1 root disk 8, 6 ago 28 14:38 /dev/sda6
>
> So, because user 'ceph' are in group 'disk', and group 'disk' have read
> and write permission to the device, i can ACTUALLY read and write to
> the device. But is not the case.
>
> So, seems to me that 'ceph-osd' process ''reset'' group membership and
> ignore the 'disk' group.
> Note, that if i 'su' to ceph, i can read the disks:
The ceph-osd process runs with user and group ceph and this is why it wants
the group on the disk to be ceph as well.
ps xa -o user,group,command | grep ceph-osd
You would need to change the service template and alter the setgroup to
'disk' or 'ceph' to make it work.
-- 8< --
CGroup: /system.slice/system-ceph\x2dosd.slice/ceph-osd@1.service
└─7643 /usr/bin/ceph-osd -f --cluster ceph --id 1 --setuser ceph
--setgroup ceph
-- 8< --
I still recommend to go with an extra SSD and spare the hassle.
--
Cheers,
Alwin
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io
