[Gluster-users] severe security vulnerability in glusterfs with remote-hosts option

2017-05-03 Thread Joseph Lorenzini
Hi all, I came across this blog entry. It seems that there's an undocumented command line option that allows someone to execute a gluster cli command on a remote host. https://joejulian.name/blog/one-more-reason-that-glusterfs-should-not-be-used-as-a-saas-offering/ I am on gluster 3.9 and the op

Re: [Gluster-users] TLS support

2017-03-31 Thread Joseph Lorenzini
ubuntu16.04) Yong Zhang On 2017-03-31 20:56 , Niels de Vos Wrote: On Fri, Mar 31, 2017 at 07:01:14AM -0500, Joseph Lorenzini wrote: > Hi Yong, > > Gluster uses the openssl library, which supports SSL 3.0 and TLS versions > 1.0,1.1,1.2. I actually don't know if its dynamical

Re: [Gluster-users] TLS support

2017-03-31 Thread Joseph Lorenzini
Hi Yong, Gluster uses the openssl library, which supports SSL 3.0 and TLS versions 1.0,1.1,1.2. I actually don't know if its dynamically linked against the openssl library nor what version of the openssl lib gluster has been tested with. That is important info to know that is currently undocumente

[Gluster-users] Error occurs during when mounting gluster fuse over TLS

2017-03-30 Thread Joseph Lorenzini
Hi all, I have gluster 3.9. I have MTLS set up for both management traffic and volumes. The gluster fuser client successfully mounts the gluster volume. However, I see the following error in the gluster server logs when mount or unmount happens on the gluster client. Is this a bug? Is this anythin

Re: [Gluster-users] Secured mount in GlusterFS using keys

2017-03-21 Thread Joseph Lorenzini
any URL related to setup & configuring MTLS is appreciated. > > > > -- > Deepak > > On Mar 19, 2017, at 7:00 AM, Joseph Lorenzini wrote: > > Hi Deepak, > > Sorta. I think it depends on what we mean by I/O path and performance. > > If we are referring to di

Re: [Gluster-users] Secured mount in GlusterFS using keys

2017-03-19 Thread Joseph Lorenzini
get for "free" with the authentication. > > If I understand the term IO path encryption correctly, all the storage IO > will go through extra latency of encryption & decryption which is not > needed for my requirements as this produced extra IO latency which is why I > am tryi

Re: [Gluster-users] Secured mount in GlusterFS using keys

2017-03-18 Thread Joseph Lorenzini
ient on that subnet to gluster mount would be if they use keys/secret as > the client might next cycle/reboot get different IP. I can find workaround > related to IP but this seems really weird that gluster only uses SSL to > encrypt IO traffic but not use the same for authenticated mount. >

Re: [Gluster-users] Secured mount in GlusterFS using keys

2017-03-18 Thread Joseph Lorenzini
Hi Deepak, Here's the TLDR If you don't want the I/O path to be encrypted but you want to control access to a gluster volume, you can set the auth.allow and auth.reject options to whitelist and blacklist clients based on their source IPs. There's also always iptables rules if you don't want to do

[Gluster-users] documentation on georeplication failover

2017-03-06 Thread Joseph Lorenzini
Hi all, I found this doc on georeplication. I am on gluster 3.9. I am looking for documentation that explains how to failover between the master and slave volumes. http://gluster.readthedocs.io/en/latest/Administrator%20Guide/Geo%20Replication/ How would someone handle the following scenario.

[Gluster-users] internals of snaphshot restore

2017-03-04 Thread Joseph Lorenzini
Hi all, Testing out snapshots on gluster and they work great! I have a question about how the snapshot restore works. After I successully restore and start up my volume, the brick directory is not the same /run/gluster/snaps/11efcc850133419991c4614b7cb7189c/brick3/brick And if I look in the orig

[Gluster-users] managing lifecycle of a gluster volume in openshift

2017-02-26 Thread Joseph Lorenzini
Hi all, I am happy to report that I finally got a container in an openshift pod to mount a gluster volume successfully. This has nothing to do with gluster, which works fine, and everything to do with openshift interfaces being less than ideal. Note to self: turn off the settings in openshift that

Re: [Gluster-users] detecting replication issues

2017-02-24 Thread Joseph Lorenzini
cket.ssl-enabled on end-volume volume gv0-replicate-0 type cluster/replicate subvolumes gv0-client-0 gv0-client-1 gv0-client-2 end-volume Joe On Fri, Feb 24, 2017 at 11:40 AM, Alessandro Briosi wrote: > Il 24/02/2017 14:50, Joseph Lorenzini ha scritto: > > 1. I want the mount

Re: [Gluster-users] detecting replication issues

2017-02-24 Thread Joseph Lorenzini
e.vol > > 2) Now start the volume using gluster volume start > > 3) Fuse mount the volume in client machine using the command mount -t > glusterfs :/ / > > this will automatically fetches the configuration file and will do the > replication. You don't need to do anything

Re: [Gluster-users] detecting replication issues

2017-02-24 Thread Joseph Lorenzini
7 at 11:51 PM, Mohammed Rafi K C wrote: > > > On 02/23/2017 11:12 PM, Joseph Lorenzini wrote: > > Hi all, > > I have a simple replicated volume with a replica count of 3. To ensure any > file changes (create/delete/modify) are replicated to all bricks, I have > th

[Gluster-users] detecting replication issues

2017-02-23 Thread Joseph Lorenzini
Hi all, I have a simple replicated volume with a replica count of 3. To ensure any file changes (create/delete/modify) are replicated to all bricks, I have this setting in my client configuration. volume gv0-replicate-0 type cluster/replicate subvolumes gv0-client-0 gv0-client-1 gv0-clie

Re: [Gluster-users] openshift, persistent volumes, and gluster

2017-02-22 Thread Joseph Lorenzini
ples/external_gluster_dynamic_example.adoc > > and there are a few more examples in: > https://github.com/gluster/gluster-kubernetes/tree/master/docs/examples > > thanks > Scott > > - Original Message - > From: "Joseph Lorenzini" > To: "gluster-u

[Gluster-users] openshift, persistent volumes, and gluster

2017-02-22 Thread Joseph Lorenzini
Hi all, Has anyone had success getting openshift to use gluster volumes as persistent volumes in docker containers? I am quite confident that gluster has been configured properly. However, when the pod attempts to mount the gluster volume this error occurs. Error syncing pod, skipping: timeout

[Gluster-users] difference between a pool and peers

2017-02-13 Thread Joseph Lorenzini
All: I can see through the API there's a distinction between pool and a peer. My question is what distinguishes a pool member from a peer? If a node is one it always seems to be the other. Can I ever have a node be "online" in a pool while be an offline peer? What about the reverse? Can I ever hav

[Gluster-users] lvm layout for gluster -- using multiple physical volumes

2017-02-10 Thread Joseph Lorenzini
Hi all, I want to use lvm for two reasons: - gluster snaphosts - ability to dynamically add space to a brick. Here's what i'd like to do: 1. create two more physical volumes 2. create a single volume group from those physical volumes 3. create a single logical volume 4. make the single logical

[Gluster-users] chances of split brain with a distributed replicated volume where replica is 3

2017-02-09 Thread Joseph Lorenzini
All: I read this in the gluster docs. Note I am not using arbiter -- I am setting up volumes with full 3 replicas. In this case, is this split brain scenario theoretical or has this actually occurred? If so, what are the chances that this could happen? In other words, aside from doing regular snap

Re: [Gluster-users] replacing one brick in a distribute replicate volume in gluster 3.8

2017-02-05 Thread Joseph Lorenzini
the right way to do this or should be handled differently? http://lists.gluster.org/pipermail/gluster-users.old/ 2012-October/011502.html Thanks, Joe On Sun, Feb 5, 2017 at 3:40 PM, Joseph Lorenzini wrote: > All: > > I am quite new to gluster so this is likely my lack of knowledge. He

[Gluster-users] replacing one brick in a distribute replicate volume in gluster 3.8

2017-02-05 Thread Joseph Lorenzini
All: I am quite new to gluster so this is likely my lack of knowledge. Here's my scenario: I have a distribute replicate volume with a replica count of 3. Each brick is on a different server and the total number of bricks in the volume is 3. Now lets say one server goes bad or down. Now i want to

[Gluster-users] "{path} is already part of volume" error occurs when mount points are siblings not ancestors

2017-02-05 Thread Joseph Lorenzini
All: My understanding is that in gluster 3.3, a check was added to see if a directory (or any of it's ancestors) is already part of a volume. So far so good. However, I believe this check may be inappropriately getting applied in my case. Here's the scenario: 1. in three node gluster cluster,

Re: [Gluster-users] initial pool setup -- bidirectional probe required?

2017-02-04 Thread Joseph Lorenzini
x27;t seem to really explore this in any detail from what I could find. Thanks, Joe On Sat, Feb 4, 2017 at 4:29 AM, Atin Mukherjee wrote: > You'd not need a bidirectional probe until and unless you want to assign > multiple IPs/host names to a particular peer. > > On Fri,

[Gluster-users] initial pool setup -- bidirectional probe required?

2017-02-03 Thread Joseph Lorenzini
All: According to the docs, when you initially set up a gluster storage pool, the first two servers need to probe each other. However, after that, you add additional servers in by probing from a node that's already in the pool. However, when I follow the directions with gluster 3.8, the behavior

Re: [Gluster-users] possible kernel panic with glusterd

2017-01-25 Thread Joseph Lorenzini
That file exists but is empty. Joe On Wed, Jan 25, 2017 at 7:44 AM Samikshan Bairagya wrote: > > > On 01/25/2017 06:57 PM, Joseph Lorenzini wrote: > > Hi Atin, > > > > I assume you are referring to the /var/log/glustershd.log. If so, that > file > > ne

Re: [Gluster-users] possible kernel panic with glusterd

2017-01-25 Thread Joseph Lorenzini
Hi Atin, I assume you are referring to the /var/log/glustershd.log. If so, that file never gets created. Joe On Wed, Jan 25, 2017 at 6:14 AM Atin Mukherjee wrote: > On Wed, Jan 25, 2017 at 5:15 PM, Joseph Lorenzini > wrote: > > Hi all, > > I have recently started explorin

[Gluster-users] possible kernel panic with glusterd

2017-01-25 Thread Joseph Lorenzini
Hi all, I have recently started exploring the DFS solution space and was doing some basic setup and testing with gluster. I set up a pool of three nodes following the quick start guide. That seemed to work fine. However, shortly after that, I noticed that one of the servers in the pool was becomi