[LU-15170] PCC cache re-attach does not work in containers

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.15.0
• Severity: 3
• Assignee: Patrick Farrell
• Reporter: Patrick Farrell

Description

When doing re-attach/auto-attach of cached files for which the lock has been lost, PCC looks them up with kern_path.  However, kern_path is subject to namespaces, so if the user process is containerized, it will use the container namespace.

This means PCC must be mounted in the container namespace, which is not desirable.

Instead we can do a lookup with lookup_one_len, starting from the PCC root, which is in the true root file system and not subject to the container namespace.  It is correct to ignore the container namespace because PCC is file system caching functionality, and because the user can't control the PCC path, so it's not a potential security concern.

Issue Links

• is related to: LU-15484 sanity-pcc test_101a: could not map uid 500 to root in namespace

Comments

[Peter Jones]

Landed for 2.15

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/45436/
Subject: LU-15170 llite: Switch pcc to lookup_one_len
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: f3be560031cc7022a22f4c661f94ac7aa6f617f1

[Gerrit Updater]

"Patrick Farrell <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/45436
Subject: LU-15170 llite: Switch pcc to lookup_one_len
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 96c90859e14f3960b57eae54b3886aeef62f6f40