[LU-16091] Set S_ENCRYPTED flag on OST objects for encrypted files

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.16.0, Lustre 2.15.3
• Affects Version/s: Lustre 2.16.0
• Labels: encryption patch security
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

On MDT side, the S_ENCRYPTED flag is set when setting the encryption context, because internally, ldiskfs sets the LDISKFS_ENCRYPT_FL flag on the on-disk inode when the encryption.c xattr is being set (along with the LUSTRE_ENCRYPT_FL flag in the LMA).

On OST side, the LUSTRE_ENCRYPT_FL flag in the LMA is also set. But this does not lead to the LDISKFS_ENCRYPT_FL flag being set on the on-disk inode.

So we would need to improve OSD layer’s behavior. By adding a dumb encryption context on OST objects when the LUSTRE_ENCRYPT_FL flag gets set in the LMA, ldiskfs would internally set the LDISKFS_ENCRYPT_FL flag on the on-disk inode.

Issue Links

• is related to: LU-12275 Client-side file data encryption
• is related to: LU-12275 Client-side file data encryption
• is related to: LU-14677 lfs migrate/mirror of encrypted files