[LU-16091] Set S_ENCRYPTED flag on OST objects for encrypted files

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.16.0, Lustre 2.15.3
• Affects Version/s: Lustre 2.16.0
• Labels: encryption patch security
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

On MDT side, the S_ENCRYPTED flag is set when setting the encryption context, because internally, ldiskfs sets the LDISKFS_ENCRYPT_FL flag on the on-disk inode when the encryption.c xattr is being set (along with the LUSTRE_ENCRYPT_FL flag in the LMA).

On OST side, the LUSTRE_ENCRYPT_FL flag in the LMA is also set. But this does not lead to the LDISKFS_ENCRYPT_FL flag being set on the on-disk inode.

So we would need to improve OSD layer’s behavior. By adding a dumb encryption context on OST objects when the LUSTRE_ENCRYPT_FL flag gets set in the LMA, ldiskfs would internally set the LDISKFS_ENCRYPT_FL flag on the on-disk inode.

Issue Links

• is related to: LU-12275 Client-side file data encryption
• is related to: LU-12275 Client-side file data encryption
• is related to: LU-14677 lfs migrate/mirror of encrypted files

Comments

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/50657/
Subject: LU-16091 enc: S_ENCRYPTED flag on OST objects for enc files
Project: fs/lustre-release
Branch: b2_15
Current Patch Set:
Commit: 1505ae3211ac86b9a621c738d1bcb9782f409d56

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50686
Subject: LU-16091 dbg: investigate zfs failure - 2.1.0
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: ab4d278a9e347bbda90dcce811f659354f61f013

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50675
Subject: LU-16091 dbg: investigate zfs failure - 2.1.1
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: c6544e3d8839641fc9b60c08f57ab705ed3fb307

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50674
Subject: LU-16091 dbg: investigate zfs failure - 2.2
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: e274210dd9788a1505b9ee0b98a38a6a37bc7820

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50673
Subject: LU-16091 dbg: investigate zfs failure - 2.1
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 181d65dffbfa3e80b2c7acb370e99fb7049aa913

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50672
Subject: LU-16091 dbg: investigate zfs failure - 5
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 7a58dbc051cab8a8a189ce7e859a80a066d11b9e

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50671
Subject: LU-16091 dbg: investigate zfs failure - 4
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 0048a1999eb827e4594837d9f5d87cb305edda99

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50670
Subject: LU-16091 dbg: investigate zfs failure - 3
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 9e2d20d7112235281f38c5d5359ec164bfd48815

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50669
Subject: LU-16091 dbg: investigate zfs failure - 2
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 6dc4e96bbc1efe6244f8b77cc9b983e11492e29c

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/50668
Subject: LU-16091 dbg: investigate zfs failure - 1
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: b137fe9db8a3bf2ad6f72de16502d65e7798ac65