[LU-18456] TCU: Trash Can/Undelete for Lustre

• Type: New Feature
• Resolution: Unresolved
• Priority: Minor
• Labels: hard medium support usability
• Environment: [HLD Document|https://wiki.whamcloud.com/pages/viewpage.action?pageId=351437962]
• Severity: 3
• Assignee: Qian Yingjin
• Reporter: Qian Yingjin

Description

Introduction

If files are accidentally deleted from a file system, an application may be interrupted and the user data may be permanently lost. The trash can (also called "undelete" or "recycle bin") is a recommended feature in file systems that acts as a virtual trash can, allowing users to store deleted files temporarily before permanently deleting them. It provides a way to restore or retrieve deleted files if needed.

Once the trash can feature is enabled, when a user deletes a file from a file system, it is not actually deleted but moved to the trash can, deleted files and directories are temporarily stored in the trash can. The trash can may be manually emptied or once it is full, it will remove the oldest files first. Additionally, items in the trash can may be restored or retrieved if they are still there.

Trash Can/Undelete Functionalities

The trash can should including the following functionalities:

• List "undeleted" files in the trash can;
• After a file is deleted and moved into trash can, the quota for this file should be accounted and updated (reduced) accordingly;
• The trash can, and all files therein are not visible in the namespace of the file system;
• Restore a file in the trash can. This will restore a file to its original path. The corresponding quota account should be updated also;
• Delete a file in the trash can. This will finally remove the file from the file system and free the used space. The file is now unrecoverable;
• Empty the trash can. This will remove all files in the trash can;
• A user can restore files from trash can within the specified retention period. By this way, a file can be kept "undeleted" under a pre-defined configurable grace period.
• Enable/disable trash can feature on a entire file system;
• A administrator can enable/disable trash can feature on a specified directory;

Deleted files can no longer be restored from the trash can when:

• A file (or directory) is deleted again from the trash can. In other words it have been deleted twice. The first deletion only moves the file to the trash can. The second deletion actually removes the file from the file system.
• The trash can is emptied of all of its contents.

The Trash Can/Undelete HLD contains details of the design and implementation of this feature.

Issue Links

• duplicates: LU-18253 implement Trash Can/Undelete
• is related to: LU-13660 ldiskfs integtrated filesystem snapshot
• is related to: LU-18457 Flashback for Lustre
• is related to: LU-18917 TCU: implement per-user subdirectories in trash can
• is related to: LU-7880 add OST/MDT performance statistics to obd_statfs
• is related to: LU-17648 store JobID of process deleting file into xattr
• is related to: LU-18800 TCU: implement virtual ".Trash" subdirectory for undelete