Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-8956

Improve create performance with SELinux enabled

Details

    • Improvement
    • Resolution: Fixed
    • Minor
    • Lustre 2.10.0
    • Lustre 2.9.0
    • 9223372036854775807

    Description

      In order to save a getxattr request at create time, we put inside the inode the security context information we got from security_dentry_init_security().

      Without this optimisation, the create performance drops by 35% when enabling SELinux. With the optimisation, the performance drops by only 5%.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. LU-10130 mkdir returns -95 EOPNOTSUPP with 2.10.1 on sles 12 sp3 with CONFIG_SECURITY disabled

          • Major - Major loss of function.
          • Resolved

          Activity

            [LU-8956] Improve create performance with SELinux enabled
            pjones Peter Jones added a comment -

            Landed for 2.10

            pjones Peter Jones added a comment - Landed for 2.10
            gerrit Gerrit Updater added a comment -

            Oleg Drokin (oleg.drokin@intel.com) merged in patch https://review.whamcloud.com/24426/
            Subject: LU-8956 llite: set sec ctx on client's inode at create time
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 1d44980bcbd10f35b522acc4543a44dcea62eb72

            gerrit Gerrit Updater added a comment - Oleg Drokin (oleg.drokin@intel.com) merged in patch https://review.whamcloud.com/24426/ Subject: LU-8956 llite: set sec ctx on client's inode at create time Project: fs/lustre-release Branch: master Current Patch Set: Commit: 1d44980bcbd10f35b522acc4543a44dcea62eb72
            gerrit Gerrit Updater added a comment -

            Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/24426
            Subject: LU-8956 llite: put security context into inode
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 25882d652bc6ac97068929926a8d9e9aa2c49baf

            gerrit Gerrit Updater added a comment - Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/24426 Subject: LU-8956 llite: put security context into inode Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 25882d652bc6ac97068929926a8d9e9aa2c49baf

            People

              sbuisson Sebastien Buisson (Inactive)
              sbuisson Sebastien Buisson (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: