Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-13717

Client-side encryption - support file name encryption

Details

    • 9223372036854775807

    Description

      This ticket is a place-holder to describe work to be done for client-side file name encryption. This is a follow-up of LU-12275, so all principles and concepts detailed there are still valid.

      In particular, filename encryption principles are explained in this document:
      https://jira.whamcloud.com/secure/attachment/32657/lustre_encryption_modes_usage.txt

      Further details will be added as the feature design makes progress.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. LU-15027 sanity-sec: crash in __list_add_valid() during sanity-sec test_47

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-15406 Using the native fscrypt for Ubuntu20 5.4 kernel fails several migration test

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-15407 fscrypt does not work on Ubuntu 5.8 kernel

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-15810 Migrated encrypted directory lacks on-disk encryption flag and context

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-15922 Interop: sanity-sec test_46: File name too long

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-15848 ldiskfs: escape encrypted file names

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-15827 BUG: KASAN: slab-out-of-bounds in osd_ldiskfs_filldir+0x16c2/0x1860 [osd_ldiskfs]

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-16085 Ubuntu 22.04 sanityn test_106c: supported stx_attributes: got '2030', expected '30'

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. LU-15928 pass key length as part of index API

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. LU-15787 clients built without encryption support can corrupt encrypted directories

          • Blocker - Blocks development and/or testing work, production could not run.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-15855 Return -ENOKEY to encrypt-unaware clients if filename is missing

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-15911 Make enable_filename_encryption tunable only available with embedded llcrypt

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          New Feature - A new feature of the product, which has yet to be developed. LU-12275 Client-side file data encryption

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. LU-14677 lfs migrate/mirror of encrypted files

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            [LU-13717] Client-side encryption - support file name encryption
            pjones Peter Jones added a comment -

            Landed for 2.15

            pjones Peter Jones added a comment - Landed for 2.15
            gerrit Gerrit Updater added a comment -

            "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/45211/
            Subject: LU-13717 sec: make client encryption compatible with ext4
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 4231fab66eab3e984499bf0c6bd4514692a409fa

            gerrit Gerrit Updater added a comment - "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/45211/ Subject: LU-13717 sec: make client encryption compatible with ext4 Project: fs/lustre-release Branch: master Current Patch Set: Commit: 4231fab66eab3e984499bf0c6bd4514692a409fa
            gerrit Gerrit Updater added a comment -

            "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/45163/
            Subject: LU-13717 sec: fix handling of encrypted file with long name
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 75414af6bf310244d38284958ecf037d61936726

            gerrit Gerrit Updater added a comment - "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/45163/ Subject: LU-13717 sec: fix handling of encrypted file with long name Project: fs/lustre-release Branch: master Current Patch Set: Commit: 75414af6bf310244d38284958ecf037d61936726
            gerrit Gerrit Updater added a comment -

            "James Simmons <jsimmons@infradead.org>" uploaded a new patch: https://review.whamcloud.com/45907
            Subject: LU-13717 sec: test native fscrypt for Ubunutu 5.4 kernel
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: ef8ff9e8a4c70d8d40aa53219613f38a7d2d351b

            gerrit Gerrit Updater added a comment - "James Simmons <jsimmons@infradead.org>" uploaded a new patch: https://review.whamcloud.com/45907 Subject: LU-13717 sec: test native fscrypt for Ubunutu 5.4 kernel Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: ef8ff9e8a4c70d8d40aa53219613f38a7d2d351b
            adilger Andreas Dilger added a comment -

            e2fsprogs be included in e2fsprogs-1.46.2.wc4

            adilger Andreas Dilger added a comment - e2fsprogs be included in e2fsprogs-1.46.2.wc4
            gerrit Gerrit Updater added a comment -

            "Andreas Dilger <adilger@whamcloud.com>" merged in patch https://review.whamcloud.com/45212/
            Subject: LU-13717 sec: process Lustre enc inodes as normal enc inodes
            Project: tools/e2fsprogs
            Branch: master-lustre
            Current Patch Set:
            Commit: 35ce354fa5688625961a62fae8d26f826b015593

            gerrit Gerrit Updater added a comment - "Andreas Dilger <adilger@whamcloud.com>" merged in patch https://review.whamcloud.com/45212/ Subject: LU-13717 sec: process Lustre enc inodes as normal enc inodes Project: tools/e2fsprogs Branch: master-lustre Current Patch Set: Commit: 35ce354fa5688625961a62fae8d26f826b015593
            gerrit Gerrit Updater added a comment -

            "Andreas Dilger <adilger@whamcloud.com>" merged in patch https://review.whamcloud.com/45289/
            Subject: LU-13717 sec: support encrypted files handling in pfsck mode
            Project: tools/e2fsprogs
            Branch: master-lustre
            Current Patch Set:
            Commit: d35469d6c41a90ebeca121d3e5ec709cfc967cb8

            gerrit Gerrit Updater added a comment - "Andreas Dilger <adilger@whamcloud.com>" merged in patch https://review.whamcloud.com/45289/ Subject: LU-13717 sec: support encrypted files handling in pfsck mode Project: tools/e2fsprogs Branch: master-lustre Current Patch Set: Commit: d35469d6c41a90ebeca121d3e5ec709cfc967cb8
            gerrit Gerrit Updater added a comment -

            "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/45221/
            Subject: LU-13717 sec: missing defs in includes for client encryption
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 79ac7c144539e0d964db329c341ebf30a8472f5c

            gerrit Gerrit Updater added a comment - "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/45221/ Subject: LU-13717 sec: missing defs in includes for client encryption Project: fs/lustre-release Branch: master Current Patch Set: Commit: 79ac7c144539e0d964db329c341ebf30a8472f5c
            gerrit Gerrit Updater added a comment -

            "Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/45289
            Subject: LU-13717 sec: support encrypted files handling in pfsck mode
            Project: tools/e2fsprogs
            Branch: master-lustre
            Current Patch Set: 1
            Commit: ef01ec0a4ffc6c0de9dfc1377fa3880611b5e664

            gerrit Gerrit Updater added a comment - "Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/45289 Subject: LU-13717 sec: support encrypted files handling in pfsck mode Project: tools/e2fsprogs Branch: master-lustre Current Patch Set: 1 Commit: ef01ec0a4ffc6c0de9dfc1377fa3880611b5e664
            gerrit Gerrit Updater added a comment -

            "Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/45221
            Subject: LU-13717 sec: missing defs in includes for client encryption
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 089ce9b3939c9f6aad257c61987e7b8d18469b22

            gerrit Gerrit Updater added a comment - "Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/45221 Subject: LU-13717 sec: missing defs in includes for client encryption Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 089ce9b3939c9f6aad257c61987e7b8d18469b22

            People

              sebastien Sebastien Buisson
              sebastien Sebastien Buisson
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: