[LU-15790] Fix mirror read/write in Test Plan for File Name Encryption Feature

• Status: Open
• Project: Lustre
• Type: Technical task
• Priority: Minor
• Reporter: Oleg Kulachenko (Inactive)
• Assignee: WC Triage
• Resolution: Unresolved

Description

In "Test Plan for Client-Side Encryption" in

Test ‘lfs migrate/mirror’ of encrypted file.
‘lfs mirror’ actions known to be presently functional are the ‘create/resync/verify/write/read’ sequence, with and without the encryption key.

 

If I test without encryption key lfs mirror read :

# lfs mirror read --mirror-id=1 /mnt/lustre/vault/+ed0A1hnSFSvU9myM1ZHw9anVti9gRDhKf4r3fK6FNM
lfs mirror read: cannot open '/mnt/lustre/vault/+ed0A1hnSFSvU9myM1ZHw9anVti9gRDhKf4r3fK6FNM': Required key not available
Read the content of a specified mirror of a file. 

This is the correct behavior - if there is no encryption key, then the user should not be able to read or write the data.

We need to fix this in the test plan.

Issue Links

• is related to: LU-14677 lfs migrate/mirror of encrypted files

Comments

[Sebastien Buisson]

Please find attached fixed test plan Client-Side Encryption Feature Test Plan.docx

[Andreas Dilger]

Sebastien, I thought that lfs migrate and lfs mirror should work for encrypted files without the key (LU-14677), because they open the file with the magic open flags? These operations do not need to understand the file content, and can just read/write the encrypted data.

[Andreas Dilger]

Sorry, I didn't notice that this was lfs mirror read", which definitely should not work without a key.

[Sebastien Buisson]

Correct, we are on the same page.