https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-15790 Lustre <p>In "Test Plan for Client-Side Encryption" in</p> <div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent"> <pre class="code-java"> Test ‘lfs migrate/mirror’ of encrypted file. ‘lfs mirror’ actions known to be presently functional are the ‘create/resync/verify/write/read’ sequence, with and without the encryption key.</pre> </div></div> <p> </p> <p>If I test without encryption key lfs mirror read :</p> <div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent"> <pre class="code-java"> # lfs mirror read --mirror-id=1 /mnt/lustre/vault/+ed0A1hnSFSvU9myM1ZHw9anVti9gRDhKf4r3fK6FNM lfs mirror read: cannot open <span class="code-quote">'/mnt/lustre/vault/+ed0A1hnSFSvU9myM1ZHw9anVti9gRDhKf4r3fK6FNM'</span>: Required key not available Read the content of a specified mirror of a file. </pre> </div></div> <p>This is the correct behavior - if there is no encryption key, then the user should not be able to read or write the data.</p> <p>We need to fix this in the test plan.</p> LU-15790

Fix mirror read/write in Test Plan for File Name Encryption Feature

Technical task LU-13717 Minor Open Unresolved WC Triage Oleg Kulachenko Wed, 27 Apr 2022 12:55:26 +0000 Wed, 27 Apr 2022 18:23:14 +0000 0 3 <p>Please find attached fixed test plan <span class="nobr"><a href="https://jira.whamcloud.com/secure/attachment/43430/43430_Client-Side+Encryption+Feature+Test+Plan.docx" title="Client-Side Encryption Feature Test Plan.docx attached to LU-15790">Client-Side Encryption Feature Test Plan.docx^{<img class="rendericon" src="https://jira.whamcloud.com/images/icons/link_attachment_7.gif" height="7" width="7" align="absmiddle" alt="" border="0"/>}</a></span></p> <p>Sebastien, I thought that lfs migrate and lfs mirror <b>should</b> work for encrypted files without the key (<a href="https://jira.whamcloud.com/browse/LU-14677" title="lfs migrate/mirror of encrypted files" class="issue-link" data-issue-key="LU-14677"><del>LU-14677</del></a>), because they open the file with the magic open flags? These operations do not need to understand the file content, and can just read/write the encrypted data. </p> <p>Sorry, I didn't notice that this was <tt>lfs mirror <b>read</b></tt>", which definitely should not work without a key. </p> <p>Correct, we are on the same page.</p> Related LU-14677 Development Rank 1|i02obr: Rank (Obsolete) 9223372036854775807