https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-16091 Lustre <p>On MDT side, the <tt>S_ENCRYPTED</tt> flag is set when setting the encryption context, because internally, ldiskfs sets the <tt>LDISKFS_ENCRYPT_FL</tt> flag on the on-disk inode when the <tt>encryption.c</tt> xattr is being set (along with the <tt>LUSTRE_ENCRYPT_FL</tt> flag in the LMA).</p> <p>On OST side, the <tt>LUSTRE_ENCRYPT_FL</tt> flag in the LMA is also set. But this does not lead to the <tt>LDISKFS_ENCRYPT_FL</tt> flag being set on the on-disk inode.</p> <p>So we would need to improve OSD layer’s behavior. By adding a dumb encryption context on OST objects when the <tt>LUSTRE_ENCRYPT_FL</tt> flag gets set in the LMA, ldiskfs would internally set the <tt>LDISKFS_ENCRYPT_FL</tt> flag on the on-disk inode.</p> LU-16091

Set S_ENCRYPTED flag on OST objects for encrypted files

Bug Minor Resolved Fixed Sebastien Buisson Sebastien Buisson encryption patch security Thu, 11 Aug 2022 15:07:06 +0000 Sat, 20 May 2023 11:07:44 +0000 Fri, 13 Jan 2023 14:53:49 +0000 Lustre 2.16.0 Lustre 2.16.0 Lustre 2.15.3 0 3 <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/48198" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/48198</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> enc: S_ENCRYPTED flag on OST objects for enc files<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 4604662f7a9e83a8908922b0cf9f27b5bffc9e09</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/48587" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/48587</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> tests: exercise sanity-sec with patch<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 8ca59d135b3c6c9bc5d292388c4aeb2db414b6fb</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/48589" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/48589</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> tests: exercise sanity-sec with patch 2<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: fd4208cd7e16273a3c7bc067aecc990f12cfb0c4</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/48757" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/48757</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> tests: exercise sanity-sec with patch 3<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: a851bb5ddc6755f870f0f10e954413aa3692b60d</p> <p>"Oleg Drokin &lt;green@whamcloud.com&gt;" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/48198/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/48198/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> enc: S_ENCRYPTED flag on OST objects for enc files<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 348446d6370b3f63f0da8a96997b3295f896c6fb</p> <p>Landed for 2.16</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50657" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50657</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> enc: S_ENCRYPTED flag on OST objects for enc files<br/> Project: fs/lustre-release<br/> Branch: b2_15<br/> Current Patch Set: 1<br/> Commit: d6b2056585b53e525eba3046074c26b740ff329d</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50668" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50668</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 1<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: b137fe9db8a3bf2ad6f72de16502d65e7798ac65</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50669" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50669</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 2<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 6dc4e96bbc1efe6244f8b77cc9b983e11492e29c</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50670" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50670</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 3<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 9e2d20d7112235281f38c5d5359ec164bfd48815</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50671" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50671</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 4<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 0048a1999eb827e4594837d9f5d87cb305edda99</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50672" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50672</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 5<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 7a58dbc051cab8a8a189ce7e859a80a066d11b9e</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50673" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50673</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 2.1<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 181d65dffbfa3e80b2c7acb370e99fb7049aa913</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50674" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50674</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 2.2<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: e274210dd9788a1505b9ee0b98a38a6a37bc7820</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50675" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50675</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 2.1.1<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: c6544e3d8839641fc9b60c08f57ab705ed3fb307</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50686" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50686</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> dbg: investigate zfs failure - 2.1.0<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: ab4d278a9e347bbda90dcce811f659354f61f013</p> <p>"Oleg Drokin &lt;green@whamcloud.com&gt;" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/50657/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/50657/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16091" title="Set S_ENCRYPTED flag on OST objects for encrypted files" class="issue-link" data-issue-key="LU-16091"><del>LU-16091</del></a> enc: S_ENCRYPTED flag on OST objects for enc files<br/> Project: fs/lustre-release<br/> Branch: b2_15<br/> Current Patch Set: <br/> Commit: 1505ae3211ac86b9a621c738d1bcb9782f409d56</p> Related LU-12275 LU-14677 LU-12275 Development Rank 1|i02wxb: Rank (Obsolete) 9223372036854775807 Severity