https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-8011 Lustre <p>While chatting at LUG last week, <a href="https://jira.whamcloud.com/secure/ViewProfile.jspa?name=hdoreau" class="user-hover" rel="hdoreau">hdoreau</a> mentioned an interesting idea of an having an HSM action that a policy engine could use to send a command (via the data field) directly to a data mover. We agreed that "HSMA_EXEC" seemed like a good name for this. </p> <p>Could it be that this is the use case that HSMA_NONE was intended for? If so, then perhaps we could rename in to appear less vestigial.</p> LU-8011

Add HSM_EXEC action

Improvement Minor Open Unresolved WC Triage Robert Read Tue, 12 Apr 2016 01:49:41 +0000 Tue, 12 Apr 2016 16:08:24 +0000 0 5 <p>There is a potential security risk from this, especially since we don't have any way to authenticate connections to the copytools. Currently, there is relatively low risk of some rogue process copying files to the archive, but if we allow arbitrary commands from a remote system this could be a problem.</p> <p>The question is whether there is a limited set of operations that are needed and could be plumbed in? What are the proposed use cases for this?</p> <p>Rather than repurpose HSMA_NONE, why not just add a new operation type?</p> <p>I believe <a href="https://jira.whamcloud.com/secure/ViewProfile.jspa?name=hdoreau" class="user-hover" rel="hdoreau">hdoreau</a> had some use cases in mind, but we didn't go into details. I can imagine it would be useful for users to manage the archive storage pools and archive rules together in one tool. I suppose it could also be used by the policy engine to tell the archive to pre-fetch a data set it needs to restore or flush the disk cache to make room for the large about of data it's about to send. </p> <p>Another possible use case I've been thinking about creating a test mover that used parameters in do failure injection, such pause the request for XX seconds, drop request, fail with error, etc. When I heard about the exec idea, I thought it might also be useful for this as well.</p> <p>Submitting HSM actions requires root privilege, so a service that accepts HSM actions from the network should certainly be reasonable secured, agreed. The mover would be responsible for ensuring that only the commands it exposed could be executed, and not arbitrary commands. </p> <p>It seems whatever purpose HSMA_NONE has now could be achieved with HSMA_EXEC(""). </p> Development Rank 1|hzy7mn: Rank (Obsolete) 9223372036854775807