Subject: Re: [vserver] problem accessing NetApp Filer snapshot
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Fri, 14 Sep 2007 05:29:53 +0200

On Tue, Sep 11, 2007 at 06:36:23PM -0700, Dallas Kashuba wrote:
> On Sep 7, 2007, at 7:17 AM, Herbert Poetzl wrote:
> 
> 
> >On Fri, Sep 07, 2007 at 08:20:21AM +0200, Daniel Hokka Zakrisson  
> >wrote:
> >
> >>Herbert Poetzl wrote:
> >>
> >>>yeah, please provide the following debug info:
> >>>
> >>>- complete rpc and nfs(d) debug output for all
> >>>  cases, i.e. root/user on host/guest
> >>>- Linux-VServer debug dmesg output
> >>>
> >>>we know that the subtree checks (depending on
> >>>the nfs version) cause some issues, and I think
> >>>we can fix them with sufficient data ...
> >>>
> >>
> >>Didn't we come to the conclusion that this problem was due to the
> >>extra vx_capable in vfs_kern_mount when this was discussed on IRC,
> >>which ought to be just vx_ccaps?
> >>
> >
> >should be easy to test, in this case 2.3.0.19
> >should not have this issue at all, no?
> >
> >but I would guess some problems with subtree
> >mounts ove NFS will still remain ...
> >
> >anyway, maybe Dallas can test that too?
> >
> 
> 
> This .snapshot 'operation not permitted' happens on the host as well  
> as the guest so I have done some testing on a host with nothing else  
> running on it and no guests set up.  I enabled debugging in the  
> VServer kernel but didn't see any applicable messages in dmesg.  Is  
> there something else I should do with that?
> 
> I was unable to locate a 2.3.0.19 patch, but I did try the latest  
> 2.3.0.18 on a 2.6.22.6 kernel with no other patches and saw the same  
> behavior as with the older kernel (2.6.19.7) and vserver patch  
> (patch-2.6.19.7-vs2.2.0-grsec2.1.10-20070402.diff) we're using in  
> production.
> 
> Here are my test cases with associated NFS client and RPC debug output.
> 
> 1.  Non-root user attempting to "cd /mnt/vservers/.snapshot".  
> Resulted in "Operation not permitted"

[longer debug info zapped]

> I hope that helps!

yes, looks good, will look into this soon

best,
Herbert

> Dallas
> 
> 
> >best,
> >Herbert
> >
> >
> >>>TIA,
> >>>Herbert
> >>>
> >>>
> >>>>Thanks!
> >>>>Dallas
> >>>>
> >>