Re: [vserver] set acl in a vserver / setfacl: Operation not supported

From: Ekkard Gerlach <ekkardgerlach_at_aiai.de>
Date: Mon 15 Jun 2009 - 23:13:25 BST
Message-ID: <20090615221325.GA346@rex3.site>

* Herbert Poetzl schrieb:

> On Sun, Jun 14, 2009 at 06:04:53PM +0200, Ekkard Gerlach wrote:
> > Hi,
> > somebody here has an idea how to enable setfacl in a vserver?
>
> > Suse 9.2 32Bit here is a vserver under debian-etch 64Bit kernel 2.6.18
> > and works fine.
>
> this is inside a guest?
"inside"? Suse 9.2 is the guest, I don't know whats "inside" or "outside"!
Suse 9.2 runs in its own namespace. The partitions (drbd-devices) of
Suse 9.2 are also mounted in the host, thats all:

haupt1 is the host:
===================
haupt1:~# mount
/dev/md0 on / type ext3 (rw,noatime,errors=remount-ro)
tmpfs on /lib/init/rw type tmpfs (rw,nosuid,mode=0755)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw,noexec,nosuid,nodev)
procbususb on /proc/bus/usb type usbfs (rw)
udev on /dev type tmpfs (rw,mode=0755)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)
devpts on /dev/pts type devpts (rw,noexec,nosuid,gid=5,mode=620)
/dev/mapper/vg--haupt1-var--cache on /var/cache type ext3 (rw,noatime)
/dev/mapper/vg--haupt1-var--log on /var/log type ext3 (rw,noatime)
/dev/mapper/vg--haupt1-holdingdisk on /var/cache/amanda/dumps type ext3 (rw,noatime)
nfsd on /proc/fs/nfsd type nfsd (rw)
rpc_pipefs on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)
/dev/drbd0 on /var/lib/vservers/misc type ext3 (rw)
/dev/drbd1 on /data/pserver type ext3 (rw)
/dev/drbd2 on /data/pserver/boot type ext3 (rw)
/dev/drbd3 on /data/pserver/home type ext3 (rw)
/dev/drbd4 on /data/pserver/home/brennen type ext3 (rw)
/dev/drbd5 on /data/pserver/nfsroot type ext3 (rw)

>
> > On another machine Suse 10.2 (kernel 2.6.18) also works fine
> > with debian-etch 64Bit kernel 2.6.18.
>
> again, inside a guest?
same, see above.
>
> > But setfacl claims:
> > pserver:/home/david/letters # setfacl --set u::rwx,g::---,o:---,m:rwx mydir/
> > setfacl: mydir: Operation not supported
>
> > Directory "mydir" exists, acl is enabled in fstab with: [...] defaults,acl
>
> in the guest config, or where is the 'acl' set?
in /etc/vservers/pserver/fstab:
/dev/drbd1 / ext3 defaults 0 0
/dev/drbd2 /boot ext3 defaults 0 0
/dev/drbd3 /home ext3 defaults,acl 0 0
/dev/drbd4 /home/brennen ext3 defaults 0 0
/dev/drbd5 /nfsroot ext3 defaults 0 0
none /proc proc defaults 0 0
none /dev/pts devpts gid=5,mode=620 0 0

>
> > pserver:~ # mount
> > [...]
> > /dev/drbd3 on /home type ufs (acl)
> > [...]
>
> what does /proc/mounts contain?
haupt1:~# cat /proc/mounts
rootfs / rootfs rw 0 0
none /sys sysfs rw 0 0
none /proc proc rw,nodiratime 0 0
udev /dev tmpfs rw 0 0
/dev/md0 / ext3 rw,noatime,data=ordered 0 0
/dev/md0 /dev/.static/dev ext3 rw,data=ordered 0 0
tmpfs /lib/init/rw tmpfs rw,nosuid 0 0
usbfs /proc/bus/usb usbfs rw,nosuid,nodev,noexec 0 0
tmpfs /dev/shm tmpfs rw,nosuid,nodev 0 0
devpts /dev/pts devpts rw,nosuid,noexec 0 0
/dev/mapper/vg--haupt1-var--cache /var/cache ext3 rw,noatime,data=ordered 0 0
/dev/mapper/vg--haupt1-var--log /var/log ext3 rw,noatime,data=ordered 0 0
/dev/mapper/vg--haupt1-holdingdisk /var/cache/amanda/dumps ext3 rw,noatime,data=ordered 0 0
nfsd /proc/fs/nfsd nfsd rw 0 0
rpc_pipefs /var/lib/nfs/rpc_pipefs rpc_pipefs rw 0 0
/dev/drbd0 /var/lib/vservers/misc ext3 rw,data=ordered 0 0
/dev/drbd1 /data/pserver ext3 rw,data=ordered 0 0
/dev/drbd2 /data/pserver/boot ext3 rw,data=ordered 0 0
/dev/drbd3 /data/pserver/home ext3 rw,data=ordered 0 0
/dev/drbd4 /data/pserver/home/brennen ext3 rw,data=ordered 0 0
/dev/drbd5 /data/pserver/nfsroot ext3 rw,data=ordered 0 0

.. hmmm: no acl option shown here ...
The partitions are mounted here because they're exported by NFS,
client are DLC's (diskless clients) that mount the /data/pserver/...

>
> > On a Suse 9.2 installed natively this call of setfacl works fine but not
> > in a vserver.
>
> on the same filesystem?
Another Suse 9.2 installation, completely different installation!
> what kernel/patch exactly and what util-vserver version?

haupt1:~# uname -a
Linux haupt1 2.6.18-6-vserver-amd64 #1 SMP Thu May 8 07:27:16 UTC 2008 x86_64 GNU/Linux
haupt1:~# dpkg -l | grep util-vserver
ii util-vserver 0.30.212-1 user-space tools for Linux-VServer virtual private servers

thx a lot
Ekkard
Received on Mon Jun 15 23:13:45 2009

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Mon 15 Jun 2009 - 23:13:46 BST by hypermail 2.1.8