August 2025 - Devel - NFS Ganesha List Archives

[M] Change in ...nfs-ganesha[next]: fscrypt kmip module - documentation
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221503?usp=email ) Change subject: fscrypt kmip module - documentation ...................................................................... fscrypt kmip module - documentation This documents the options for the fscrypt kmip plugin. This will be produced with the other man pages in ganesha, if man pages are enabled. Change-Id: Idebfe7723a37312ce6860704a8e9b5395f748fa3 Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M src/doc/man/ganesha-ceph-config.rst M src/doc/man/ganesha-config.rst A src/doc/man/ganesha-fscrypt-config.rst M src/doc/man/index.rst 4 files changed, 161 insertions(+), 0 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/03/1221503/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221503?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: Idebfe7723a37312ce6860704a8e9b5395f748fa3 Gerrit-Change-Number: 1221503 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[XL] Change in ...nfs-ganesha[next]: fscrypt kmip module - get key from kmip, give to ceph fsal module.
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221502?usp=email ) Change subject: fscrypt kmip module - get key from kmip, give to ceph fsal module. ...................................................................... fscrypt kmip module - get key from kmip, give to ceph fsal module. This works as a export extension plugin and adds extra global and per-export configuration options to configure parameters to talk to the kmip host, and to associate key information with the corresponding export. If a key cannot be fetched, the correpsonding export is not made available. This uses "libkmip" and "OpenSSL" to talk to the kmip server. Client intermediate certificate are supported, as well as SNI. Change-Id: I21ddced4ab0dbb083ee40eb11e485443e11ebe21 Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M src/PLUGIN/CMakeLists.txt A src/PLUGIN/kmip/CMakeLists.txt A src/PLUGIN/kmip/kmip_fscrypt.c M src/nfs-ganesha.spec-in.cmake 4 files changed, 1,330 insertions(+), 0 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/02/1221502/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221502?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I21ddced4ab0dbb083ee40eb11e485443e11ebe21 Gerrit-Change-Number: 1221502 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[XS] Change in ...nfs-ganesha[next]: build logic for libkmip module
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221501?usp=email ) Change subject: build logic for libkmip module ...................................................................... build logic for libkmip module Also pulls in ssl libraries because that's required for using libkmip. Change-Id: I8c1bb79bcfdf431732b25ff6be082c89556674ca Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M src/CMakeLists.txt M src/scripts/podman/install-packages.sh 2 files changed, 7 insertions(+), 0 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/01/1221501/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221501?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I8c1bb79bcfdf431732b25ff6be082c89556674ca Gerrit-Change-Number: 1221501 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[XS] Change in ...nfs-ganesha[next]: kmip submodule.
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221500?usp=email ) Change subject: kmip submodule. ...................................................................... kmip submodule. This is just the submodule proper (from ceph); no compile or runtime logic here. Change-Id: If7cfe38770d4dc9c03c5c065d3cc981defdf7eba Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M .gitmodules A src/libkmip 2 files changed, 5 insertions(+), 0 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/00/1221500/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221500?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: If7cfe38770d4dc9c03c5c065d3cc981defdf7eba Gerrit-Change-Number: 1221500 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[M] Change in ...nfs-ganesha[next]: CEPH FSAL / CEPHFS: fscrypt support
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221499?usp=email ) Change subject: CEPH FSAL / CEPHFS: fscrypt support ...................................................................... CEPH FSAL / CEPHFS: fscrypt support Include linux/fscrypt.h in a bunch of places. Whether this is actually required may depend on the version of linux, but it never hurts. In this implementation, the key is always added, and then the "kid" that is derived from the key is used to set the fscrypt policy. This catches errors for when the volume is encrypted, but with a different key. There are no provisions in this version to remove keys; so they will persist until ganesha is restarted. ALSO NOTE: there are no provisions for to see if the relevant calls are in ceph - so this requirse a version of ceph that includes fscrypt support. Change-Id: I2a4d7ff38d6bcc11c969a6b21354120eddb140e1 Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M src/CMakeLists.txt M src/FSAL/FSAL_CEPH/ds.c M src/FSAL/FSAL_CEPH/export.c M src/FSAL/FSAL_CEPH/handle.c M src/FSAL/FSAL_CEPH/internal.c M src/FSAL/FSAL_CEPH/internal.h M src/FSAL/FSAL_CEPH/mds.c M src/FSAL/FSAL_CEPH/statx_compat.c M src/cmake/modules/FindCEPHFS.cmake M src/include/config-h.in.cmake M src/tools/multilock/ml_cephfs_client.c 11 files changed, 123 insertions(+), 0 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/99/1221499/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221499?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I2a4d7ff38d6bcc11c969a6b21354120eddb140e1 Gerrit-Change-Number: 1221499 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[M] Change in ...nfs-ganesha[next]: fsal control: Add "control" operation for fsal object.
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221498?usp=email ) Change subject: fsal control: Add "control" operation for fsal object. ...................................................................... fsal control: Add "control" operation for fsal object. Two operations are defined: FSCRYPT_SETKEY and FSCRYPT_VERIFY_NOT_ENCRYPTED, both are for fscrypt support. This is just the plumbing, it is up to individual FSALs to implement the actual logic. However, an important piece of the plumbing that is included here is mdcache logic to pass operations to the underlying FSAL. Change-Id: I065dd583e8ec4b6c155bc816598879f83c64a1f8 Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M src/FSAL/Stackable_FSALs/FSAL_MDCACHE/mdcache_file.c M src/FSAL/Stackable_FSALs/FSAL_MDCACHE/mdcache_handle.c M src/FSAL/Stackable_FSALs/FSAL_MDCACHE/mdcache_int.h M src/FSAL/default_methods.c M src/include/fsal_api.h 5 files changed, 63 insertions(+), 0 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/98/1221498/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221498?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I065dd583e8ec4b6c155bc816598879f83c64a1f8 Gerrit-Change-Number: 1221498 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[L] Change in ...nfs-ganesha[next]: CONFIG: %plugin architectyure
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221497?usp=email ) Change subject: CONFIG: %plugin architectyure ...................................................................... CONFIG: %plugin architectyure This is a mechanism to load in code to read in custom configuration and using that to augment the actions of fsals on a per-export basis. Included is logic so that a plugin can request to handle configuration at a "global" level. After the plugin registers itself, at the appropriate time, logic in main will call back into the plugin giving it the chance to find and claim its configuration bits. Also included is logic to allow custom configuration values per-export. This uses the "CONFIG_RELAX" mechanism in config to parse the export block several times: first time is to pick up the standard options including the mandatory "export_id" parameter. The second (and optional) pass can be made by extension plugins. Those passes must capture export_id if they want to locate the corresponding gsh_export structure. The last pass accepts no parameters, it runs without CONFIG_RELAX to verify all parameters were "found". Also included is a "callback" mechanism so that extensions can implement configuration changes after the root object is set. If the callback indicates failure, the export is not made available. Change-Id: Ibdae1aa89250a1992faaf711efd2de03264365c8 Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M src/CMakeLists.txt M src/MainNFSD/libganesha_nfsd.ver M src/MainNFSD/nfs_init.c M src/MainNFSD/nfs_main.c A src/PLUGIN/CMakeLists.txt M src/config_parsing/conf_lex.l M src/config_parsing/conf_url.c M src/config_parsing/conf_url_rados.c M src/include/conf_url.h M src/include/export_mgr.h M src/support/export_mgr.c M src/support/exports.c 12 files changed, 518 insertions(+), 10 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/97/1221497/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221497?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: Ibdae1aa89250a1992faaf711efd2de03264365c8 Gerrit-Change-Number: 1221497 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[S] Change in ...nfs-ganesha[next]: rpmbuild: don't ignore unpackaged files
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221496?usp=email ) Change subject: rpmbuild: don't ignore unpackaged files ...................................................................... rpmbuild: don't ignore unpackaged files It's just not right. Change-Id: Id4b3846c1729c12838310d2c92415d16331c6794 Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M src/nfs-ganesha.spec-in.cmake 1 file changed, 22 insertions(+), 2 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/96/1221496/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221496?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: Id4b3846c1729c12838310d2c92415d16331c6794 Gerrit-Change-Number: 1221496 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[S] Change in ...nfs-ganesha[next]: RADOS_KV: fix segfault when exiting.
by Name of user not set (GerritHub) 28 Aug '25

28 Aug '25

mwatts(a)redhat.com has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221495?usp=email ) Change subject: RADOS_KV: fix segfault when exiting. ...................................................................... RADOS_KV: fix segfault when exiting. Fix a segfault. It is bad luck to call a cleanup function in a shared object after the shared object has been unloaded. Change-Id: If86117eb1cc389a449ff404df9fbe44ceba147ed Signed-off-by: Marcus Watts <mwatts(a)redhat.com> --- M src/SAL/recovery/recovery_rados_ng.c 1 file changed, 6 insertions(+), 5 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/95/1221495/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221495?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: If86117eb1cc389a449ff404df9fbe44ceba147ed Gerrit-Change-Number: 1221495 Gerrit-PatchSet: 1 Gerrit-Owner: mwatts(a)redhat.com

1 0

[M] Change in ...nfs-ganesha[next]: Add server-side support for NFS4ERR_DELEG_REVOKED error handling.
by Suhas Athani (GerritHub) 28 Aug '25

28 Aug '25

Suhas Athani has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221433?usp=email ) Change subject: Add server-side support for NFS4ERR_DELEG_REVOKED error handling. ...................................................................... Add server-side support for NFS4ERR_DELEG_REVOKED error handling. This change implements handling of NFS4ERR_DELEG_REVOKED in the server to comply with NFSv4 protocol requirements. • Introduces a global revoked delegation list to track revoked delegation stateids and prevent their reuse. • Adds functions to add, check, and remove revoked stateids during delegation revocation and cleanup (add_to_revoked_delegations, is_stateid_revoked, remove_revoked_stateid). • Updates stateid validation to return NFS4ERR_DELEG_REVOKED immediately if the stateid is revoked. • Enhances FREE_STATEID handling to clean up revoked stateids and release resources when clients acknowledge revocation. Change-Id: I8c0fd410a6da2075c8c4e6abcdcc6d42a7b380cd Signed-off-by: Suhas Athani <Suhas.Athani(a)ibm.com> --- M src/Protocols/NFS/nfs4_op_free_stateid.c M src/SAL/nfs4_state_id.c M src/SAL/state_deleg.c M src/include/sal_data.h M src/include/sal_functions.h 5 files changed, 237 insertions(+), 0 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/33/1221433/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1221433?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I8c0fd410a6da2075c8c4e6abcdcc6d42a7b380cd Gerrit-Change-Number: 1221433 Gerrit-PatchSet: 1 Gerrit-Owner: Suhas Athani <Suhas.Athani(a)ibm.com>

1 0