Hi John,
Any further update on this.
Regards
Prabu GJ
---- On Thu, 28 Jul 2016 16:05:00 +0530 gjprabu
<[email protected]>wrote ----
Hi John,
Thanks for your reply, Its a normal docker container can see the mount
information like /dev/sda... but this cause ip is exposed and it may security
reason should avoid ip address. As of now we will try to change hostname
instead of monitor ip address but is there any way to prevent to see monitors
ip in containers .
Regards
Prabu GJ
---- On Wed, 20 Jul 2016 15:32:48 +0530 John Spray
<[email protected]>wrote ----
_______________________________________________
ceph-users mailing list
[email protected]
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
On Wed, Jul 20, 2016 at 8:33 AM, gjprabu <[email protected]> wrote:
>
> Hi Team,
>
> We are using chepfs file systems to mount client machines, here
> while mount we should provide monitoring ip address, is there any option
to
> hide monitoring ips address in the mounted partition. We are using
container
> in all ceph clients and which all able see monitoring ip's, this could be
a
> security issue for us. Kindly let us know is there any solution on this.
Hmm, so you have a situation where the containers are prevented from
actually communicating with the monitor IPs, but the cephfs mounts are
exposed to the containers in a way that lets them see them when they
run `mount`?
I don't think we've thought about this case before. Is it normal that
when you have e.g. a docker container with a volume attached, the
container can see the mount information for the filesystem that the
volume lives on?
John
> Regards
> Prabu GJ
>
> _______________________________________________
> ceph-users mailing list
> [email protected]
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
_______________________________________________
ceph-users mailing list
[email protected]
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
