On 4/5/2023 11:26 AM, Atkinson, Sam via openzfs-developer wrote:
* Implement zfs native ACL support
<https://github.com/openzfs/zfs/pull/9709>
This was me; unfortunately I was working on it as a fun side project and
life caught up with me and I no longer had the time. I went ahead and
closed it as it is obsolete.
* (truenas fork) Implement NFSv41 ACLs through xattr
<https://github.com/truenas/zfs/pull/10>
Then the truenas guys followed up on my unfinished work, improved it,
and completed it :), thanks much to them.
> * WIP: Native NFSv4-style ZFS ACL support for Linux
> <https://github.com/openzfs/zfs/pull/13186>
Finally, this is the current pull request to merge their completed
implementation from truenas into openzfs. I'm not sure what the current
status is, looks like it's been a while since it was last updated.
eyes/hands, myself and some other folks are interested in offering our
time to help get it over the line.
I would suggest you inquire on PR#13186 to see if there are any action
items that could be assisted with.
On the Linux side, my understanding is that the Linux community has been
apprehensive to
merge changes related to NFSv4 ACL support.
My (unofficial) understanding of the linux kernel developers policy is
that they will not accept any commits for functionality that is not used
by an in-kernel module or component. As zfs is not and presumably never
will be an official in-kernel component, any changes specifically to
improve or enhance it will not be accepted upstream. For example, once
zfs nfsv4 acl support is complete, it would be nice to be able to export
them via NFS. However, the current linux NFS server does not support
exporting actual nfsv4 ACLs, only mangling POSIX file system ACLs.
Adding support to it for nfsv4 filesystem ACLs would not be accepted if
it were only for the benefit of zfs. However, there is a possible
workaround, at least for that. The NFS server supports re-exporting an
NFS client mount. If somebody contributed a change allowing nfsv4 ACLs
present on a client NFS mount to be re-exported via the NFS server, that
would likely be accepted, and could be made generic enough to magically
just work with zfs as well :).
I'm not sure as to the details of the other kernel patches mentioned in
the pull request and whether or not there is any chance of getting them
upstream.
------------------------------------------
openzfs: openzfs-developer
Permalink:
https://openzfs.topicbox.com/groups/developer/T1a52d42d5cd336e8-M844b30c64823123559921c21
Delivery options: https://openzfs.topicbox.com/groups/developer/subscription
