Re: subvols and parents - how?

2015-12-12 Thread Duncan
Christoph Anton Mitterer posted on Sat, 12 Dec 2015 03:32:57 +0100 as excerpted: > [B]etter said I largely rewrote: > https://btrfs.wiki.kernel.org/index.php/SysadminGuide#Subvolumes > which I think should rather be its own wiki article. > > One of the devs/experts... please double check it and

Re: subvols and parents - how?

2015-12-12 Thread Christoph Anton Mitterer
On Wed, 2015-12-09 at 10:53 +, Duncan wrote: > If you use the recipe (subvol create, cp with reflink) it suggests > there, > you'll end up with the reflinked copy in a subvol. > > You can then mount that subvol over top of the existing dir, and > *new* > file opens will access the new

Re: subvols and parents - how?

2015-12-11 Thread Christoph Anton Mitterer
On Sat, 2015-12-12 at 03:32 +0100, Christoph Anton Mitterer wrote: > What's still missing now, IMHO, is: > - a guide when one should make subvole (e.g. keeping things on the > root > fs together, unless it's separate like /var/www is usually, but > /var/lib typically "corresponds" to a state of

Re: subvols and parents - how?

2015-12-10 Thread Austin S Hemmelgarn
On 2015-12-09 22:56, Duncan wrote: > Austin S Hemmelgarn posted on Wed, 09 Dec 2015 14:04:06 -0500 as > excerpted: > >> Agreed. It's not too bad fixing a Gentoo system (as long as >> /var/lib/portage/world is still correct, you can just nuke the installed >> package database and emerge world,

Re: subvols and parents - how?

2015-12-09 Thread Duncan
Christoph Anton Mitterer posted on Wed, 09 Dec 2015 05:36:37 +0100 as excerpted: > On Fri, 2015-11-27 at 01:02 +, Duncan wrote: > [snip snap] >> #2 The point I was trying to make, now, to mount it you'll mount not a >> native nested subvol, and not a directly available sibling >>

Re: subvols and parents - how?

2015-12-09 Thread Duncan
Christoph Anton Mitterer posted on Wed, 09 Dec 2015 05:38:02 +0100 as excerpted: > On Fri, 2015-11-27 at 02:02 +, Duncan wrote: >> Consider a setuid-root binary with a recently publicized but patched on >> your system vuln.  But if you have root snapshots from before the patch >> and those

Re: subvols and parents - how?

2015-12-09 Thread Axel Burri
On 2015-11-27 03:02, Duncan wrote: >>> Then there's the security angle to consider. With the (basically, >>> possibly modified as I suggested) flat layout, mounting something >>> doesn't automatically give people in-tree access to nested subvolumes >>> (subject to normal file permissions, of

Re: subvols and parents - how?

2015-12-09 Thread Austin S Hemmelgarn
On 2015-12-09 05:53, Duncan wrote: > Christoph Anton Mitterer posted on Wed, 09 Dec 2015 05:36:37 +0100 as > excerpted: > >> On Fri, 2015-11-27 at 01:02 +, Duncan wrote: >> [snip snap] >>> #2 The point I was trying to make, now, to mount it you'll mount not a >>> native nested subvol, and not

Re: subvols and parents - how?

2015-12-08 Thread Christoph Anton Mitterer
On Fri, 2015-11-27 at 02:02 +, Duncan wrote: > Uhm, I don't get the big security advantage here... whether nested > > or > > manually mounted to a subdir,... if the permissions are insecure > > I'll > > have a problem... if they're secure, than not. > Consider a setuid-root binary with a

Re: subvols and parents - how?

2015-12-08 Thread Christoph Anton Mitterer
On Fri, 2015-11-27 at 01:02 +, Duncan wrote: [snip snap] > #1 could be a pain to setup if you weren't actually mounting it > previously, just relying on the nested tree, AND... > > #2 The point I was trying to make, now, to mount it you'll mount not > a > native nested subvol, and not a

Re: subvols and parents - how?

2015-11-26 Thread Duncan
Christoph Anton Mitterer posted on Tue, 24 Nov 2015 22:25:50 +0100 as excerpted: >> Suppose you only want to rollback /, because some update screwed you >> up, >> but not /home, which is fine.  If /home is a nested subvolume, then >> you're now mounting the nested home subvolume from some other

Re: subvols and parents - how?

2015-11-26 Thread Duncan
Christoph Anton Mitterer posted on Tue, 24 Nov 2015 22:25:50 +0100 as excerpted: >> Then there's the security angle to consider.  With the (basically, >> possibly modified as I suggested) flat layout, mounting something >> doesn't automatically give people in-tree access to nested subvolumes >>

Re: subvols and parents - how?

2015-11-24 Thread Christoph Anton Mitterer
On Tue, 2015-11-24 at 21:55 +, Hugo Mills wrote: >    In practice, new content is checked by a number of people when > it's > put in, so the case of someone putting random poorly-thought-out crap > in the wiki isn't particularly likely to happen. Well... it may work in 99% cases... but there

Re: subvols and parents - how?

2015-11-24 Thread Christoph Anton Mitterer
On Tue, 2015-11-24 at 23:30 +, Hugo Mills wrote: >    Yes, that makes sense. Feel free to shamelessly use my idea (as well as the one to call btrfs' RAID1 replica2 or something else) :-O >    With a recent mv root@heisenberg:/mnt# mv --version mv (GNU coreutils) 8.23 => not recent enough...

Re: subvols and parents - how?

2015-11-24 Thread Hugo Mills
On Wed, Nov 25, 2015 at 12:20:09AM +0100, Christoph Anton Mitterer wrote: > On Tue, 2015-11-24 at 21:55 +, Hugo Mills wrote: > >    In practice, new content is checked by a number of people when > > it's > > put in, so the case of someone putting random poorly-thought-out crap > > in the wiki

Re: subvols and parents - how?

2015-11-24 Thread Christoph Anton Mitterer
On Tue, 2015-11-24 at 08:29 +, Duncan wrote: > OK, found it on the wiki.  It wasn't under use-cases, where I > initially > thought to look, but under sysadmin guide.  Specifically, see section > 4.2, managing snapshots, but I'd suggest reading the entire > subvolumes > discussion, section 4,

Re: subvols and parents - how?

2015-11-24 Thread Hugo Mills
On Tue, Nov 24, 2015 at 10:25:50PM +0100, Christoph Anton Mitterer wrote: > On Tue, 2015-11-24 at 08:29 +, Duncan wrote: > > OK, found it on the wiki.  It wasn't under use-cases, where I > > initially > > thought to look, but under sysadmin guide.  Specifically, see section > > 4.2, managing

Re: subvols and parents - how?

2015-11-24 Thread Duncan
Christoph Anton Mitterer posted on Tue, 24 Nov 2015 05:56:00 +0100 as excerpted: > When I use subvolumes than these have always a parent subvolume (except > ID5), so I can basically decide between two ways: > > a) make child subvolumes, e.g. > 5 > | > +-root   (=subvol, mountpoint /) >   +-boot/

subvols and parents - how?

2015-11-23 Thread Christoph Anton Mitterer
Hey. I'd have a, mainly administrative, question. When I use subvolumes than these have always a parent subvolume (except ID5), so I can basically decide between two ways: a) make child subvolumes, e.g. 5 | +-root   (=subvol, mountpoint /)   +-boot/   +-root/   +-lib/   +-home/ (=subvolume) and