Re: [zones-discuss] Re: [sysadmin-discuss] NFS server in zones
Hi all, Have we decided what to do for supporting NFS server in non-global zones?? And if we are going forward with the kernel approach (instead of running user-space NFS servers), then may be the NFS developers can answer a few questions: 1) How big a project is it?? (just a rough est) 2) Where is the code for the NFS service?? Which source directory(s) is the starting point?? Correct me if I am wrong - what we need to do to let non-global zones be NFS server is to change some of the data structures in the NFS server code to per-zone data structure - similar to IP Instances: ... take all the other data and convert it from global data to fields in an instance data structure page 21: http://www.opensolaris.org/os/project/crossbow/Docs/ipinstances-sug1.pdf And, if this is not many months of work, then sounds like it can be a summer of code project, and I will write up an initial project proposal (similar to what I am going to do for lx brand on SPARC (Project BrandZ) ): http://mail.opensolaris.org/pipermail/summerofcode/2007-March/11.html Rayson On 2/14/07, Octave Orgeron [EMAIL PROTECTED] wrote: Hi Tom, Thanks for the input. I agree that it'll take a lot of involvement from the community to deliver the code. But I also think there some should a lot of collaboration with the NFS engineers to insure we don't break stuff:) I'm all for a project to be launched from the NFS or Zones community for this. I'd even be willing to help out, just have to keep in mind my programming is a little rusty:) Octave --- Tom Haynes [EMAIL PROTECTED] wrote: Octave Orgeron wrote: Hi, This has been a major complaint for many sysadmins and beta testers. I know one of my first bugs filed against the betas of Solaris 10 was the lack of NFS server functionality within zones. I've even been in the situation at work where this has been a requirement, only to have to scrap projects. Probably the most common idea for having a zone NFS server is for Jumpstart or home directories. As things stand today, it's not doable. I've even escalated this thru different channels over the past few years only to see it go no where. I'm sure there is a lot of demand for this feature for zones. I think the key requirements would be: 1. Full NFS server functionality within a zone. So things like share, /etc/dfs/dfstab, sharemgr, ZFS sharing, etc. should work in the same manner as they do in the global zone. 2. Security. Separation of NFS namespace to insure proper security between zones. This may be achieved by making the kernel NFS framework aware of the zoneid context. 3. Performance. NFS serving out of a zone should not be slower or less scalable than NFS serving from the global zone. Starting a project would be nice. But I think there should be close involvement with the NFS engineers at Sun. As for getting their attention and funding, the best we can do is show enough community interest for NFS within zones. So I'd ask all sysadmins, developers, etc. to respond to this thread to show support for fixing this. Octave, Thanks for the input on the requirements. I am a NFS engineer for Sun. I don't think we should count on getting attention and funding for Sun's NFS engineers to do this project. All of us are aware of the need, but are focused on delivering other products. I'm not saying they will not help out, I don't think you could stop them. Again, I think that this is a golden opportunity to start an OpenSolaris project in the clear and with full involvement from the community. I'm willing to provide project leadership and mentoring to external developers. I'm pretty sure that the other NFS engineers are willing to review requirements, specs, design, code, etc. But the bulk of that work will fall on the community to provide. I'm not looking to start a project which gets done entirely within Sun. Thanks, Tom ___ zones-discuss mailing list zones-discuss@opensolaris.org
[zones-discuss] Re: [sysadmin-discuss] NFS server in zones
Hi, This has been a major complaint for many sysadmins and beta testers. I know one of my first bugs filed against the betas of Solaris 10 was the lack of NFS server functionality within zones. I've even been in the situation at work where this has been a requirement, only to have to scrap projects. Probably the most common idea for having a zone NFS server is for Jumpstart or home directories. As things stand today, it's not doable. I've even escalated this thru different channels over the past few years only to see it go no where. I'm sure there is a lot of demand for this feature for zones. I think the key requirements would be: 1. Full NFS server functionality within a zone. So things like share, /etc/dfs/dfstab, sharemgr, ZFS sharing, etc. should work in the same manner as they do in the global zone. 2. Security. Separation of NFS namespace to insure proper security between zones. This may be achieved by making the kernel NFS framework aware of the zoneid context. 3. Performance. NFS serving out of a zone should not be slower or less scalable than NFS serving from the global zone. Starting a project would be nice. But I think there should be close involvement with the NFS engineers at Sun. As for getting their attention and funding, the best we can do is show enough community interest for NFS within zones. So I'd ask all sysadmins, developers, etc. to respond to this thread to show support for fixing this. --- Tom Haynes [EMAIL PROTECTED] wrote: Before I propose a project for NFS to start getting NFS servers working in zones, I'd like to find out the requirements. I've been going over internal mail threads in the NFS group and the two things that seem to stand in the way to getting NFS completely in zones are: 1) Staffing - this is not on our roadmaps. 2) Lack of requirements - we don't know what people want. I look at the first hurdle and see a golden opportunity for a real OpenSolaris project - since internal developers aren't scheduled to do this work, we can get external developers involved from the start of the project. Of course, the second hurdle really stops us from kicking off the project. I'll start the ball rolling by kicking in some thoughts that Spencer Shepler provided when I asked him about getting this project started: One of the things we have been struggling with in deciding if and how to fund a zonification of the NFS server is understanding exactly what people need/want. One simple requirement seems to be that of server consolidation. That can be handled generally with IP address/interface aliasing. But there are obviously other reasons as well that someone may want a zoneification of the NFS server. Are people trying to delegation administration? Configure a system for testing or software deployment testing or... So my suggestion would be to start a thead of discussion about what the requirements are that lead people to thinking of NFS server in a zone. The point of this exercise is to understand if that is the only or most appropriate answer? For example, we may be able to combine the admin delegation stuff that has been talked about for ZFS to things like the shareadm command and to the nfsd daemon. Is it more effective, easier, to build a delegation of administration of the NFS services than to require someone to create zones and hand over all of the administration for those zones. Maybe it is better to have things in the zone since there would be IP-identity confusion for a strict delegation method. We should define the requirements as a community and then get the project started in that community. ___ sysadmin-discuss mailing list [EMAIL PROTECTED] http://mail.opensolaris.org/mailman/listinfo/sysadmin-discuss *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Octave J. Orgeron Solaris Systems Engineer http://www.opensolaris.org/os/community/sysadmin/ http://unixconsole.blogspot.com [EMAIL PROTECTED] *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Never Miss an Email Stay connected with Yahoo! Mail on your mobile. Get started! http://mobile.yahoo.com/services?promote=mail ___ zones-discuss mailing list zones-discuss@opensolaris.org
[zones-discuss] Re: [sysadmin-discuss] NFS server in zones
Hi Tom, Thanks for the input. I agree that it'll take a lot of involvement from the community to deliver the code. But I also think there some should a lot of collaboration with the NFS engineers to insure we don't break stuff:) I'm all for a project to be launched from the NFS or Zones community for this. I'd even be willing to help out, just have to keep in mind my programming is a little rusty:) Octave --- Tom Haynes [EMAIL PROTECTED] wrote: Octave Orgeron wrote: Hi, This has been a major complaint for many sysadmins and beta testers. I know one of my first bugs filed against the betas of Solaris 10 was the lack of NFS server functionality within zones. I've even been in the situation at work where this has been a requirement, only to have to scrap projects. Probably the most common idea for having a zone NFS server is for Jumpstart or home directories. As things stand today, it's not doable. I've even escalated this thru different channels over the past few years only to see it go no where. I'm sure there is a lot of demand for this feature for zones. I think the key requirements would be: 1. Full NFS server functionality within a zone. So things like share, /etc/dfs/dfstab, sharemgr, ZFS sharing, etc. should work in the same manner as they do in the global zone. 2. Security. Separation of NFS namespace to insure proper security between zones. This may be achieved by making the kernel NFS framework aware of the zoneid context. 3. Performance. NFS serving out of a zone should not be slower or less scalable than NFS serving from the global zone. Starting a project would be nice. But I think there should be close involvement with the NFS engineers at Sun. As for getting their attention and funding, the best we can do is show enough community interest for NFS within zones. So I'd ask all sysadmins, developers, etc. to respond to this thread to show support for fixing this. Octave, Thanks for the input on the requirements. I am a NFS engineer for Sun. I don't think we should count on getting attention and funding for Sun's NFS engineers to do this project. All of us are aware of the need, but are focused on delivering other products. I'm not saying they will not help out, I don't think you could stop them. Again, I think that this is a golden opportunity to start an OpenSolaris project in the clear and with full involvement from the community. I'm willing to provide project leadership and mentoring to external developers. I'm pretty sure that the other NFS engineers are willing to review requirements, specs, design, code, etc. But the bulk of that work will fall on the community to provide. I'm not looking to start a project which gets done entirely within Sun. Thanks, Tom *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Octave J. Orgeron Solaris Systems Engineer http://www.opensolaris.org/os/community/sysadmin/ http://unixconsole.blogspot.com [EMAIL PROTECTED] *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Never Miss an Email Stay connected with Yahoo! Mail on your mobile. Get started! http://mobile.yahoo.com/services?promote=mail *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Octave J. Orgeron Solaris Systems Engineer http://www.opensolaris.org/os/community/sysadmin/ http://unixconsole.blogspot.com [EMAIL PROTECTED] *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Don't get soaked. Take a quick peak at the forecast with the Yahoo! Search weather shortcut. http://tools.search.yahoo.com/shortcuts/#loc_weather ___ zones-discuss mailing list zones-discuss@opensolaris.org
