[gpfsug-discuss] Metadata space usage NFS4 vs POSIX ACL

[Michal Zacek]

Hello,

we decided to convert NFS4 acl to POSIX (we need share same data
between  SMB, NFS and GPFS clients), so I created script to convert
NFS4 to posix ACL. It is very simple, first I do "chmod -R 770 DIR" and
then "setfacl -R ..... DIR".  I was surprised that conversion to posix
acl has taken more then 2TB of metadata space.There is about one hundred
million files at GPFS filesystem. Is this expected behavior?

Thanks,
Michal

Example of NFS4 acl:

#NFSv4 ACL
#owner:root
#group:root
special:owner@:rwx-:allow
  (X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL  (X)READ_ATTR  (X)READ_NAMED
  (-)DELETE    (X)DELETE_CHILD (-)CHOWN        (X)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED

special:group@:----:allow
  (-)READ/LIST (-)WRITE/CREATE (-)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL  (X)READ_ATTR  (X)READ_NAMED
  (-)DELETE    (-)DELETE_CHILD (-)CHOWN        (-)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (-)WRITE_NAMED

special:everyone@:----:allow
  (-)READ/LIST (-)WRITE/CREATE (-)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL  (X)READ_ATTR  (X)READ_NAMED
  (-)DELETE    (-)DELETE_CHILD (-)CHOWN        (-)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (-)WRITE_NAMED

group:ag_cud_96_lab:rwx-:allow:FileInherit:DirInherit
  (X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL  (X)READ_ATTR  (X)READ_NAMED
  (-)DELETE    (X)DELETE_CHILD (-)CHOWN        (X)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED

group:ag_cud_96_lab_ro:r-x-:allow:FileInherit:DirInherit
  (X)READ/LIST (-)WRITE/CREATE (-)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL  (X)READ_ATTR  (X)READ_NAMED
  (-)DELETE    (-)DELETE_CHILD (-)CHOWN        (X)EXEC/SEARCH
(-)WRITE_ACL (X)WRITE_ATTR (-)WRITE_NAMED


converted to posix acl:

# owner: root
# group: root
user::rwx
group::rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:mask::rwx
default:other::---
group:ag_cud_96_lab:rwx
default:group:ag_cud_96_lab:rwx
group:ag_cud_96_lab_ro:r-x
default:group:ag_cud_96_lab_ro:r-x
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20190406/fb3ced96/attachment.htm>