Bug 1597798

Summary: 'mv' of directory on encrypted volume fails
Product: [Community] GlusterFS Reporter: chrisl
Component: encryption-xlatorAssignee: bugs <bugs>
Status: CLOSED CANTFIX QA Contact:
Severity: high Docs Contact:
Priority: medium    
Version: mainlineCC: atumball, bugs, vbellur
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-06-18 08:39:18 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description chrisl 2018-07-03 15:57:31 UTC
Description of problem:

On a mounted encrypted glusterfs volume I am unable to 'mv' a directory although if I turn off encryption on that same volume then the operation works as expected.  Operation also works when performed on the glusterfs server itself but not on the client mount.

How reproducible:

  Easily reproducible

Steps to Reproduce:
  1.  mount encrypted volume,  mount -t glusterfs 9.x.x.x:/mv-test /test
  2.  cd /test
  3.  mkdir test1
  4.  mv test1 test2


Actual results:

  test1 has been renamed to test2

Expected results:

  mv: cannot move ‘test1’ to ‘test2’: Is a directory

Additional info:

  Please contact me if you need more information or if there is additional testing I can perform for  you.  thanks :)

Comment 1 Shyamsundar 2018-10-23 14:54:16 UTC
Release 3.12 has been EOLd and this bug was still found to be in the NEW state, hence moving the version to mainline, to triage the same and take appropriate actions.

Comment 3 Amar Tumballi 2019-06-18 08:39:18 UTC
Hi Chris,

With glusterfs-6.0, we have removed encryption feature of glusterfs, and hence this bug can't be worked on further. Hence we will be closing the bug with CANTFIX/WONTFIX.

Please note that you can encrypt the protocol layer with tls, but volume encryption is not supported any more, and we recommend one to secure at rest data using features like dmcrypt etc.