[kolla-ansible][manila]Permission denied when using cephfs nfs

Boxiang Zhu bxzhu_5355 at 163.com
Mon Feb 21 13:30:13 UTC 2022




Hi gouthampravi,


Thanks for your reply. I have recheck the issue[1][2] and I found some commands. I run commands as followed:
- docker exec -it -uroot manila_share bash
- mount -t ceph 172.20.0.33:6789:/ /mnt -o name=manila,secret=<manila client key>
- chown 42429:42429 /mnt/
- umount /mnt/


At last, it resolved my issue.


[1]: https://bugs.launchpad.net/charm-manila-ganesha/+bug/1901570

[2]: https://bugzilla.redhat.com/show_bug.cgi?id=1639823




Regards

Boxiang




At 2022-02-17 11:41:34,"Goutham Pacha Ravi" <gouthampravi at gmail.com>, said:

Manila interacts with ceph using a ceph client user (this user is called “manila”by default, but is customizable with config option [1]). It’s likely that user doesn’t have permission to use the data pool that’s assigned to the underlying cephfs file system; can you check these permissions? (called “caps”)


In Train, these are the permissions the ceph client user needs: 
https://docs.openstack.org/manila/train/admin/cephfs_driver.html#authorizing-the-driver-to-communicate-with-ceph


Can you check that these permissions match in your deployment?


If they do, check the file permissions for the ceph keyring associated with the user. 


[1] 
https://github.com/openstack/manila/blob/191e8c9634d606c16ca0c1882cc01f4eb310d710/manila/share/drivers/cephfs/driver.py#L62



 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20220221/ae2fb601/attachment-0001.htm>


More information about the openstack-discuss mailing list