Add Support for Root Squash Equivalent to Restrict Root User Privileges

[coldbloodx]

Hey beegfs developpers:
I had a question about beegfs.

For security reasons, we want to restrict root users from reading and writing to beegfs, and a switch like root squash for NFS filesystems would meet our requirements.

We do not like to export beegfs FS through NFS, because that will cause a performance drop and can not meet our requirements.

After digging through the official documentation, I don't think I've found the option :).

Now I'd like to know if there is an option in beegfs do same thing like "root_squash" in NFS?
if answer is yes, can you point me the document URL?
If not, is there anything else that can be used instead?

Thanks in advance.

[coldbloodx]

any comments on this one?

[iamjoemccormick]

Hi @coldbloodx, unfortunately BeeGFS does not have an equivalent to the NFS root squash option. However I'll bring this up with the team as a potential enhancement request as I agree it would be helpful for scenarios like yours.

[coldbloodx]

Hi @coldbloodx, unfortunately BeeGFS does not have an equivalent to the NFS root squash option. However I'll bring this up with the team as a potential enhancement request as I agree it would be helpful for scenarios like yours.

Thanks bro, will continue to keep an eye on this :).

[pureexe]

I hope BeeGFS has an equivalent of root squash.

My cluster has a bring your own device policy that allows user to connect a machine with a GPU that they bring themself.

Currently i have to do an NFS share instead.