ACL support via NFS

Hi,
I need to copy much data from a Sarge machine to an Etch one on the same
LAN, preserving all permissions and ACLs.
I tried using NFS, but I cannot preserve ACLs: when mounting the source
dir on the destination machine, the destination machine does not see the
ACLs on source files, so of course it doesn't copy them. Instead, when
mounting the destination dir on the source machine, I get an "operation
not supported" error on each copy (which is the same I get if I try a
setfacl command inside the mounted dir).

Does NFS support ACLs somehow?
Do I have any alternatives, besides compressing all content and
transferring the archives? We're talking about 200GB of data, so this
would not be a great solution...

Thanks.

--
Ciao,
Marco.

--

0

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

ACL support via NFS

On Fri, Mar 09, 2007 at 01:16:02PM +0000, Marco De Vitis wrote:
>Does NFS support ACLs somehow?

Hm, from my kernel config (2.6.20.1):

CONFIG_NFS_V3_ACL:
Implement the NFSv3 ACL protocol extension for manipulating POSIX
Access Control Lists. The server should also be compiled with
the NFSv3 ACL protocol extension; see the CONFIG_NFSD_V3_ACL option.

So it may work with current kernels.

>Do I have any alternatives, besides compressing all content and
>transferring the archives? We're talking about 200GB of data, so this --

You could copy the archive on the fly, like

tar cpSf - . | ssh 'cd ; tar xpSf - '

I don’t know, if tar supports ACLs.

Shade and sweet water!

Stephan

--
| Stephan Seitz E-Mail: |
| PGP Public Keys: http://fsing.rootsland.net/~stse/pgp.html |

ACL support via NFS

On 09/03/2007 15:20, Stephan Seitz wrote:

> Hm, from my kernel config (2.6.20.1):
>
> CONFIG_NFS_V3_ACL:
> Implement the NFSv3 ACL protocol extension for manipulating POSIX
> Access Control Lists. The server should also be compiled with
> the NFSv3 ACL protocol extension; see the CONFIG_NFSD_V3_ACL option.
>
> So it may work with current kernels.

Indeed, it looks active in the config for Etch's 2.6.18-4-686 kernel I'm
using. But I can't see how to make it work.

> You could copy the archive on the fly, like
>
> tar cpSf - . | ssh 'cd ; tar xpSf - '
>
> I don’t know, if tar supports ACLs.

Unfortunately, it doesn't :(.

I also tried rsync, but again no ACLs were preserved.

--
Ciao,
Marco.

--

ACL support via NFS

Marco De Vitis wrote:
...
>> tar cpSf - . | ssh 'cd ; tar xpSf - '
>>
>> I don’t know, if tar supports ACLs.
>
> Unfortunately, it doesn't :(.
there is star that should support ACL's with one version of the tar
format (as there are actullay severall variants of it).

yours
albert

--

ACL support via NFS

On 09/03/2007 16:40, Albert Dengg wrote:

> there is star that should support ACL's with one version of the tar
> format (as there are actullay severall variants of it).

Uhm, thanks I can try, although it seems to have a syntax somehow
different from tar and I'm a bit confused at the moment. I'm not sure
how can I pipe its output via ssh instead of creating a file...

--
Ciao,
Marco.

--

ACL support via NFS

Am 2007-03-09 15:14:49, schrieb Stephan Seitz:
> Hm, from my kernel config (2.6.20.1):
>
> CONFIG_NFS_V3_ACL:
> Implement the NFSv3 ACL protocol extension for manipulating POSIX
> Access Control Lists. The server should also be compiled with
> the NFSv3 ACL protocol extension; see the CONFIG_NFSD_V3_ACL option.
>
> So it may work with current kernels.

Partialy! -- I have problems with NFS version 3 and it was
needed to switch to version 4 which works much better.

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant

--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSN LinuxMichi
0033/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)

ACL support via NFS

Marco De Vitis wrote:
> I need to copy much data from a Sarge machine to an Etch one on
> the same LAN, preserving all permissions and ACLs.

Why aren't you trying rsync?

>From man rsync:
-A, --acls preserve ACLs (implies -p) [non-standard]

HTH,
Johannes

--

ACL support via NFS

On 09/03/2007 15:50, Johannes Wiedersich wrote:

> Why aren't you trying rsync?
>
>>From man rsync:
> -A, --acls preserve ACLs (implies -p) [non-standard]

Indeed, in my previous post (which still has not reached gmane) I wrote
that I tried rsync and it did not preserve ACLs... but I then looked at
the man pages and discovered that option; the problem is that it's a new
option, and the Sarge rsync does not support it :-/. It has to be
supported on both sides to work.
I'll now see if I can make it by installing the more recent rsync from
backports, it's just one version behind the Etch one.

--
Ciao,
Marco.

--

ACL support via NFS

On 09/03/2007 17:00, Marco De Vitis wrote:

> I'll now see if I can make it by installing the more recent rsync from
> backports, it's just one version behind the Etch one.

Sigh! Also the 2.6.8 version from backports does not support ACLs.
I then built and installed 2.6.9 on Sarge from sources (although the
changelog between 2.6.8 and 2.6.9 only shows diffs regarding ACLs for
developers), and... it still does not support ACLs! Now I'm really
puzzled, as Etch has the same version and it supports ACLs.

--
Ciao,
Marco.

--

ACL support via NFS

Marco De Vitis wrote:
> On 09/03/2007 17:00, Marco De Vitis wrote:
>
>> I'll now see if I can make it by installing the more recent rsync from
>> backports, it's just one version behind the Etch one.
>
> Sigh! Also the 2.6.8 version from backports does not support ACLs.
> I then built and installed 2.6.9 on Sarge from sources (although the
> changelog between 2.6.8 and 2.6.9 only shows diffs regarding ACLs for
> developers), and... it still does not support ACLs! Now I'm really
> puzzled, as Etch has the same version and it supports ACLs.
on my sid system, /usr/share/doc/rsync/changelog.Debian.gz states
"* Now includes the ACL patch" for 2.6.9-1, so maybe it a debian
modification?

yours
albert

--

ACL support via NFS

On 09/03/2007 18:10, Florian Kulzer wrote:

> I don't know any details, but from a quick grep through the Debian
> changelog in Sid I get the impression that there might be an additional
> ACL patch that you have to apply if you compile yourself. Here are the

Uh... I'm afraid you (both) are right.

> I hope this helps. (You did not mention if you built from the Debian or
> from the upstream sources. I would expect that the newest Debian
> sources have the second patch applied already.)

I built from the latest official stable rsync sources from the official
rsync home page, if this means "upstream".
Could I build and install the Debian Etch/Sid sources on Sarge? How
should I proceed?

Anyway, in the meantime I came up with a rather obvious solutions I wish
I had thought about hours ago: I can copy all data without ACLs via NFS
or rsync or else, and then backup the ACLs alone using getfacl and setfacl:

getfacl -R >aclbackup (on the source machine)
setfacl --restore=aclbackup (on the destination machine)

--
Ciao,
Marco.

--

ACL support via NFS

Am 2007-03-09 16:17:30, schrieb Marco De Vitis:
> Sigh! Also the 2.6.8 version from backports does not support ACLs.
> I then built and installed 2.6.9 on Sarge from sources (although the
> changelog between 2.6.8 and 2.6.9 only shows diffs regarding ACLs for
> developers), and... it still does not support ACLs! Now I'm really
> puzzled, as Etch has the same version and it supports ACLs.

Do you have tried to backport the ORIGINAL Debian Source
2.6.9-2 to Sarge? -- I have tried it and it works.

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant

--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSN LinuxMichi
0033/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)

ACL support via NFS

On 13/03/2007 18:00, Michelle Konzack wrote:

> Do you have tried to backport the ORIGINAL Debian Source
> 2.6.9-2 to Sarge? -- I have tried it and it works.

No I didn't. Thanks for the suggestion but in the meantime I have copied
what I needed with plain cp over the default NFS and then copied over
the ACLs with getfacl/setfacl. Moreover, I later remembered that some
files also had extended attributes, so I also used getfattr/setfattr; I
believe that even the Etch rsync 2.6.9-2 does not support them so maybe
it was the only way to get around it.

--
Ciao,
Marco.

--

ACL support via NFS

On 09/03/2007 22:20, Florian Kulzer wrote:

> to your /etc/apt/sources.list. Furthermore, there are Debian tools which
> automate the build process, see for example here:
>
> http://wooledge.org/~greg/sidfaq.html#11

Thanks, I tried it, but I got in a typical dependency nightmare: the deb
package I created this way for rsync required lsb-base version 3, while
Sarge still has v2. Somehow I couldn't install lsb-base 3, neither from
backports (only part of the v3 lsb packages appeared in aptitude), nor
from the Etch source like I did for rsync, because "Build-Depends
dependency for lsb cannot be satisfied because no available versions of
package debhelper can satisfy version requirements".

I suppose I'll have to settle with the getfacl/setfacl method...

--
Ciao,
Marco.

--

ACL support via NFS

Am 2007-03-09 13:16:02, schrieb Marco De Vitis:
> Does NFS support ACLs somehow?

Yes, in a recent kernel with NFS4 support and
in the mount options you must use "vers=4".

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant

--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSN LinuxMichi
0033/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)

Syndicate content