[Twg] [Lustre-devel] your opinion about testing
Christopher J. Morrone
morrone2 at llnl.gov
Mon Apr 30 20:58:45 UTC 2012
On 04/30/2012 01:41 PM, Nathan Rutman wrote:
> 3. Remote operations via lctl messages.
> The tests frequently fail to work on many clusters due to passwordless ssh requirements. Instead, remote commands / function calls should be sent to other Lustre nodes via a new LNET command, similar to 'lctl ping', that allows arbitrary data to be sent. A "testing upcall" procedure would be registered on the remote node and would receive the messages. Obviously this could be a more broadly useful mechanism. Due to security issues some sites may chose not to register an upcall. A response mechanism is also required.
It is not immediately clear how this fixes anything. Such a facility
built into lnet needs to have exactly the same configuration issues as
ssh, munge, or whatever. If it DOESN'T have the same issues, then it
sounds like it would be a very serious security risk.
Such a feature needs to at least be off by default and only enabled by a
human deciding that such a remote-access feature is acceptable.
Chris
More information about the Twg
mailing list