Oracle ZFS Storage Appliance driver

The Oracle ZFS Storage Appliance driver, version 1.0.0, enables the Oracle ZFS Storage Appliance (ZFSSA) to be used seamlessly as a shared storage resource for the OpenStack File System service (manila). The driver provides the ability to create and manage NFS and CIFS shares on the appliance, allowing virtual machines to access the shares simultaneously and securely.

Requirements

Oracle ZFS Storage Appliance Software version 2013.1.2.0 or later.

Supported operations

• Create NFS and CIFS shares.

• Delete NFS and CIFS shares.

• Allow or deny IP access to NFS shares.

• Create snapshots of a share.

• Delete snapshots of a share.

• Create share from snapshot.

Restrictions

• Access to CIFS shares are open and cannot be changed from manila.

• Version 1.0.0 of the driver only supports Single SVM networking mode.

Appliance configuration

1. Enable RESTful service on the ZFSSA Storage Appliance.

2. Create a new user on the appliance with the following authorizations:

   scope=stmf - allow_configure=true
   scope=nas - allow_clone=true, allow_createProject=true, allow_createShare=true, allow_changeSpaceProps=true, allow_changeGeneralProps=true, allow_destroy=true, allow_rollback=true, allow_takeSnap=true
   

   You can create a role with authorizations as follows:

   zfssa:> configuration roles
   zfssa:configuration roles> role OpenStackRole
   zfssa:configuration roles OpenStackRole (uncommitted)> set description="OpenStack Manila Driver"
   zfssa:configuration roles OpenStackRole (uncommitted)> commit
   zfssa:configuration roles> select OpenStackRole
   zfssa:configuration roles OpenStackRole> authorizations create
   zfssa:configuration roles OpenStackRole auth (uncommitted)> set scope=stmf
   zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_configure=true
   zfssa:configuration roles OpenStackRole auth (uncommitted)> commit
   

   You can create a user with a specific role as follows:

   zfssa:> configuration users
   zfssa:configuration users> user cinder
   zfssa:configuration users cinder (uncommitted)> set fullname="OpenStack Manila Driver"
   zfssa:configuration users cinder (uncommitted)> set initial_password=12345
   zfssa:configuration users cinder (uncommitted)> commit
   zfssa:configuration users> select cinder set roles=OpenStackRole
   

3. Create a storage pool.

   An existing pool can also be used if required. You can create a pool as follows:

   zfssa:> configuration storage
   zfssa:configuration storage> config pool
   zfssa:configuration storage verify> set data=2
   zfssa:configuration storage verify> done
   zfssa:configuration storage config> done
   

4. Create a new project.

   You can create a project as follows:

   zfssa:> shares
   zfssa:shares> project proj
   zfssa:shares proj (uncommitted)> commit
   

5. Create a new or use an existing data IP address.

   You can create an interface as follows:

   zfssa:> configuration net interfaces ip
   zfssa:configuration net interfaces ip (uncommitted)> set v4addrs=127.0.0.1/24
                        v4addrs = 127.0.0.1/24 (uncommitted)
   zfssa:configuration net interfaces ip (uncommitted)> set links=vnic1
                          links = vnic1 (uncommitted)
   zfssa:configuration net interfaces ip (uncommitted)> set admin=false
                          admin = false (uncommitted)
   zfssa:configuration net interfaces ip (uncommitted)> commit
   

   It is required that both interfaces used for data and management are configured properly. The data interface must be different from the management interface.

6. Configure the cluster.

   If a cluster is used as the manila storage resource, the following verifications are required:

   • Verify that both the newly created pool and the network interface are of type singleton and are not locked to the current controller. This approach ensures that the pool and the interface used for data always belong to the active controller, regardless of the current state of the cluster.

   • Verify that the management IP, data IP and storage pool belong to the same head.

   Note

   A short service interruption occurs during failback or takeover, but once the process is complete, manila should be able to access the pool through the data IP.

Driver options

The Oracle ZFSSA driver supports these options:

Description of ZFSSA share driver configuration options

Configuration option = Default value	Description
[DEFAULT]
zfssa_auth_password = None	(String) ZFSSA management authorized userpassword.
zfssa_auth_user = None	(String) ZFSSA management authorized username.
zfssa_data_ip = None	(String) IP address for data.
zfssa_host = None	(String) ZFSSA management IP address.
zfssa_manage_policy = loose	(String) Driver policy for share manage. A strict policy checks for a schema named manila_managed, and makes sure its value is true. A loose policy does not check for the schema.
zfssa_nas_checksum = fletcher4	(String) Controls checksum used for data blocks.
zfssa_nas_compression = off	(String) Data compression-off, lzjb, gzip-2, gzip, gzip-9.
zfssa_nas_logbias = latency	(String) Controls behavior when servicing synchronous writes.
zfssa_nas_mountpoint =	(String) Location of project in ZFS/SA.
zfssa_nas_quota_snap = true	(String) Controls whether a share quota includes snapshot.
zfssa_nas_rstchown = true	(String) Controls whether file ownership can be changed.
zfssa_nas_vscan = false	(String) Controls whether the share is scanned for viruses.
zfssa_pool = None	(String) ZFSSA storage pool name.
zfssa_project = None	(String) ZFSSA project name.
zfssa_rest_timeout = None	(String) REST connection timeout (in seconds).