RHEA-2016:1247 - Product Enhancement Advisory

Topic

Updated nfs-ganesha packages that fixes several bugs and adds various
enhancements are now available for Red Hat Gluster Storage 3.1 Update 3.

Description

NFS-Ganesha is a user space file server for the NFS protocol with support
for NFSv3, v4, v4.1, pNFS. This release of Red Hat Gluster Storage
introduces High Availability (HA) of NFS servers in active-active mode.
pNFS is introduced as a technology preview feature. However, it does not
support NFSv4 delegations and NFSv4.1. Red Hat Gluster Storage libntirpc package is now unbundled from the NFS-ganesha package. In this release,
NFS-ganesha is rebased to upstream 2.3.1 stable version.

This update also fixes numerous bugs and adds various enhancements. Space
precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Gluster Storage 3.1 Technical Notes, linked to in
the References section, for information on the most significant of these
changes.

This update fixes several bugs and adds various enhancements, the most significant of which are:

• Previously, NFS-ganesha randomly choose the ports to be used while bringing up mountd, rquota and nlm services. But these ports would change with each restart of NFS-ganesha, and was difficult to configure them to be opened by firewalld or iptables. With this fix, these ports can be configured in '/etc/ganesha/ganesha.conf' file. Now mountd, nlm, and rquota services will come up with the ports listed in '/etc/ganesha/ganesha.conf' so you can configure them to open via firewalld or iptables.
• Previously, while configuring NFS-ganesha cluster, there were cases where in NFS-ganesha process on each node would come up at the same time resulting in most of them having same epoch value. As a consequence, same epoch values on all the NFS-Ganesha heads resulted in NFS server sending NFS4ERR_FHEXPIRED error instead of NFS4ERR_STALE_CLIENTID or NFS4ERR_STALE_STATEID after failover. This resulted in NFSv4 clients not able to recover locks after failover. With this fix, a new option "EPOCH_EXEC" is added to '/etc/sysconfig/ganesha' to take the path of the script (default: '/bin/true') which is used to generate epoch value. For Gluster, a new script '/usr/libexec/ganesha/generate_epoch.py' is added and will be used to generate epoch value. A new helper service 'NFS-ganesha-config' added to process the init options provided in '/etc/sysconfig/ganesha' and copy the results to '/run/sysconfig/ganesha' to be used by NFS-ganesha while starting. Now, NFS-Ganesha will have unique epoch value on each of the nodes of the cluster resulting in smooth failover.
• Red Hat Gluster Storage libntirpc package has been upgraded to upstream

version 1.3.1 and is now unbundled from the NFS-ganesha package. This upgrade provides a number of bug fixes over the previous version and the following list includes significant enhancements:

• Build and packaging improvements
• libntirpc performance improvements

All users of Red Hat Gluster Storage are advised to apply this update.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64

Fixes

• BZ - 1224250 - nfs-ganesha: cthon does not finish when failover is triggered by killing nfs-ganesha process
• BZ - 1240172 - nfs-ganesha: OOM kill of nfs-ganesha process on all nodes while executing iozone
• BZ - 1242358 - Different epoch values for each of NFS-Ganesha heads
• BZ - 1245103 - nfs-ganesha: Configure ports used by MOUNT, NLM, RQUOTA services and provide firewalld service to open them
• BZ - 1261858 - logrotate 'ganesha-gfapi.log'
• BZ - 1317764 - Rebase nfs-ganesha to upstream 2.3 stable version
• BZ - 1321544 - Rhel6 - Installing glusterfs-ganesha-3.7.9-1.el6rhs.x86_64 fails with dependency on /usr/bin/dbus-send
• BZ - 1321786 - [SELinux] volume not getting exported after setting the option ganesha.enable -RHEL7
• BZ - 1321878 - Missing ganesha.log file under /var/log with 3.7.9-1 build.
• BZ - 1323740 - [SELinux]nfs-ganesha.service status shows "failed to connect to statd" after node reboot
• BZ - 1326252 - Failed refresh config generates lot of "inode.c:1792:inode_table_destroy" messages in ganesha-gfapi.log
• BZ - 1327074 - nfs-ganesha-2.3.1-3.el6rhs.x86_64 fails to install with firewalld as dependency on RHEL 6 platform.
• BZ - 1329887 - Unexpected behavior observed when nfs-ganesha enters grace period.
• BZ - 1334760 - nfs-ganesha-2.3.1-5.el7rhgs having dependency on selinux-policy >= 0:3.13.1-70
• BZ - 1336407 - Updating nfs-ganesha gives error "Boolean rpcd_use_fusefs is not defined"
• BZ - 1336732 - [SELinux]: refresh-config fails with denial AVC related to /usr/bin/dbus-daemon
• BZ - 1343314 - Not able to create symlinks when acl is enabled on the volume.
• BZ - 1343925 - [SELinux]: kerberos mount fails with selinux denials in audit logs (el7)

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal