Skip to content

Latest commit

 

History

History
198 lines (119 loc) · 6.74 KB

zfs-overview.md

File metadata and controls

198 lines (119 loc) · 6.74 KB

ZFS overview

Why

We use a lot ZFS for our data for it's reliability and incredible capabilities. The most important feature is data synchronization through snapshots. Clone also enables to easily have same data as production for tests.

Learning resources

To learn about ZFS, see the onboarding made by Christian

See also OpenZFS official documentation and Proxmox ZFS documentation

Tutorial about ZFS snapshots and clone: https://ubuntu.com/tutorials/using-zfs-snapshots-clones#1-overview

A good cheat-sheet: https://blog.mikesulsenti.com/zfs-cheat-sheet-and-guide/

Some useful commands

  • zpool status to see eventual errors

  • zpool list -v to see all device

    Note: there is a quirk with ALLOC which is different for mirror pools and raidz pools. On the first it's allocated space to datasets, on the second it's used space.

  • zfs list -r to get all datasets and their mountpoints 3. zpool list -v list all devices

  • zpool iostat to see stats about read / write. zpool iostat -vl 5 is particularly useful.

  • zpool history list all operations done on a pool

  • zpool list -o name,size,usedbysnapshots,allocated see space allocated (equivalent to df)

    Note: df on a dataset does not really work because free space is shared between the datasets. You can still see datasets usage by using:

    zfs list -o zfs list -o name,used,usedbydataset,usedbysnapshots,available -r <pool_name>
  • zdb is also worth knowing (zfd -s for example)

Proxmox

Proxmox uses ZFS to replicate containers and VMs between servers. It also use it to backup data.

Using sanoid

We use sanoid / syncoid to sync ZFS datasets between servers (also to back them up).

See sanoid

How to NFS mount a zfs dataset

ZFS directly integrate to NFS server.

To have a dataset shared in NFS, you have to set sharenf property to allowed addresses and other options.

Example:

Very important: always filter on a internal sub network, otherwise your Dataset is exposed to the internet !!!

Beware that all descendant inherit the property and will also be shared.

How to replace a disk in zpool

To replace a disk in a zpool.

  • Get a list of devices using zpool status <pool_name>

  • Put the disk offline: zpoool <pool_name> offline <device_name> (eg zpool rpool offline sdf)

  • Replace the disk physically

  • Ask zpool to replace the drive: zpool <pool_name> replace /dev/<device_name> (eg zpool rpool replace /dev/sdf)

  • verify disk is back and being resilvered:

    zpool status <pool_name>
    …
     state: DEGRADED
    status: One or more devices is currently being resilvered.  The pool will
            continue to function, possibly in a degraded state.
    action: Wait for the resilver to complete.
      scan: resilver in progress since …
    …
                replacing-5  DEGRADED     0     0     0
                old        OFFLINE      0     0     0
                sdf        ONLINE       0     0     0  (resilvering)
  • after resilver finishes, you can eventually run a scrub: zpool scrub <pool_name>

How to Sync ZFS datasets

To Sync ZFS you just take snapshots on the source at specific intervals (we use cron jobs). You then use zfs-send an zfs-recv through ssh to sync the distant server (send snapshots).

Doing it automatically

We normally do it using sanoid and syncoid

Proxmox might also do it as part of corosync to replicate containers across cluster.

Doing it manually

zfs send <previous-snap> <dataset_name>@$<last-snap> \
  | ssh <hostname> zfs recv <target_dataset_name> -F

ZFS sync of sto files from off1 to off2:

You also have to clean snapshots from time to time to avoid retaining too much useless data.

On ovh3: snapshot-purge.sh

How to Docker mount a zfs dataset

If ZFS dataset is on same machine we can use bind mounts to mount a folder in a ZFS partition.

For distant machines, ZFS datasets can be exposed as NFS partition. Docker as an integrated driver to mount distant NFS as volumes.

How to Mount datasets in a proxmox container

To mount dataset in a proxmox container you have:

  • to use a shared disk on proxmox
  • or to mount them as bind volumes

Use a shared disk on proxmox

(not really experimented yet, but it could have the advantage to enable replication)

On your VM/CT, in resource, add a disk.

Add the mountpoint to your disk and declare it shared.

In another VM/CT, add the same disk.

mount dataset as bind volumes

See: https://pve.proxmox.com/wiki/Linux_Container#_bind_mount_points

and https://pve.proxmox.com/wiki/Unprivileged_LXC_containers

Edit /etc/pve/lxc/<container_id>.conf and ad volumes with mount point.

For example:

# volumes
mp0: /zfs-hdd/opff,mp=/mnt/opff
mp1: /zfs-hdd/opff/products/,mp=/mnt/opff/products
mp2: /zfs-hdd/off/users/,mp=/mnt/opff/users
mp3: /zfs-hdd/opff/images,mp=/mnt/opff/images
mp4: /zfs-hdd/opff/html_data,mp=/mnt/opff/html_data
mp5: /zfs-hdd/opff/cache,mp=/mnt/opff/cache

Important: if you have nested mount points, the order is very important. First the outermost, then the inner ones.

To take changes in account, you have to reboot: pct reboot <container_id>

Getting uids and gids right

LXC maps uids inside the container to specific ids outside, most of the time by adding a large value. It's a way to ensure security.

If you want to have file belonging to say uid 1000 in the zfs mount, you will have to tweak it:

We edit /etc/subuid and /etc/subgid to add root:1000:10. This allow container started by root to map ids 1000 to their same ids on system.

Edit /etc/pve/lxc/<machine_id>.conf conf to add sub_id exceptions:

# uid map: from uid 0 map 999 uids (in the ct) to the range starting 100000 (on the host)
# so 0..999 (ct) → 100000..100999 (host)
lxc.idmap = u 0 100000 999
lxc.idmap = g 0 100000 999
# we map 10 uid starting from uid 1000 onto 1000, so 1000..1010 → 1000..1010
lxc.idmap = u 1000 1000 10
lxc.idmap = g 1000 1000 10
# we map the rest of 65535 from 1010 upto 101010, so 1010..65535 → 101010..165535
lxc.idmap = u 1011 101011 64525
lxc.idmap = g 1011 101011 64525