| 2012-03-05 20:14:51 |
Clint Byrum |
description |
= Intro =
This is a Main Inclusion Report for CEPH.
http://ceph.newdream.net/
The request is to include the ceph source package, and all of its binaries except the following:
ceph-mds
ceph-mds-dbg
ceph-fs-common
ceph-fs-common-dbg
libcephfs
ceph-fuse
The exceptions are to separate out the CEPH POSIX filesystem, which is still considered somewhat experimental. The block and object storage underneath it, however, should be extremely stable and fully supported.
== Availability ==
CEPH has been available in Ubuntu since 10.10
== Rationale ==
CEPH is available as a drop in replacement for SWIFT in OpenStack environments, and also can be used as a highly scalable remote block store for qemu-kvm. The support for that use case is well integrated with OpenStack and helps to improve our story for Ubuntu Cloud Infrastructure. The full rationale was discussed at UDS and captured in this blueprint:
https://blueprints.launchpad.net/ubuntu/+spec/servercloud-p-ceph
Note that upstream was present and would agree that the filesystem of CEPH is not as supportable as the object and block storage system, so the two will be kept separate in the packaging and the binaries for the filesystem left out of main.
== Security ==
CEPH has not had any known CVE's reported against it.
The CEPH filesystem has had a detailed paper written describing its security model:
http://www.ssrc.ucsc.edu/Papers/leung-storagess06.pdf
However, the filesystem binaries will be kept out of main for now.
The lower level encryption scheme used to authenticate clients is described here:
http://ceph.newdream.net/wiki/Cephx
== Quality assurance ==
CEPH is a complex system, requiring multiple nodes and tuning to be utilized. The configuration is well documented, and the system is fairly straight forward to get running.
There are no major known bugs open against CEPH in Debian or Ubuntu.
The Debian maintainer keeps CEPH up to date with upstream, and is very responsive to inquiries. The packaging was originally done by upstream, and they have been active in keeping it up to date. The original author of CEPH, Sage Weil, is listed as an uploader.
The package does ship a test suite, and I've opened a bug, targetted at beta-1, to enable it:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/932895
Package has a correct debian/watch file.
== UI standards ==
N/A
== Dependencies ==
Build-Deps not in main:
libcrypto++ - Needs Investigation - Upstream code supports libnss, but upstream prefers crypto++ because of its C++ API superiority and some noted oddness in libNSS. Upstream is willing to start testing the NSS code more if that is the preferrable over putting libcrypto++ in main.
The NSS support was added for Fedora/RHEL in this issue:
http://tracker.newdream.net/issues/812
I opened a bug to enable the libnss support:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/932896
If this is done, libcrypto++ does not need to be in main.
google-perftools - These are highly useful and gaining popularity in high scale applications. Will prepare a separate MIR for them.
== Standards compliance ==
The packaging is relatively straightforward, being of the "pre debhelper 7" style, but still quite simple. There are no known FHS violations in the packages.
== Maintenance ==
CEPH is under active development by a dedicated division of DreamHost, which is actively engaged in the Ubuntu and OpenStack communities. The Debian maintainer is also quite active in addressing any concerns and keeping up with upstream. CEPH should not be an inordinate burden on Ubuntu as a whole to maintain. |
= Intro =
This is a Main Inclusion Report for CEPH.
http://ceph.newdream.net/
The request is to include the ceph source package, and all of its binaries except the following:
ceph-mds
ceph-mds-dbg
ceph-fs-common
ceph-fs-common-dbg
libcephfs
ceph-fuse
The exceptions are to separate out the CEPH POSIX filesystem, which is still considered somewhat experimental. The block and object storage underneath it, however, should be extremely stable and fully supported.
== Availability ==
CEPH has been available in Ubuntu since 10.10
== Rationale ==
CEPH is available as a drop in replacement for SWIFT in OpenStack environments, and also can be used as a highly scalable remote block store for qemu-kvm. The support for that use case is well integrated with OpenStack and helps to improve our story for Ubuntu Cloud Infrastructure. The full rationale was discussed at UDS and captured in this blueprint:
https://blueprints.launchpad.net/ubuntu/+spec/servercloud-p-ceph
Note that upstream was present and would agree that the filesystem of CEPH is not as supportable as the object and block storage system, so the two will be kept separate in the packaging and the binaries for the filesystem left out of main.
== Security ==
CEPH has not had any known CVE's reported against it.
The CEPH filesystem has had a detailed paper written describing a proposed security model:
http://www.ssrc.ucsc.edu/Papers/leung-storagess06.pdf
However, it was not implemented. This is not entirely relevant to this MIR, as the filesystem binaries will be kept out of main for now.
The lower level encryption scheme used to authenticate clients is described here:
http://ceph.newdream.net/wiki/Cephx
== Quality assurance ==
CEPH is a complex system, requiring multiple nodes and tuning to be utilized. The configuration is well documented, and the system is fairly straight forward to get running.
There are no major known bugs open against CEPH in Debian or Ubuntu.
The Debian maintainer keeps CEPH up to date with upstream, and is very responsive to inquiries. The packaging was originally done by upstream, and they have been active in keeping it up to date. The original author of CEPH, Sage Weil, is listed as an uploader.
The package does ship a test suite, and I've opened a bug, targetted at beta-1, to enable it:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/932895
Package has a correct debian/watch file.
== UI standards ==
N/A
== Dependencies ==
Build-Deps not in main:
libcrypto++ - Needs Investigation - Upstream code supports libnss, but upstream prefers crypto++ because of its C++ API superiority and some noted oddness in libNSS. Upstream is willing to start testing the NSS code more if that is the preferrable over putting libcrypto++ in main.
The NSS support was added for Fedora/RHEL in this issue:
http://tracker.newdream.net/issues/812
I opened a bug to enable the libnss support:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/932896
If this is done, libcrypto++ does not need to be in main.
google-perftools - These are highly useful and gaining popularity in high scale applications. Will prepare a separate MIR for them.
== Standards compliance ==
The packaging is relatively straightforward, being of the "pre debhelper 7" style, but still quite simple. There are no known FHS violations in the packages.
== Maintenance ==
CEPH is under active development by a dedicated division of DreamHost, which is actively engaged in the Ubuntu and OpenStack communities. The Debian maintainer is also quite active in addressing any concerns and keeping up with upstream. CEPH should not be an inordinate burden on Ubuntu as a whole to maintain. |
|
