Re: [Gluster-devel] Remote volume listing

[Niels de Vos]

On 11/19/2012 04:55 PM, Jeff Darcy wrote:
> On 11/19/2012 10:47 AM, Niels de Vos wrote:
> > You can get the list with the 'gluster' command from the glusterfs-server 
> > package:
> >
> > # gluster --remote-host=storage-01.example.com volume list
> >
> > or if you prefer parsing XML:
> >
> > # gluster --xml --remote-host=storage-01.example.com volume list
> >
> > There is no need for the client system to be in the peer-list of the storage
> > servers, so it is pretty straight forward.
>
> It doesn't need to be in the peer list, but it does need to have the
> gluster-server package installed (one reason I think the CLI should be separate
> BTW).

Maybe the CLI should move to the glusterfs (without -server) package? I'm not 
sure how many common users there are, but for the occasional usage I have it 
would suit me :)

> Also, it's even less secure than the ssh solution.

Well, it does not allow the client to execute any command as root, which is the 
case for using ssh. There is definitely no encryption or authentication at the 
moment :-/ The only restriction is that the source-port of the gluster command 
is < 1024, so the gluster command needs to be run as root. I'm not sure if there 
is an option to disable that.

I'm probably missing some details, but personally I'm not a big fan of giving 
out a root password or ssh-key. The code snippet did not show an option that 
would make it possible to use an other user and combine that with strict sudo 
rules (similar to https://bugzilla.redhat.com/show_bug.cgi?id=632851).

Cheers,
Niels