Abstract: Efficient authentication in a file system with multiple security groups is disclosed. A file system (FS) executing on at least one processor device receives, from a first client application of a plurality of client applications, a request to access a first object, the request including a unique object ID that identifies the first object. The FS determines, based on a data structure maintained by the FS and inaccessible to the first client application, that the first client application is associated with a first security group of a plurality of different security groups. The FS determines, based on metadata of the first object, that the first object is associated with the first security group, and grants the first client application access to the first object.

Abstract: Methods and systems are disclosed to initiate a snapshot of a volume distributed across a plurality of storage nodes of a distributed file system. The systems may create in the plurality of storage nodes a writeable sub-volume associated with the volume of the distributed file system. The system may identify a previous writeable sub-volume associated with a previous snapshot and mark the previous writeable sub-volume as read-only.

Abstract: Efficient authentication in a file system with multiple security groups is disclosed. A file system (FS) executing on at least one processor device receives, from a first client application of a plurality of client applications, a request to access a first object, the request including a unique object ID that identifies the first object. The FS determines, based on a data structure maintained by the FS and inaccessible to the first client application, that the first client application is associated with a first security group of a plurality of different security groups. The FS determines, based on metadata of the first object, that the first object is associated with the first security group, and grants the first client application access to the first object.

Abstract: A processing device identifies a path name of a file that is stored in a file system and sends an extended attribute request comprising the path name to a server computer system to identify a physical location of the file in the file system. The file system includes a virtual extended attributes that identify the physical location of the file that corresponds to the path name in the request. The processing device receives a response from the server computer system indicating the physical location of the file in the file system.

Abstract: Methods and systems are disclosed to initiate a snapshot of a volume distributed across a plurality of storage nodes of a distributed file system. The systems may create in the plurality of storage nodes a writeable sub-volume associated with the volume of the distributed file system. The system may identify a previous writeable sub-volume associated with a previous snapshot and mark the previous writeable sub-volume as read-only.

Abstract: Techniques for pro-active self-healing in a distributed file system are disclosure herein. In accordance with one embodiment, a method is provided. The method comprises prior to detecting an access request by a client application to an image on a storage server, identifying, by a self-healing daemon executed by a processing device, a first region of the image comprising stale data. A partial lock on the image is acquired. The partial lock prevents access to the first region of the image. Responsive to acquiring the partial lock, the self-healing daemon provides access to a second region of the image file comprising data other than the stale data.

Abstract: Techniques for pro-active self-healing in a distributed file system are disclosure herein. In accordance with one embodiment, a method is provided. The method comprises prior to detecting an access request by a client application to an image on a storage server, identifying, by a self-healing daemon executed by a processing device, a first region of the image comprising stale data. A partial lock on the image is acquired. The partial lock prevents access to the first region of the image. Responsive to acquiring the partial lock, the self-healing daemon provides access to a second region of the image file comprising data other than the stale data.

Abstract: A first server identifies a second server connecting to a cluster of servers in a file system. The first server examines a file in a replication directory hierarchy in the second server. The file has not been accessed by a client application. The first server determines, prior to the file being accessed by the client application that the file on the second server has stale data and overwrites the stale data in the file on the second server with current data.

Abstract: A first storage server identifies a second storage server connecting to a cluster of storage servers in a file system. The first storage server locates a file in a replication directory hierarchy in the second storage server. The file has not been accessed by a client application. The first storage server determines, prior to the file being accessed by the client application, that the file on the second storage server has stale data and overwrites the stale data in the file on the second storage server with current data.

Abstract: A first storage server identifies a second storage server connecting to a cluster of storage servers in a file system. The first storage server locates a file in a replication directory hierarchy in the second storage server. The file has not been accessed by a client application. The first storage server determines, prior to the file being accessed by the client application, that the file on the second storage server has stale data and overwrites the stale data in the file on the second storage server with current data.

Abstract: A first server identifies a second server connecting to a cluster of servers in a file system. The first server examines a file in a replication directory hierarchy in the second server. The file has not been accessed by a client application. The first server determines, prior to the file being accessed by the client application that the file on the second server has stale data and overwrites the stale data in the file on the second server with current data.

Abstract: A processing device identifies a path name of a file that is stored in a file system and sends an extended attribute request comprising the path name to a server computer system to identify a physical location of the file in the file system. The file system includes a virtual extended attributes that identify the physical location of the file that corresponds to the path name in the request.