ZFS API - Work In Progress

Christoper Webber

Systems Engineer

@cwebber

Why an API?

• Remote execution of zfs commands
• Better privilege containment
• More generalized interface
• Central orchestration

Why Not SSH?

• Harder to do right from a web interface
• Doesn't create easy to parse data by default
• Less repeated code

Decision Points

• RESTful interface
• Language/Framework
• Authetication
• Features to implement
• Passing the filesystem

Current Feature Set

• Get info about ZFS filesystem
• Create ZFS filesystem
• Change Ownership
• Change Options
• Delete Filesystem

Security Considerations

• RW and RO keys
• Explicit pool permissions
• Explicit option permissions

Road Ahead

• Move key and permissions to config file
• Input verification
• Change mode on root of filesystem

Questions?

Slides:http://cwebberops.github.com/zfs-api-preso

Repo:https://github.com/cwebberOps/zfs-api