[atomic-wg] Issue #352: enabling quota support on root XFS filesystem

[Dusty Mabe]

dustymabe reported a new issue against the project: `atomic-wg` that you are following:
``
@vgoyal [recommends](https://pagure.io/atomic-wg/issue/281#comment-471786) we should
enable quota support on our root filesystem if we want to use overlay2 on it by default.

We need to investigate doing this and see if there are any implications. 
``

To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/352

[Vivek Goyal]

vgoyal added a new comment to an issue you are following:
``
I will give little more context.

Docker overlay2 graph driver has capability of making use of xfs quota functionality and
limit the size of container to a maximum. If quota is not enabled on underlying
filesystem, this functionality is not avaialble.

I think it is useful to be able to limit the amount of data container apps can write and
avoid the situation where a single malicious container can consume all the available disk
space.
``

To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/352

[Dusty Mabe]

dustymabe added a new comment to an issue you are following:
``
@vgoyal - I agree.

Does anyone know if it is possible to enable this quota support in anaconda? 
``

To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/352

[Dusty Mabe]

dustymabe added a new comment to an issue you are following:
``
it looks like these are options that can be specified at mount time. They do not have to
be provided at FS creation time, correct? reference:
[link](https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Li...

From container-storage-setup it looks like the option we want to set is `pquota`. Can
someone confirm that? 

It looks like we can provide options through the `--fsoptions` field in the
[kickstart](https://access.redhat.com/documentation/en-US/Red_Hat_Enterpri...
 
``

To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/352

[Vivek Goyal]

vgoyal added a new comment to an issue you are following:
``
yes, its a mount time option "pquota" and container-storage-setup specifies it
by default.

But that kicks in only if user has decided to setup a seprate logical volume for
overlayfs.

Now you are planning to grow rootfs to consume whole  disk. That means most of the users
will setup overlayfs on top of rootfs. And that means rootfs needs to have quota enabled.
So generating images with quota enabled will make sense.
``

To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/352

[Dusty Mabe]

dustymabe added a new comment to an issue you are following:
``
FYI: upstream issue related to enabling this option in fstab:
https://github.com/projectatomic/rpm-ostree/issues/1059
``

To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/352

[Dusty Mabe]

dustymabe added a new comment to an issue you are following:
``
[This](https://infrastructure.fedoraproject.org/cgit/ansible.git/tree/role...
is the script we use to sync today (this does not include an rsync of deltas at this
time). 
``

To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/352