[compuVault] tracer des actions d'utilisation dans syslog
discuté avec Dominique L. pour l'homologation de compuvault.
actions à tracer:
qui, à quelle heure a ouvert/monté/libéré le volume chiffré.
dans les syslog, ca donne désormais ceci:
g5kadmin@syslog.rennes.grid5000.fr(kvm|pve):/var/log/clients$ grep -R "CompuVault" * | sed -E 's/.*([0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}).*/\1 &/' | sort | awk '$1 >= "2024-11-01T00:00:00" && $1 <= "2024-11-14T23:59:59"'
2024-11-14T14:16:13 all.log:<86>1 2024-11-14T14:16:13.516423+01:00 parasilo-25-kavlan-5.rennes.grid5000.fr ychi - - [timeQuality tzKnown="1" isSynced="1" syncAccuracy="1216785"] CompuVault encrypted storage cv-poc opened on parasilo-25.rennes by ychi at 2024-11-14 14:16:13
2024-11-14T14:16:13 all.log:<86>1 2024-11-14T14:16:13.565188+01:00 parasilo-25-kavlan-5.rennes.grid5000.fr ychi - - [timeQuality tzKnown="1" isSynced="1" syncAccuracy="1216785"] CompuVault encrypted storage cv-poc mounted on parasilo-25.rennes by ychi at 2024-11-14 14:16:13
2024-11-14T14:16:13 parasilo-25-kavlan-5.rennes.grid5000.fr/parasilo-25-kavlan-5.rennes.grid5000.fr.log:<86>1 2024-11-14T14:16:13.516423+01:00 parasilo-25-kavlan-5.rennes.grid5000.fr ychi - - [timeQuality tzKnown="1" isSynced="1" syncAccuracy="1216785"] CompuVault encrypted storage cv-poc opened on parasilo-25.rennes by ychi at 2024-11-14 14:16:13
2024-11-14T14:16:13 parasilo-25-kavlan-5.rennes.grid5000.fr/parasilo-25-kavlan-5.rennes.grid5000.fr.log:<86>1 2024-11-14T14:16:13.565188+01:00 parasilo-25-kavlan-5.rennes.grid5000.fr ychi - - [timeQuality tzKnown="1" isSynced="1" syncAccuracy="1216785"] CompuVault encrypted storage cv-poc mounted on parasilo-25.rennes by ychi at 2024-11-14 14:16:13
2024-11-14T14:16:45 all.log:<86>1 2024-11-14T14:16:45.821901+01:00 parasilo-25-kavlan-5.rennes.grid5000.fr ychi - - [timeQuality tzKnown="1" isSynced="1" syncAccuracy="57460"] CompuVault encrypted storage cv-poc disconnected on parasilo-25.rennes by ychi at 2024-11-14 14:16:45
2024-11-14T14:16:45 parasilo-25-kavlan-5.rennes.grid5000.fr/parasilo-25-kavlan-5.rennes.grid5000.fr.log:<86>1 2024-11-14T14:16:45.821901+01:00 parasilo-25-kavlan-5.rennes.grid5000.fr ychi - - [timeQuality tzKnown="1" isSynced="1" syncAccuracy="57460"] CompuVault encrypted storage cv-poc disconnected on parasilo-25.rennes by ychi at 2024-11-14 14:16:45
idéalement, il faut tracer les mêmes actions côté serveur. les logs en plus du côté serveur montrent les "violations d'utilisations" (qqn qui tente d'accéder au volume chiffré sans passer par armored node et le script compuvault).
Edited by Yao CHI