MDS File (Linux)

In addition to CTE-LDT attributes, the CTE-LDT process on Linux requires persistent storage for additional metadata related to encrypting, or rekeying, files in GuardPoints. CTE-LDT allocates the storage space as soon as the CTE-LDT process starts on a GuardPoint. It maintains this storage space during the entire transformation process, until the GuardPoint is completely transformed.

Storage for this metadata is allocated and managed in a special file, called the MDS (metadata store) file. The MDS file resides inside a GuardPoint directory so each GuardPoint has its own MDS file.

The MDS file is a CTE protected file with the name __vorm_mds__. For example:

ls -l /oxf-fs1/gp1/__vorm_mds__
-rwxr-xr-x. 1 root  root 31754474496 Dec  8 09:09 /oxf-fs1/__vorm_mds__
du -B 1024 /oxf-fs1/gp1/__vorm_mds__
25056   /oxf-fs1/__vorm_mds__

As shown above, the MDS file is sparse. In the example, the file size is approximately 30GB, however the file is allocated with approximately 25MB of disk storage. CTE-LDT automatically creates the MDS file the first time the CTE-LDT process starts on any GuardPoint in the file system namespace. It populates the MDS file with all of the metadata for the GuardPoint at the beginning of the CTE-LDT process. Disk space allocated to the MDS file is freed and the MDS file in the GuardPoint directory is removed when the CTE-LDT process completes on the GuardPoint.

Warning

The MDS file is protected. You cannot remove it unless the administrator runs the voradmin command to manually remove the MDS file once it is no longer needed. See Deleting CTE-LDT Metadata (Linux) for more information.

CTE-LDT automatically allocates and de-allocates disk space for the MDS file as part of the CTE-LDT process. De-allocation of disk space for a GuardPoint does not change the MDS file size, although it frees the disk blocks. MDS files are sparse and very large in size. The MDS file is automatically removed from GuardPoints when the files have been successfully rekeyed.

Note

The metadata storage (MDS) file name has changed from __vorm_mds__ to __vorm_mds__. GuardPoints will automatically rename the MDS file when guarding with a CTE 7.6.0 agent. LDT NFS GuardPoints will rename once all of the hosts, with the same share guarded, have been upgraded.