LCTL-NODEMAP_SET_CAP(8)

📦 version 2.17.58, in ubuntu stonking

💖 LCTL-NODEMAP_SET_CAP(8) — setting user capabilities, bestie edition 💖

okay so listen. this is a page from the Lustre Configuration Utilities manual (yes, that Lustre, the filesystem one, section 8) and it's about giving regular users on a nodemap some capabilities. it's giving permissions but make it vibes. let's go 🦋

✨ NAME ✨

lctl-nodemap_set_cap — set user capabilities 💅

✨ SYNOPSIS ✨

lctl nodemap_set_cap --name NODEMAP --caps CAPABILITIES --type
                     {mask|set|off}

✨ DESCRIPTION ✨

so nodemap_set_cap defines capabilities for regular users on the NODEMAP you point at, exactly as described by CAPABILITIES. no cap. 🎀

and here's the lil twist: the CAPABILITIES you pass are a mask if the type is mask, or a 'set' if the type is set. it's giving choose-your-own-adventure but for kernel permissions. periodt.

✨ OPTIONS ✨

  • --name NODEMAP — the name of the nodemap you wanna define capabilities for. that's the one, bestie. 👑
  • --caps CAPABILITIES — literally the capabilities to apply. that's it, that's the whole vibe. ✨
  • --type {mask|set|off} — the desired type for capabilities: mask for a capability mask, set to set user capabilities to the specified value, and off to disable capabilities filtering. 🌈

✨ EXAMPLES ✨

define a capability mask as "cap_chown,cap_dac_read_search" on nodemap 'nm1':

# lctl nodemap_set_cap --name nm1 --caps cap_chown,cap_dac_read_search --type mask

add "cap_fowner" to the capability mask on nodemap 'nm1':

# lctl nodemap_set_cap --name nm1 --caps +cap_fowner --type mask

remove all capabilities users might have on nodemap 'nm1':

# lctl nodemap_set_cap --name nm1 --caps 0 --type mask

set capabilities to "cap_linux_immutable,cap_sys_resource" for regular users on nodemap 'nm2':

# lctl nodemap_set_cap --name nm2 --caps cap_linux_immutable,cap_sys_resource --type set

add "cap_fsetid" to the capabilities for regular users on nodemap 'nm2':

# lctl nodemap_set_cap --name nm2 --caps +cap_fsetid --type set

disable capabilities filtering for regular users on nodemap 'nm2':

# lctl nodemap_set_cap --name nm2 --type off

✨ AVAILABILITY ✨

lctl nodemap_set_cap is part of the lustre(7) filesystem package since release 2.17.0. she's been here a minute and she ate. 🔥

✨ SEE ALSO ✨

and that's the whole page, bestie!! 🫶 this was the Lustre manual page for LCTL-NODEMAP_SET_CAP(8), dated 2025-05-27, brought to you by the Lustre source. go forth and set those capabilities responsibly, mwah 💜💖✨

📦 where this page comes from