Advanced configurations

Configure the account information

When you use ossfs to access OSS buckets, you must configure your account information including your AccessKey ID and AccessKey secret. The account information must be written to the account configuration file in a specific format. ossfs obtains the account information in $bucket_name:$access_key_id:$access_key_secret format from the account configuration file.

Use instance RAM roles

In ECS, you can use ossfs by using instance RAM roles. You can associate an ECS instance with an instance RAM role to access OSS from the instance by using STS temporary credentials. STS temporary credentials are automatically generated and updated. Applications can obtain the STS temporary credentials by using the instance metadata URL. RAM helps to secure your AccessKey pair, and facilitates fine-grained permission control and management. For more information about instance RAM roles, see What is the RAM role of an instance.

The following section describes how to use ossfs by using the EcsRamRoleOssTest instance RAM role.

1. Create the EcsRamRoleOssTest instance RAM role.
   For more information about how to create an instance RAM role, see Step 1: Create an instance RAM role.
2. Authorize the instance RAM role to access OSS.
   For more information about how to grant permissions to an instance RAM role, see Grant permissions to a RAM role. In this example, the instance RAM role is granted the AliyunOSSReadOnlyAccess permission. You can specify the permission based on your actual requirements. For more information, see Create a custom policy.
3. Associate an ECS instance with a RAM role.
   For more information, see Step 3: Bind the instance RAM role.
4. Use ossfs by using the instance metadata URL.
   1. Log on to the ECS instance.
   2. Use ossfs and use the -oram_role option.
      The bucket named Bucket1 in the China (Hangzhou) region is used as an example:

      ossfs bucket1 /tmp/ossfs -ourl=http://oss-cn-hangzhou.aliyuncs.com -oram_role=http://100.100.100.200/latest/meta-data/ram/security-credentials/EcsRamRoleOssTest

Configure access permissions

Mount a specified directory

ossfs bucket:/prefix mount_point -ourl=endpoint

Ensure that an object named ${prefix}/ exists in the bucket. You can run the stat command of ossutil to check whether the object exists.

ossfs bucket-ossfs-test:/folder /tmp/ossfs-folder -ourl=http://oss-cn-hangzhou.aliyuncs.com

Mount a directory at startup

1. Write the bucket name, AccessKey ID, and AccessKey secret to the /etc/passwd-ossfs file, and change the permission to 640.
   For more information, see Quick installation.
2. Enable automatic mount at startup.
   The method to enable automatic mount at startup varies with the version of your operating system.

   • Enable automatic mount at startup by using the fstab file for Ubuntu 14.04 and CentOS 6.5
     1. Add the following command to the /etc/fstab file:

        ossfs#bucket_name mount_point fuse _netdev,url=url,allow_other 0 0

     2. Save the /etc/fstab file. Run the mount -a command. The settings are correct if no errors are reported.
     3. After you have completed the preceding operations, automatic mount at startup is enabled in Ubuntu 14.04. For CentOS 6.5, you must also run the following command:

        chkconfig netfs on

   • Enable automatic mount at startup by using the script for CentOS 7.0 or later
     1. Create the ossfs file in the /etc/init.d/ directory, and copy the content of the template to this file. Replace your_xxx based on actual conditions.
     2. Run the following command to allow the ossfs script to be executed:

        chmod a+x /etc/init.d/ossfs

        After the preceding command is complete, you can execute the script. If the content of the script is correct, the OSS bucket is mounted to the specified directory.
     3. Run the following command to start the ossfs script at startup as a service:

        chkconfig ossfs on

     4. After you have completed the preceding operations, automatic mount at startup is enabled.

Start ossfs by using Supervisor

Supervisor is a universal process management program of Python. It can turn a general command line process into a background daemon and monitor the process. Supervisor automatically restarts the process when the process stops unexpectedly. Follow these steps to start ossfs by using Supervisor is as follows:

1. Install Supervisor.
   • CentOS

     yum install supervisor

   • Ubuntu

     sudo apt-get install supervisor

2. Create an ossfs startup script.
   1. Create the start_ossfs.sh file.

      mkdir /root/ossfs_scripts
      vi /root/ossfs_scripts/start_ossfs.sh

   2. Write the startup script.

      # Unmount the OSS bucket.
      fusermount -u /mnt/ossfs
      # Mount the OSS bucket again. You must use the -f parameter to run ossfs in the frontend.
      exec ossfs bucket_name mount_point -ourl=endpoint -f

3. Edit the /etc/supervisor/supervisord.conf file and add the following content to the end of the file:

   [program:ossfs]
   command=bash /root/ossfs_scripts/start_ossfs.sh
   logfile=/var/log/ossfs.log
   log_stdout=true
   log_stderr=true
   logfile_maxbytes=1MB
   logfile_backups=10

4. Run Supervisor.

   supervisord

5. Verify whether Supervisor runs properly.

   ps aux | grep supervisor # View the Supervisor process.
   ps aux | grep ossfs # View the ossfs process.
   kill -9 ossfs # Kill the ossfs process. Supervisor restarts ossfs. Do not use the killall command because this command sends the SIGTERM signal to terminate the ossfs process. In this case, Supervisor will not run ossfs again. ps aux | grep ossfs # View the ossfs process.

Enable debug logging