Storage system configured with stealth drive group
A storage system comprises a plurality of storage devices, and is configured to establish a production drive group comprising a first subset of the storage devices, using a first firmware-level configuration process, and to establish a stealth drive group comprising a second subset of the storage devices, using a second firmware-level configuration process, the storage devices of the stealth drive group thereby being separated at a firmware level of the storage system from the storage devices of the production drive group. The storage system is further configured to copy data of one or more logical storage volumes from the production drive group to the stealth drive group, and responsive to completion of the copying of the data of the one or more logical storage volumes from the production drive group to the stealth drive group, to initiate a firmware-level reconfiguration process for the storage devices of the stealth drive group.
1. An apparatus comprising:
a storage system comprising a plurality of storage devices;
the storage system being configured:
to establish a production drive group comprising a first subset of the storage devices, using a first firmware-level configuration process based at least in part on a first configuration file;
to establish a stealth drive group comprising a second subset of the storage devices, using a second firmware-level configuration process different than the first firmware-level configuration process, the second firmware-level configuration process being based at least in part on a second configuration file different than the first configuration file, the first firmware-level configuration process being performed at least in part in parallel with the second firmware-level configuration process, the storage devices of the stealth drive group thereby being separated at a firmware level of the storage system from the storage devices of the production drive group;
to copy data of one or more logical storage volumes from the production drive group to the stealth drive group; and
responsive to completion of the copying of the data of the one or more logical storage volumes from the production drive group to the stealth drive group, to initiate a firmware-level reconfiguration process for the storage devices of the stealth drive group;
wherein establishing the production drive group comprising the first subset of the storage devices, using the first firmware-level configuration process, comprises forming a first system resources pool comprising the first subset of the storage devices;
wherein establishing the stealth drive group comprising the second subset of the storage devices, using the second firmware-level configuration process, comprises forming a second system resources pool, different than the first system resources pool, comprising the second subset of the storage devices, the second subset of the storage devices used for forming the second system resources pool comprising storage devices that have not previously been used for forming any portion of the first system resources pool; and
wherein the first and second subsets of storage devices comprising the respective production drive group and stealth drive group comprise respective distinct and non-overlapping subsets of the storage devices of the storage system;
the copied data of the one or more logical storage volumes as stored in the stealth drive group thereby being stored in its entirety on one or more storage devices that are different than any of those utilized to store the data of the one or more logical storage volumes in the production drive group.
2. The apparatus of claim 1 wherein the data of the one or more logical storage volumes is stored in at least one of the production drive group and the stealth drive group utilizing a redundant array of independent disks (RAID) arrangement comprising a plurality of stripes, with each of the plurality of stripes comprising a plurality of blocks, the blocks being distributed across multiple ones of the storage devices.
3. The apparatus of claim 2 wherein the RAID arrangement comprises a distributed RAID arrangement in which a total number of blocks per stripe is less than a total number of the storage devices over which the blocks of the plurality of stripes are distributed.
4. The apparatus of claim 2 wherein the RAID arrangement comprises at least one parity RAID arrangement supporting recovery from a failure of at least one of the plurality of storage devices and wherein a given one of the stripes comprises a plurality of data blocks and one or more parity blocks.
5. The apparatus of claim 1 wherein completion of the firmware-level reconfiguration process for the storage devices of the stealth drive group renders the copied data stored in those storage devices temporarily inaccessible within the storage system.
6. The apparatus of claim 1 wherein copying data of one or more logical storage volumes from the production drive group to the stealth drive group comprises generating a clone of the one or more logical storage volumes of the production drive group in the stealth drive group, the clone of the one or more logical storage volumes comprising a point-in-time full copy of the one or more logical storage volumes.
7. The apparatus of claim 1 wherein the first firmware-level configuration process comprises:
obtaining the first configuration file;
installing the first configuration file in the storage system; and
updating firmware of the storage system based at least in part on the first configuration file.
8. The apparatus of claim 7 wherein the second firmware-level configuration process comprises:
obtaining the second configuration file;
installing the second configuration file in the storage system; and
updating firmware of the storage system based at least in part on the second configuration file.
9. The apparatus of claim 7 wherein the installing and the updating are required to be performed under control of respective first and second distinct personnel subject to respective first and second distinct authentication processes.
10. The apparatus of claim 5 wherein completion of the firmware-level reconfiguration process for the storage devices of the stealth drive group results in those storage devices being removed from the stealth drive group.
11. The apparatus of claim 10 wherein an additional firmware-level reconfiguration process is initiated for the storage devices that were previously part of the stealth drive group in order to render the copied data stored in those storage devices once again accessible within the storage system.
12. The apparatus of claim 11 wherein the additional firmware-level reconfiguration process for the storage devices that were previously part of the stealth drive group results in those storage devices being made part of the production drive group.
13. The apparatus of claim 1 wherein at least one of the storage devices in the first subset of storage devices is installed in a same disk array enclosure as at least one of the storage devices in the second subset of storage devices.
14. The apparatus of claim 1 wherein the storage devices of at least the second subset of storage devices comprise respective self-encrypting drives and wherein an additional protected storage mechanism is implemented in the storage system for storage of one or more keys required to access data stored on the self-encrypting drives.
15. A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by a processor of a storage system comprising a plurality of storage devices, causes the storage system:
to establish a production drive group comprising a first subset of the storage devices, using a first firmware-level configuration process based at least in part on a first configuration file;
to establish a stealth drive group comprising a second subset of the storage devices, using a second firmware-level configuration process different than the first firmware-level configuration process, the second firmware-level configuration process being based at least in part on a second configuration file different than the first configuration file, the first firmware-level configuration process being performed at least in part in parallel with the second firmware-level configuration process, the storage devices of the stealth drive group thereby being separated at a firmware level of the storage system from the storage devices of the production drive group;
to copy data of one or more logical storage volumes from the production drive group to the stealth drive group; and
responsive to completion of the copying of the data of the one or more logical storage volumes from the production drive group to the stealth drive group, to initiate a firmware-level reconfiguration process for the storage devices of the stealth drive group;
wherein establishing the production drive group comprising the first subset of the storage devices, using the first firmware-level configuration process, comprises forming a first system resources pool comprising the first subset of the storage devices;
wherein establishing the stealth drive group comprising the second subset of the storage devices, using the second firmware-level configuration process, comprises forming a second system resources pool, different than the first system resources pool, comprising the second subset of the storage devices, the second subset of the storage devices used for forming the second system resources pool comprising storage devices that have not previously been used for forming any portion of the first system resources pool; and
wherein the first and second subsets of storage devices comprising the respective production drive group and stealth drive group comprise respective distinct and non-overlapping subsets of the storage devices of the storage system;
the copied data of the one or more logical storage volumes as stored in the stealth drive group thereby being stored in its entirety on one or more storage devices that are different than any of those utilized to store the data of the one or more logical storage volumes in the production drive group.
16. The computer program product of claim 15 wherein completion of the firmware-level reconfiguration process for the storage devices of the stealth drive group renders the copied data stored in those storage devices temporarily inaccessible within the storage system.
17. A method for use in a storage system comprising a plurality of storage devices, the method comprising:
establishing a production drive group comprising a first subset of the storage devices, using a first firmware-level configuration process based at least in part on a first configuration file;
establishing a stealth drive group comprising a second subset of the storage devices, using a second firmware-level configuration process different than the first firmware-level configuration process, the second firmware-level configuration process being based at least in part on a second configuration file different than the first configuration file, the first firmware-level configuration process being performed at least in part in parallel with the second firmware-level configuration process, the storage devices of the stealth drive group thereby being separated at a firmware level of the storage system from the storage devices of the production drive group;
copying data of one or more logical storage volumes from the production drive group to the stealth drive group; and
responsive to completion of the copying of the data of the one or more logical storage volumes from the production drive group to the stealth drive group, initiating a firmware-level reconfiguration process for the storage devices of the stealth drive group;
wherein establishing the production drive group comprising the first subset of the storage devices, using the first firmware-level configuration process, comprises forming a first system resources pool comprising the first subset of the storage devices;
wherein establishing the stealth drive group comprising the second subset of the storage devices, using the second firmware-level configuration process, comprises forming a second system resources pool, different than the first system resources pool, comprising the second subset of the storage devices, the second subset of the storage devices used for forming the second system resources pool comprising storage devices that have not previously been used for forming any portion of the first system resources pool; and
wherein the first and second subsets of storage devices comprising the respective production drive group and stealth drive group comprise respective distinct and non-overlapping subsets of the storage devices of the storage system;
the copied data of the one or more logical storage volumes as stored in the stealth drive group thereby being stored in its entirety on one or more storage devices that are different than any of those utilized to store the data of the one or more logical storage volumes in the production drive group.
18. The method of claim 17 wherein completion of the firmware-level reconfiguration process for the storage devices of the stealth drive group renders the copied data stored in those storage devices temporarily inaccessible within the storage system.
19. The method of claim 17 wherein the production drive group is implemented utilizing a first RAID arrangement of a first RAID type over the first subset of storage devices and the stealth drive group is implemented utilizing a second RAID arrangement of a second RAID type over the second subset of storage device, the second RAID arrangement of the second RAID type being different than the first RAID arrangement of the first RAID type.
20. The method of claim 17 wherein the storage devices of at least the second subset of storage devices comprise respective self-encrypting drives and wherein an additional protected storage mechanism is implemented in the storage system for storage of one or more keys required to access data stored on the self-encrypting drives.