[pve-devel] [PATCH pve-docs v2] Add subchapter about ACLs, and make even more clear what quotas are about

[Emmanuel Kasper]

Document that use of a tmpdir is recommended when doing a 'suspend'
backup to a NFS share.
---
changes since v1:
 * move NFS related hints to vzdump documentation, recommend tmpdir
 * reword quota description

 pct.adoc    |  8 ++++++++
 vzdump.adoc | 14 ++++++++++----
 2 files changed, 18 insertions(+), 4 deletions(-)

diff --git a/pct.adoc b/pct.adoc
index 82f257b..1117082 100644
--- a/pct.adoc
+++ b/pct.adoc
@@ -401,6 +401,8 @@ Similarly device mounts are not managed by the storage, but for these the
 Using quotas inside containers
 ------------------------------
 
+Quotas allow to set limits inside a container for the amount of disk space
+that each user can use.
 This only works on ext4 image based storage types and currently does not work
 with unprivileged containers.
 
@@ -418,6 +420,12 @@ for every mountpoint by passing the mountpoint's path instead of just `/`.) Best
 see the documentation specific to the distributiont running inside the
 container.
 
+Using ACLs inside containers
+----------------------------
+
+The standard Posix Access Control Lists are also available inside containers. 
+ACLs allow you to set more detailed file ownership than the traditional user/
+group/others model.
 
 Container Advantages
 --------------------
diff --git a/vzdump.adoc b/vzdump.adoc
index fc42468..77f4638 100644
--- a/vzdump.adoc
+++ b/vzdump.adoc
@@ -38,11 +38,17 @@ Stop the VM during backup. This results in a very long downtime.
 
 `suspend` mode::
 
-For containers, this mode uses rsync to copy the VM data to a temporary
-location (see option `--tmpdir`). Then the VM is suspended and a second
-rsync copies changed files. After that, the VM is started (resumed)
+For containers, this mode uses rsync to copy the container data to a temporary
+location (see option `--tmpdir`). Then the container is suspended and a second
+rsync copies changed files. After that, the container is started (resumed)
 again. This results in minimal downtime, but needs additional space
-to hold the VM copy.
+to hold the container copy.
+
+When the container is on a local filesystem and the target storage of the backup
+is an NFS server, you should set `--tmpdir` to reside on a local filesystem too,
+as this will result in a many fold performance improvement.
+Use of a local `tmpdir` is also required if you want to backup in `suspend`
+mode a local container using ACLs to an NFS server.
 
 For QemuServer, this mode will suspend the VM, start
 a live backup, and resume the VM.
-- 
2.1.4