Setting up an NFS server: Difference between revisions
Prabuanand (talk | contribs) (cleaned up the page) |
m (bin name: exports -> exportfs) |
||
(One intermediate revision by one other user not shown) | |||
Line 14: | Line 14: | ||
After editing /etc/exports, reload your setting | After editing /etc/exports, reload your setting | ||
{{Cmd|# | {{Cmd|# exportfs -afv}} | ||
To make NFS server service to autostart on boot: | To make NFS server service to autostart on boot: | ||
Line 59: | Line 59: | ||
After editing /etc/exports, reload your setting | After editing /etc/exports, reload your setting | ||
{{Cmd|# | {{Cmd|# exportfs -afv}} | ||
User id mapping is managed by nfsidmap. | User id mapping is managed by nfsidmap. | ||
Line 66: | Line 66: | ||
In order for the client to connect to NFS via kerberos, enable and start rpc.gssd. | In order for the client to connect to NFS via kerberos, enable and start rpc.gssd. | ||
{{Cmd|# rc-update add rpc.gssd | {{Cmd|# rc-update add rpc.gssd}} | ||
# rc-service rpc.gssd start}} | {{Cmd|# rc-service rpc.gssd start}} | ||
== see Also == | == see Also == | ||
[https://wiki.archlinux.org/title/NFS NFS in Arch wiki] | * [https://wiki.archlinux.org/title/NFS NFS in Arch wiki] | ||
[https://wiki.gentoo.org/wiki/Nfs-utils NFS in Gentoo Wiki] | * [https://wiki.gentoo.org/wiki/Nfs-utils NFS in Gentoo Wiki] | ||
[[Category:Server]] | [[Category:Server]] |
Latest revision as of 12:21, 26 September 2024
Installation
Install the following package for both NFS client and NFS server service.
# apk add nfs-utils
Configuration
Setting up NFS service on Alpine Linux is no different from other Linux distributions.
NFS Server
Setup export dirs in /etc/exports. For example:
Contents of /etc/exports
After editing /etc/exports, reload your setting
# exportfs -afv
To make NFS server service to autostart on boot:
# rc-update add nfs
To start NFS server service now
# rc-service nfs start
NFS Client
To mount NFS shares automatically, an entry needs to made to /etc/fstab. To mount nfs share from /etc/fstab file at booting of the system
# rc-update add nfsmount
To mount the nfs shares from /etc/fstab file now:
# rc-service nfsmount start
# rc-update add netmount
You can check your boot services:
# rc-status
# rc-service netmount start
Kerberos Authentication
By default, NFS security only validates the IP of the client. You can add user level authentication with a Kerberos installation (MIT KRB5 or Heimdal). It is recommended to have the same Kerberos flavor across the network as both implementations are not completely mutually compatible.
Server Configuration
Assuming you setup Kerberos in the in the network, create ticket to your NFS machine (examples are in MIT KRB5 syntax):
# kadmin: addprinc -randkey nfs/nfs1.example.com@EXAMPLE.COM
And add it to the machines krb5.keytab file:
# kadmin: ktadd nfs/nfs1.example.com@EXAMPLE.COM
Then, edit your /etc/exports, and add sec=krb5 (only authentication), sec=krb5i (also hmac signing) or sec=krb5p (also encryption). For example:
Contents of /etc/exports
After editing /etc/exports, reload your setting
# exportfs -afv
User id mapping is managed by nfsidmap.
Client Configuration
In order for the client to connect to NFS via kerberos, enable and start rpc.gssd.
# rc-update add rpc.gssd
# rc-service rpc.gssd start