setup NFS, exports and mac mounting


resources for the installation initial install of components usedshowmount -e SERVER_IP

  • will show you if NFS has mounts to offer and you have them setup properly in /etc/exports


mounting on a MAC - not all arguments I understand at the moment but it is to optimize performance.

  • you need to put insecure in the lines for /etc/exports and the mount command used on mac is
    • mount -t nfs -o soft,intr,rsize=8192,wsize=8192,timeo=900,retrans=3,proto=tcp moviez/

mount on linux

  • mount -t nfs /mnt/FTP

In order to not provide write access directly to the root share drive, the /etc/exports has for root ex: 

  • /mnt/FTP/,insecure,sync,no_root_squash,all_squash)
  • no no_root_squash is not a good idea
  • default, NFS shares change the root user to the nfsnobody user, an unprivileged user account. In this way, all root-created files are owned by nfsnobody, which prevents uploading of programs with the setuid bit set.

    If no_root_squash is used, remote root users are able to change any file on the shared file system and leave trojaned applications for other users to inadvertently execute.

Then you can mount with --bind a subdirectory of the root you have shared in NFS.  In the /etc/exports you add a line ex: 

  • /mnt/movies/,insecure,sync,no_root_squash,all_squash)

you can check logs if you are having trouble.

2018-11-14 19:06:47gstlouis