1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
if node.os != "alpine":
raise BundleError(f"{node.name}: OS {node.os} is not supported.")
svc_openrc = {
"nfs": {
"enabled": True,
"running": True,
"needs": {
"pkg_apk:nfs-utils",
},
}
}
actions = {
"reload_exportfs": {
"command": "exportfs -afv",
"triggered": True,
},
}
directories = {
"/var/nfs": {},
}
files = {
"/etc/exports": {
"triggers": {
"svc_openrc:nfs:restart",
"action:reload_exportfs",
},
},
# "/etc/nftables.d/61-nfs.nft": {
# "source": "nfs.nft",
# "triggers": {"svc_openrc:nftables:restart"},
# }
"/etc/avahi/services/nfs-public.service": {
"source": "public.avahi.service",
},
}
# TODO:
# https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/storage_administration_guide/s1-nfs-security#s2-nfs-security-files
# https://overflow.adminforge.de/exchange/serverfault.com/questions/1131152/setup-sso-openldap-kerberos-nfstruenas
# https://wiki.gentoo.org/wiki/Nfs-utils
# https://ariq.nauf.al/blog/securely-sharing-storage-with-nfs-and-tailscale/
# need to configure nfs service to include rpc.idmapd ?
# https://dhole.github.io/post/nfs_wireguard/
# https://github.com/xetdata/nfsserve ?
|
