Albert Hopkins wrote:
On Mon, 2008-04-28 at 12:03 -0500, Chris Frederick wrote:
Hi all,

I'm trying to set up the portage directory to be hosted over nfs. Everything is working great but I would like to increase the security a little. I was wondering if there's an easy way to restrict 'emerge --sync' to only work on the server, while still letting all the nfs client machines download sources and emerge packages.

Have clients only mount portage read-only and put distfiles in another
fs and make it read-write.

Also you should disable locking on distfiles if you use it over NFS:
FEATURES=-distlocks.

-a


Why would I need to disable locking? Wouldn't that stop multiple users from downloading the same package at the same time and bring up potential race conditions that can break the emerge?

Chris Frederick
--
[email protected] mailing list

Reply via email to