Ok, found the problem and bug:

- it seems with NFS v4 everyone and their fuckin dog can mount a share, even 
with an address not in the exports ACL (input/output errors on everything then 
on)

- Cloudstack (Adv+SG) uses the guest network instead of the management network 
to mount the share (most likely a bug) - can't allow the guest network to mount 
nfs, any user VM could mount it and read/write everything.

Will open a bug report.

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

----- Original Message -----
> From: "Nux!" <n...@li.nux.ro>
> To: "asender" <asen...@testlabs.com.au>
> Cc: "users" <users@cloudstack.apache.org>
> Sent: Friday, 5 April, 2019 13:39:57
> Subject: Re: FreeNAS Secondary Storage anyone?

> E pur non si muove...
> 
> Mounting the share as nfs4 under CentOS works just fine and ids are 0/0. On 
> the
> Debian sec stor VM it mounts, but operations lead to "input output error".
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro
> 
> ----- Original Message -----
>> From: "Nux!" <n...@li.nux.ro>
>> To: "asender" <asen...@testlabs.com.au>
>> Cc: "users" <users@cloudstack.apache.org>
>> Sent: Friday, 5 April, 2019 13:16:56
>> Subject: Re: FreeNAS Secondary Storage anyone?
> 
>> Indeed, apparently you also need to enable "NFSv3 ownership model for NFSv4" 
>> in
>> Services/NFS, but that seems to have done the trick.
>> 
>> Cheers
>> 
>> --
>> Sent from the Delta quadrant using Borg technology!
>> 
>> Nux!
>> www.nux.ro
>> 
>> ----- Original Message -----
>>> From: "Nux!" <n...@li.nux.ro>
>>> To: "asender" <asen...@testlabs.com.au>
>>> Cc: "users" <users@cloudstack.apache.org>
>>> Sent: Friday, 5 April, 2019 13:03:59
>>> Subject: Re: FreeNAS Secondary Storage anyone?
>> 
>>> Hi,
>>> 
>>> I had already tried that and failed. I'll try again, maybe I overlooked some
>>> detail.
>>> 
>>> Thanks
>>> 
>>> --
>>> Sent from the Delta quadrant using Borg technology!
>>> 
>>> Nux!
>>> www.nux.ro
>>> 
>>> ----- Original Message -----
>>>> From: "asender" <asen...@testlabs.com.au>
>>>> To: "users" <users@cloudstack.apache.org>
>>>> Cc: "Nux!" <n...@li.nux.ro>
>>>> Sent: Friday, 5 April, 2019 00:46:04
>>>> Subject: Re: FreeNAS Secondary Storage anyone?
>>> 
>>>> Hi Nux,
>>>> 
>>>> I use FreeNAS-11.1-U4.
>>>> 
>>>> NFS Share: /mnt/tank
>>>> Under the /mnt/tank export I have directories like
>>>> /mnt/tank/cloudstack/secondary.
>>>> [root@cpms1 ~]# mount -t nfs 172.26.7.10:/mnt/tank/cloudstack/secondary
>>>> /mnt/secondary/
>>>> 
>>>> 
>>>> All Directories: [x] Allow mounting of any subdirectory under this mount
>>>> point ifselected. Otherwise, only the top level directory can be
>>>> mounted.
>>>> Authorized networks: 172.26.7.0/24
>>>> Mapall User: [root]
>>>> Mapall Group: [wheel]
>>>> 
>>>> Regards,
>>>> Adrian Sender
>>>> 
>>>> 
>>>> On 2019-04-04 23:09, Nux! wrote:
>>>>> Hi,
>>>>> 
>>>>> Has anyone managed to use FreeNAS for Secondary Storage?
>>>>> Can't seem to get past the no_root_squash requirement which I can't
>>>>> seem to enable on FreeNAS.
>>>>> 
>>>>> 
>>>>> --
>>>>> Sent from the Delta quadrant using Borg technology!
>>>>> 
>>>>> Nux!
> > > > > www.nux.ro

Reply via email to