Ok, found the problem and bug: - it seems with NFS v4 everyone and their fuckin dog can mount a share, even with an address not in the exports ACL (input/output errors on everything then on)
- Cloudstack (Adv+SG) uses the guest network instead of the management network to mount the share (most likely a bug) - can't allow the guest network to mount nfs, any user VM could mount it and read/write everything. Will open a bug report. -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ----- Original Message ----- > From: "Nux!" <n...@li.nux.ro> > To: "asender" <asen...@testlabs.com.au> > Cc: "users" <users@cloudstack.apache.org> > Sent: Friday, 5 April, 2019 13:39:57 > Subject: Re: FreeNAS Secondary Storage anyone? > E pur non si muove... > > Mounting the share as nfs4 under CentOS works just fine and ids are 0/0. On > the > Debian sec stor VM it mounts, but operations lead to "input output error". > > -- > Sent from the Delta quadrant using Borg technology! > > Nux! > www.nux.ro > > ----- Original Message ----- >> From: "Nux!" <n...@li.nux.ro> >> To: "asender" <asen...@testlabs.com.au> >> Cc: "users" <users@cloudstack.apache.org> >> Sent: Friday, 5 April, 2019 13:16:56 >> Subject: Re: FreeNAS Secondary Storage anyone? > >> Indeed, apparently you also need to enable "NFSv3 ownership model for NFSv4" >> in >> Services/NFS, but that seems to have done the trick. >> >> Cheers >> >> -- >> Sent from the Delta quadrant using Borg technology! >> >> Nux! >> www.nux.ro >> >> ----- Original Message ----- >>> From: "Nux!" <n...@li.nux.ro> >>> To: "asender" <asen...@testlabs.com.au> >>> Cc: "users" <users@cloudstack.apache.org> >>> Sent: Friday, 5 April, 2019 13:03:59 >>> Subject: Re: FreeNAS Secondary Storage anyone? >> >>> Hi, >>> >>> I had already tried that and failed. I'll try again, maybe I overlooked some >>> detail. >>> >>> Thanks >>> >>> -- >>> Sent from the Delta quadrant using Borg technology! >>> >>> Nux! >>> www.nux.ro >>> >>> ----- Original Message ----- >>>> From: "asender" <asen...@testlabs.com.au> >>>> To: "users" <users@cloudstack.apache.org> >>>> Cc: "Nux!" <n...@li.nux.ro> >>>> Sent: Friday, 5 April, 2019 00:46:04 >>>> Subject: Re: FreeNAS Secondary Storage anyone? >>> >>>> Hi Nux, >>>> >>>> I use FreeNAS-11.1-U4. >>>> >>>> NFS Share: /mnt/tank >>>> Under the /mnt/tank export I have directories like >>>> /mnt/tank/cloudstack/secondary. >>>> [root@cpms1 ~]# mount -t nfs 172.26.7.10:/mnt/tank/cloudstack/secondary >>>> /mnt/secondary/ >>>> >>>> >>>> All Directories: [x] Allow mounting of any subdirectory under this mount >>>> point ifselected. Otherwise, only the top level directory can be >>>> mounted. >>>> Authorized networks: 172.26.7.0/24 >>>> Mapall User: [root] >>>> Mapall Group: [wheel] >>>> >>>> Regards, >>>> Adrian Sender >>>> >>>> >>>> On 2019-04-04 23:09, Nux! wrote: >>>>> Hi, >>>>> >>>>> Has anyone managed to use FreeNAS for Secondary Storage? >>>>> Can't seem to get past the no_root_squash requirement which I can't >>>>> seem to enable on FreeNAS. >>>>> >>>>> >>>>> -- >>>>> Sent from the Delta quadrant using Borg technology! >>>>> >>>>> Nux! > > > > > www.nux.ro