mirror of
https://github.com/opnsense/src.git
synced 2026-04-15 14:29:58 -04:00
0bb08f21cc
Now that commit cbbb22031f is in main,
it is possible to run nfsd(8), nfsuserd(8), mountd(8),
gssd(8) and rpc.tlsservd(8) in an appropriately configured vnet
prison if the "allow.nfsd" option is specified in jail.conf.
This patch fixes the rc scripts for this.
Mostly just replaces the "nojail" KEYWORD with "nojailvnet",
but also avoids setting vfs.nfsd.srvmaxio in a prison, since it
must be set outside of the prisons and applies to all
nfsd(8) instances.
Reviewed by: jamie
MFC after: 3 months
Differential Revision: https://reviews.freebsd.org/D38809
65 lines
1.4 KiB
Bash
Executable file
65 lines
1.4 KiB
Bash
Executable file
#!/bin/sh
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
# PROVIDE: nfsd
|
|
# REQUIRE: mountcritremote mountd hostname gssd nfsuserd
|
|
# KEYWORD: nojailvnet shutdown
|
|
|
|
. /etc/rc.subr
|
|
|
|
name="nfsd"
|
|
desc="Remote NFS server"
|
|
rcvar="nfs_server_enable"
|
|
command="/usr/sbin/${name}"
|
|
nfs_server_vhost=""
|
|
|
|
load_rc_config $name
|
|
start_precmd="nfsd_precmd"
|
|
sig_stop="USR1"
|
|
|
|
nfsd_precmd()
|
|
{
|
|
local _vhost
|
|
rc_flags="${nfs_server_flags}"
|
|
|
|
# Load the modules now, so that the vfs.nfsd sysctl
|
|
# oids are available.
|
|
load_kld nfsd || return 1
|
|
|
|
if [ -n "${nfs_server_maxio}" ] && ! check_jail jailed; then
|
|
if ! sysctl vfs.nfsd.srvmaxio=${nfs_server_maxio} >/dev/null; then
|
|
warn "Failed to set server max I/O"
|
|
fi
|
|
fi
|
|
|
|
if checkyesno nfs_reserved_port_only; then
|
|
echo 'NFS on reserved port only=YES'
|
|
sysctl vfs.nfsd.nfs_privport=1 > /dev/null
|
|
else
|
|
sysctl vfs.nfsd.nfs_privport=0 > /dev/null
|
|
fi
|
|
|
|
if checkyesno nfs_server_managegids; then
|
|
force_depend nfsuserd || err 1 "Cannot run nfsuserd"
|
|
fi
|
|
|
|
if checkyesno nfsv4_server_enable; then
|
|
sysctl vfs.nfsd.server_max_nfsvers=4 > /dev/null
|
|
elif ! checkyesno nfsv4_server_only; then
|
|
echo 'NFSv4 is disabled'
|
|
sysctl vfs.nfsd.server_max_nfsvers=3 > /dev/null
|
|
fi
|
|
|
|
if ! checkyesno nfsv4_server_only; then
|
|
force_depend rpcbind || return 1
|
|
fi
|
|
|
|
force_depend mountd || return 1
|
|
if [ -n "${nfs_server_vhost}" ]; then
|
|
command_args="-V \"${nfs_server_vhost}\""
|
|
fi
|
|
}
|
|
|
|
run_rc_command "$1"
|