Skip to content
Frank Filz edited this page Apr 19, 2023 · 2 revisions

The man page for exports from the current development level of the source is:

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-export-config.rst

Additionally, EXPORT { FSAL {} } options are documented in the individual FSAL man pages:

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-gpfs-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-gluster-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-ceph-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-kvsfs-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-lustre-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-proxy-v3-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-proxy-v4-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-rgw-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-vfs-config.rst

https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-xfs-config.rst

Export Tricks

Fencing Portions of the PseudoFS

In Ganesha configurations where there are variety of "customers" of the server, one might have exports like:

/customer-one/exp1
/customer-one/exp2
/customer-two/exp1
/customer-two/exp2

If each of those is configured as an export with client lists limiting access, anyone who mounts the pseudo root and does an ls will see customer-one and customer-two. This may be undesirable. A simple way to fence of each customers exports is to create additions PSEUDO exports, for example (assuming customer-one uses subnet 192.168.1.x and customer-two uses 192.168.2.x). With this configuration, clients mounting pseudo root from customer-one will ONLY see customer-one when they ls the root, while customer-two clients will ONLY see customer-two.

EXPORT
{
	Export_Id = 65531;
	Path = /customer-one;
	Pseudo = /customer-one;
	Protocols = 4;
	Access_Type = None;
	FSAL
	{
		Name = PSEUDO;
	}
	CLIENT
	{
		Clients=192.168.1.0/8;
		Access_Type = RW;
	}
}

EXPORT
{
	Export_Id = 65532;
	Path = /customer-two;
	Pseudo = /customer-two;
	Protocols = 4;
	Access_Type = None;
	FSAL
	{
		Name = PSEUDO;
	}
	CLIENT
	{
		Clients=192.168.2.0/8;
		Access_Type = RW;
	}
}

Additional options such as sectype may be desirable. Of course those could all derive from EXPORT_DEFAULTS.

Clone this wiki locally