-
Notifications
You must be signed in to change notification settings - Fork 502
ExportParams
The man page for exports from the current development level of the source is:
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-export-config.rst
Additionally, EXPORT { FSAL {} } options are documented in the individual FSAL man pages:
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-gpfs-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-gluster-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-ceph-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-kvsfs-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-lustre-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-proxy-v3-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-proxy-v4-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-rgw-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-vfs-config.rst
https://github.com/nfs-ganesha/nfs-ganesha/blob/next/src/doc/man/ganesha-xfs-config.rst
In Ganesha configurations where there are variety of "customers" of the server, one might have exports like:
/customer-one/exp1
/customer-one/exp2
/customer-two/exp1
/customer-two/exp2
If each of those is configured as an export with client lists limiting access, anyone who mounts the pseudo root and does an ls will see customer-one and customer-two. This may be undesirable. A simple way to fence of each customers exports is to create additions PSEUDO exports, for example (assuming customer-one uses subnet 192.168.1.x and customer-two uses 192.168.2.x). With this configuration, clients mounting pseudo root from customer-one will ONLY see customer-one when they ls the root, while customer-two clients will ONLY see customer-two.
EXPORT
{
Export_Id = 65531;
Path = /customer-one;
Pseudo = /customer-one;
Protocols = 4;
Access_Type = None;
FSAL
{
Name = PSEUDO;
}
CLIENT
{
Clients=192.168.1.0/8;
Access_Type = RW;
}
}
EXPORT
{
Export_Id = 65532;
Path = /customer-two;
Pseudo = /customer-two;
Protocols = 4;
Access_Type = None;
FSAL
{
Name = PSEUDO;
}
CLIENT
{
Clients=192.168.2.0/8;
Access_Type = RW;
}
}
Additional options such as sectype may be desirable. Of course those could all derive from EXPORT_DEFAULTS.