diff options
Diffstat (limited to 'website/content/en/status/report-2022-10-2022-12/NFS-in-prisons.adoc')
| -rw-r--r-- | website/content/en/status/report-2022-10-2022-12/NFS-in-prisons.adoc | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/website/content/en/status/report-2022-10-2022-12/NFS-in-prisons.adoc b/website/content/en/status/report-2022-10-2022-12/NFS-in-prisons.adoc new file mode 100644 index 0000000000..d81a384b57 --- /dev/null +++ b/website/content/en/status/report-2022-10-2022-12/NFS-in-prisons.adoc @@ -0,0 +1,24 @@ +=== Enable the NFS server to run in a vnet prison + +Links: + +link:https://people.freebsd.org/%7Ermacklem/vnet.patch[Source patch for main] URL: link:https://people.freebsd.org/%7Ermacklem/vnet.patch[https://people.freebsd.org/~rmacklem/vnet.patch] + +link:https://people.freebsd.org/%7Ermacklem/nfsd-vnet-prison-setup.txt[Simple Setup Doc] URL: link:https://people.freebsd.org/%7Ermacklem/nfsd-vnet-prison-setup.txt[https://people.freebsd.org/~rmacklem/nfsd-vnet-prison-setup.txt] + +Contact: Rick Macklem <rmacklem@freebsd.org> + +Several users of FreeBSD identified a need to run the NFS server inside a vnet prison. +This turned into a small project, where I now have a patch that does this. +It is currently available at the above link for testing or on Phabricator as link:https://reviews.freebsd.org/D37519[D37519]. +Without this patch, the NFS server cannot be run in a prison. + +Not included in the above patch is the ability to run the man:rpc.tlsservd[8] and man:nfsuserd[8] daemons within the vnet prison. +I do now have patches that allow these daemons to run in the vnet prison along with man:mountd[8] and man:nfsd[8], but I would like to get the above patch into main before adding support for man:rpc.tlsservd[8] or man:nfsuserd[8]. + +At this time, the code needs reviewing and testing. +Hopefully this can be completed in the next few weeks, so that the patch can be committed to `main` and possibly also MFC'd to `stable/13`. + +==== To do + +* Testing the above patch. +* Reviewing the above patch. +* Doing the same for the man:rpc.tlsservd[8] and man:nfsuserd[8] patches. |
