Page MenuHomeFreeBSD

Fix rc scripts so that nfsd(8), nfsuserd(8), gssd(8) and rpc.tlsservd(8) can run in vnet prisons
ClosedPublic

Authored by rmacklem on Feb 27 2023, 2:43 PM.
Tags
Referenced Files
Unknown Object (File)
Mon, May 6, 8:02 AM
Unknown Object (File)
Thu, May 2, 4:16 PM
Unknown Object (File)
Thu, Apr 25, 12:43 AM
Unknown Object (File)
Mar 9 2024, 4:47 AM
Unknown Object (File)
Mar 9 2024, 4:47 AM
Unknown Object (File)
Mar 9 2024, 4:47 AM
Unknown Object (File)
Mar 9 2024, 4:41 AM
Unknown Object (File)
Mar 9 2024, 4:41 AM
Subscribers

Details

Summary

Once D37741 and D38808 are committed to main,
it will be possible to run these daemons in a vnet
prison if the "allow.nfsd" option is specified in jail.conf.

This patch fixes the rc scripts for this.
Mostly just removes the "nojail" KEYWORD, but also
avoids setting vfs.nfsd.srvmaxio in a prison, since it
must be set outside of the prisons and applies to all
nfsd(8) instances.

Test Plan

These modified scripts have been tested on a system
configured to run nfsd(8) and friends bith inside and
outside of vnet prisons.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

Added a check for the jail being a vnet jail.
Also, mountd got missed and is now in the patch.

Just use the KEYWORD novnetjail to indicate the
daemons can run in a vnet jail, as suggested by jamie@.

Changed novnetjail to nojailvnet.

I missed this when testing, because the daemons
terminate if the jail isn't correctly configured and
I didn't look in /var/log/messages in the jails, to see
if they tried to start up.

This revision is now accepted and ready to land.Mar 12 2023, 5:42 PM