ZFS filesystem: export for more than one subnet

[Jeremy Chadwick]

On Mon, Sep 08, 2008 at 01:26:30PM +0400, Dmitry Morozovsky wrote:
> On Mon, 8 Sep 2008, Jeremy Chadwick wrote:
> JC> You changed the syntax of what I gave you as an example.  Look closely:
> JC> 
> JC> # zfs set sharenfs="ro,network=aaa/xx,network=bbb/yy,network=ccc/zz" some_fs
> JC> 
> JC> Here's what you typed in:
> JC> 
> JC> # zfs set sharenfs="ro,alldirs,network=195.54.192.0/26,192.168.39.0/24" bv/FreeBSD
> 
> Anyway, it does not work, alas:
> 
> marck at beaver:~# zfs set sharenfs="ro,alldirs,network=195.54.192.0/26,network=192.168.39.0/24" bv/FreeBSD
> marck at beaver:~# tail /var/log/daemon 
> Sep  8 13:22:11 <daemon.err> beaver mountd[25992]: network/host conflict
> Sep  8 13:22:11 <daemon.err> beaver mountd[25992]: bad exports list line /FreeBSD       -ro -alldirs -network
> marck at beaver:~# cat /etc/zfs/exports 
> # !!! DO NOT EDIT THIS FILE MANUALLY !!!
> 
> /FreeBSD        -ro -alldirs -network=195.54.192.0/26 -network=192.168.39.0/24 

Doh!  Bummer.  :-(

> What I' m trying to express is that there would be need to export the same file 
> system to different address blocks *with different options* - -such as rw/ro, 
> and/or maproot/mapall.

Correct me if I'm wrong: you want an equivalent of the below to actually
work (speaking strictly from an /etc/exports perspective):

/FreeBSD	-ro -alldirs -network=192.168.1.0/24
/FreeBSD	-rw -alldirs -network=192.168.100.0/24
/FreeBSD	-ro -alldirs -network=10.0.0.0/8

Is this right?  If so, I can imagine addressing/fixing this will be
complex.

> I'm starting to think we should either mimic such functionality from 
> OpenSolaris or invent it.

I agree.  A centralised command like share(1) would be sufficient for
what's needed; in concept, something like pw(8) for NFS shares.

-- 
| Jeremy Chadwick                                jdc at parodius.com |
| Parodius Networking                       http://www.parodius.com/ |
| UNIX Systems Administrator                  Mountain View, CA, USA |
| Making life hard for others since 1977.              PGP: 4BD6C0CB |