NFS within a Jail?!

blackfriar blackfriar at inhio.eu
Sun Aug 12 12:53:42 UTC 2012


Well, yes. That was my immediate decision. Just to find an
alternative/temporary way and to wait for something more reliable and
standard.
I don't really have the critical need to proceed with such a setup right
now and it's good to know a little bit more about the status of such a
feature and what others think and tried/managed to do about it.

I really wanna thank you all for your valuable inputs.
Have a good rest of the weekend.

On Sun, 2012-08-12 at 08:40 -0400, Fbsd8 wrote:
> http://forums.freebsd.org/showthread.php?t=29968&highlight=nfsd
> 
> Found this which I think says it all at the conclusion.
> 
> March 30th, 2012
> Received some information from the FreeBSD mailing list and apparently 
> exporting NFS from an jailed environment is not possible. For those who 
> have "managed" (by heavy tweaking of sysctl.conf) to export the NFS 
> probably have these concerns: 1) Security may have been compromised on 
> their own jails as a result of tweaks and 2) Even if you manage to 
> export the NFS share under such strained boundary conditions, it may 
> cause problems in some of the application's you would like to use (eg: 
> tinderbox) finally, 3) If you try to use net/unfs3 and succeed to export 
> NFS, this will not have a very fast (ro) transport rate and will have 
> many (rw) speed limitations.
> 
> 
> My personal conclusion is to wait until the default kernel version of 
> nfs is updated to be jail-friendly before I try using nfs in jails.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 834 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20120812/6d20a7ce/attachment.pgp


More information about the freebsd-questions mailing list