mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-21 13:10:33 +00:00
Code Issues Wiki Activity

nfs: set up request-key for id mapping

Browse source 
A patch is necessary upstream to support multiple configs via symlinks
in /etc/request-key.d

Once that is done, we can add support for CIFS as well
This commit is contained in:
Kai Wohlfahrt 2019-11-27 21:01:34 +00:00
parent 0dce66a6ec
commit b1c10bc8b2
2 changed files with 8 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
nixos/modules/tasks/filesystems/nfs.nix
View file

@ -25,6 +25,9 @@ let
'';
nfsConfFile = pkgs.writeText "nfs.conf" cfg.extraConfig;
requestKeyConfFile = pkgs.writeText "request-key.conf" ''
create id_resolver * * ${pkgs.nfs-utils}/bin/nfsidmap -t 600 %k %d
'';
cfg = config.services.nfs;
@ -57,9 +60,12 @@ in
systemd.packages = [ pkgs.nfs-utils ];
environment.systemPackages = [ pkgs.keyutils ];
environment.etc = {
"idmapd.conf".source = idmapdConfFile;
"nfs.conf".source = nfsConfFile;
"request-key.conf".source = requestKeyConfFile;
};
systemd.services.nfs-blkmap =

11
nixos/tests/nfs/kerberos.nix
View file

@ -27,13 +27,6 @@ let
};
};
environment = {
etc."request-key.conf".text = ''
create id_resolver * * ${pkgs.nfs-utils}/bin/nfsidmap -t 600 %k %d
'';
systemPackages = with pkgs; [ keyutils ];
};
in
{
@ -41,7 +34,7 @@ in
nodes = {
client = { lib, ... }:
{ inherit krb5 users environment;
{ inherit krb5 users;
networking.extraHosts = hosts;
networking.domain = "nfs.test";
@ -57,7 +50,7 @@ in
};
server = { lib, ...}:
{ inherit krb5 users environment;
{ inherit krb5 users;
networking.extraHosts = hosts;
networking.domain = "nfs.test";