[OpenAFS] [workaround] NFS export oddness

Christof Hanke christof.hanke@rzg.mpg.de
Fri, 2 Nov 2012 10:02:53 +0100


Instead of this unionfs-workaround,

you could also use a user-space nfs-server, like 
unfs http://unfs3.sourceforge.net/
but of course, you'll loose the kerberos-security as well.

Christof


Am Thu, 1 Nov 2012 17:31:31 -0700
schrieb Timothy Balcer <timothy@telmate.com>:

> I found a workaround for now.. I hope it finds some use amongst the
> community, assuming the linux NFS translator really isn't working
> properly (as seems to be intimated in the emails I recently found)
> 
> You can use unionfs with an afs volume and a normal volume, and then
> NFS export THAT unionfs directory, at which point the files will be
> accessible. So if you just want to export afs via nfs, you can
> unionfs it with an empty directory, and then NFS export that one.
> 
> so for example
> 
> unionfs-fuse /afs/foo.com/home/bar:/empty /test
> 
> and in /etc/exports
> 
> /test *(options)
> 
> This works for read.. I haven't tested for write.
> 
> So what I am going to do is have my application write to the local
> volume, and have a process flush that directory to the afs volume
> from time to time. The unionfs volume won't change at all, and will
> present a uniform appearance.
> 
> I'm still interested in NFS translation though. This would be a
> securoty problem if the IPs were not entirely sequestered.