Skip to content

kerberized nfs ~/remote#245

Draft
24apricots wants to merge 14 commits intomainfrom
nfs-on-desktops
Draft

kerberized nfs ~/remote#245
24apricots wants to merge 14 commits intomainfrom
nfs-on-desktops

Conversation

@24apricots
Copy link
Copy Markdown
Member

No description provided.

jaysa68
jaysa68 previously approved these changes Apr 10, 2026
Copy link
Copy Markdown
Member

@jaysa68 jaysa68 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nfs.enable = true;

@24apricots 24apricots force-pushed the nfs-on-desktops branch 2 times, most recently from 2a6a9ba to 4a9fa9d Compare April 10, 2026 09:09
- /services and /remote are mounted with nfs
- ~/remote is bind mounted to the remote home directory in /remote on
  login with pam_mount

ocf.nfs:
- new ocf.nfs.mountRemote
- fix incorrect "lib.mkIf cfg.mountHome" -> "lib.mkIf cfg.mountServices"
  for filesystems."/services"
- tmpfs will be mounted on /home and each users home directory, and
  unmounted on logout so that data is cleared immediately instead of on
  reboot.
- stuff related to home directories moved to an ocf nix module
- `ocf.nfs.mountHome` and `ocf.nfs.mountRemote` have been combined into
  `ocf.nfs.mount`: the public_html symlink in our users' homes expects
  `/services` to exist, so combining makes more sense.
- `ocf.nfs.asRemote`: change mount location of nfs homes to `/remote`
  (for hosts that have their own /home such as desktops).
- add ocf.nfs.cache, ocf.nfs.kerberos, ocf.nfs.softerr
branch 'tmpfs-home-per-login' (config to mount a tmpfs for each users'
home directory on login) contains a script that copies /etc/skel to a
newly mounted tmpfs home on login via pam_exec. this script will be
modified to also set up ~/remote when remote home directories are
mounted at /remote with nfs.
@24apricots
Copy link
Copy Markdown
Member Author

this is almost done: need to test latest commit, clean things up

@24apricots 24apricots self-assigned this Apr 14, 2026
@24apricots
Copy link
Copy Markdown
Member Author

ill squash the fixup commits before merging

;;
close_session)
# unmount everything under the users home dir
# FIXME: handle cases where user leaves the mountpoint busy
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

important fixme

# bind mount ~/remote to nfs
echo "ocf-mount-remote: bind mounting $remote_source/ to $remote_dest."
mkdir -p "$remote_dest"
mount -o bind "$remote_source" "$remote_dest"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

also probably want to not follow symlinks

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ie mount public_html on its own instead of accessing it via symlink

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants