From 9ec7e69b76787550af3acf4ecb4fcc7805b26d55 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Fri, 8 Aug 2025 18:48:45 +0300 Subject: Update content for gemtext --- ...25-07-14-f3s-kubernetes-with-freebsd-part-6.gmi | 25 ++++++++++++++++++ ...7-14-f3s-kubernetes-with-freebsd-part-6.gmi.tpl | 24 +++++++++++++++++ gemfeed/atom.xml | 30 +++++++++++++++++++++- 3 files changed, 78 insertions(+), 1 deletion(-) (limited to 'gemfeed') diff --git a/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.gmi b/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.gmi index 9a33b412..ba315359 100644 --- a/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.gmi +++ b/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.gmi @@ -49,6 +49,7 @@ This is the sixth blog post about the f3s series for self-hosting demands in a h * ⇢ ⇢ ⇢ Automatic Failback After Reboot * ⇢ ⇢ Client Configuration for NFS via Stunnel * ⇢ ⇢ ⇢ Configuring Rocky Linux Clients (`r0`, `r1`, `r2`) +* ⇢ ⇢ ⇢ NFSv4 user mapping config on Rocky * ⇢ ⇢ ⇢ Testing NFS Mount with Stunnel * ⇢ ⇢ ⇢ Testing CARP Failover with mounted clients and stale file handles: * ⇢ ⇢ ⇢ Complete Failover Test @@ -1356,6 +1357,30 @@ EOF Note: Each client must use its certificate file (`r0-key.pem`, `r1-key.pem`, `r2-key.pem`, or `earth-key.pem` - the latter is for my Laptop, which can also mount the NFS shares). +### NFSv4 user mapping config on Rocky + +> Update: This section was added 08.08.2025! + +For this, we need to set the `Domain` in `/etc/idmapd.conf` on all 3 Rocky hosts to `lan.buetow.org` (remember, earlier in this blog post we set the `nfsuserd` domain on the NFS server side to `lan.buetow.org` as well!) + +``` +[General] + +Domain = lan.buetow.org +. +. +. +``` + +And afterwards, we need to run the following on all 3 Rocky hosts:: + +```sh +[root@r0 ~]# systemctl enable --now nfs-idmapd +[root@r0 ~]# systemctl enable --now nfs-client.target +``` + +and then, safest, reboot those. + ### Testing NFS Mount with Stunnel To mount NFS through the stunnel encrypted tunnel, we run: diff --git a/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.gmi.tpl b/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.gmi.tpl index cd23b908..66573a2e 100644 --- a/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.gmi.tpl +++ b/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.gmi.tpl @@ -1309,6 +1309,30 @@ EOF Note: Each client must use its certificate file (`r0-key.pem`, `r1-key.pem`, `r2-key.pem`, or `earth-key.pem` - the latter is for my Laptop, which can also mount the NFS shares). +### NFSv4 user mapping config on Rocky + +> Update: This section was added 08.08.2025! + +For this, we need to set the `Domain` in `/etc/idmapd.conf` on all 3 Rocky hosts to `lan.buetow.org` (remember, earlier in this blog post we set the `nfsuserd` domain on the NFS server side to `lan.buetow.org` as well!) + +``` +[General] + +Domain = lan.buetow.org +. +. +. +``` + +And afterwards, we need to run the following on all 3 Rocky hosts:: + +```sh +[root@r0 ~]# systemctl enable --now nfs-idmapd +[root@r0 ~]# systemctl enable --now nfs-client.target +``` + +and then, safest, reboot those. + ### Testing NFS Mount with Stunnel To mount NFS through the stunnel encrypted tunnel, we run: diff --git a/gemfeed/atom.xml b/gemfeed/atom.xml index 0066bd95..6843e7c1 100644 --- a/gemfeed/atom.xml +++ b/gemfeed/atom.xml @@ -1,6 +1,6 @@ - 2025-08-08T18:20:01+03:00 + 2025-08-08T18:47:55+03:00 foo.zone feed To be in the .zone! @@ -544,6 +544,7 @@ content = "{CODE}"
  • ⇢ ⇢ Automatic Failback After Reboot
  • ⇢ Client Configuration for NFS via Stunnel
  • ⇢ ⇢ Configuring Rocky Linux Clients (r0, r1, r2)
    • +
  • ⇢ ⇢ NFSv4 user mapping config on Rocky
  • ⇢ ⇢ Testing NFS Mount with Stunnel
  • ⇢ ⇢ Testing CARP Failover with mounted clients and stale file handles:
  • ⇢ ⇢ Complete Failover Test
    • @@ -2013,6 +2014,33 @@ EOF
    Note: Each client must use its certificate file (r0-key.pem, r1-key.pem, r2-key.pem, or earth-key.pem - the latter is for my Laptop, which can also mount the NFS shares).

    +

    NFSv4 user mapping config on Rocky


    +
    +Update: This section was added 08.08.2025!
    +
    +For this, we need to set the Domain in /etc/idmapd.conf on all 3 Rocky hosts to lan.buetow.org (remember, earlier in this blog post we set the nfsuserd domain on the NFS server side to lan.buetow.org as well!)
    +
    +
    +[General]
+
+Domain = lan.buetow.org
+.
+.
+.
+
    +
    +And afterwards, we need to run the following on all 3 Rocky hosts::
    +
    + +
    [root@r0 ~]# systemctl enable --now nfs-idmapd
+[root@r0 ~]# systemctl enable --now nfs-client.target
+
    +
    +and then, safest, reboot those.
    +

    Testing NFS Mount with Stunnel



    To mount NFS through the stunnel encrypted tunnel, we run:
    -- cgit v1.2.3