OpenSolaris 2008.11 & ESX (Security Part 2)

If you are using OpenSolaris and NFS for your datastores and using ESX you need to share out your zfs filesystems with anon=0 since ESX wants to write to the NFS datastore as root.

zfs set sharenfs=anon=0 usbpool/virtuals

I wouldn’t mind having stuff like this if I could figure out how to properly get logging of the issues/connections in OpenSolaris. Anybody know how to increasing logging for the NFS services in OpenSolaris?

One thought on “OpenSolaris 2008.11 & ESX (Security Part 2)

  1. you might rather want to use:

    zfs set sharenfs=rw=@192.168.1.0/24,root=@192.168.1.0/24 storage/vms

    which allows access for the entire subnet, or alternatively restrict access further down to the esx server(s) ip.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> <pre lang="" line="" escaped="" highlight="">