OpenSolaris 2008.11 & ESX (Security Part 2)

If you are using OpenSolaris and NFS for your datastores and using ESX you need to share out your zfs filesystems with anon=0 since ESX wants to write to the NFS datastore as root.

zfs set sharenfs=anon=0 usbpool/virtuals

I wouldn’t mind having stuff like this if I could figure out how to properly get logging of the issues/connections in OpenSolaris. Anybody know how to increasing logging for the NFS services in OpenSolaris?

Posted on February 5, 2009 at 5:01 am by iguy · Permalink
In: Uncategorized · Tagged with: , , ,

One Response

Subscribe to comments via RSS

  1. Written by thomas
    on 10 March 2009 at 11:14 pm
    Permalink

    you might rather want to use:

    zfs set sharenfs=rw=@192.168.1.0/24,root=@192.168.1.0/24 storage/vms

    which allows access for the entire subnet, or alternatively restrict access further down to the esx server(s) ip.

Subscribe to comments via RSS

Leave a Reply