NFS Ganesha on EL8 needs redesign

Previous Topic Next Topic
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

NFS Ganesha on EL8 needs redesign

Strahil Nikolov
Hello All,

I have been playing around with Ganesha on CentOS 8 and I have noticed some issues so far. Could you assist me in pinpointing the correct location for tracking the issues:
- 'gluster nfs-ganesha enable' builds pacemaker groups that use 'ocf:heartbeat:portblock', but that resource is relying on IPTABLES, while EL8 is using NFTABLES.
- nfs-ganesha.service is starting the process via "/bin/bash -c" which SELINUX hates and of course blocks. Custom selinux policies were needed.
- the glusterfs-ganesha.x86_64 rpm is deploying the following boolean 'semanage boolean -m ganesha_use_fusefs --on' but it seems that something disables it. Manual setting of 'setsebool -P ganesha_use_fusefs 1' is necessary
- rpcbind is blocked by selinux, I had to enable 'rpcd_use_fusefs'
- nfs-ganesha.service is starting before the shared volume is mounted locally, dependency is needed like this one:
[root@glustera ~]# cat /etc/systemd/system/nfs-ganesha.service.d/01-debug.conf                                      

I will rebuild my cluster to find out if I missed something.
Any feedback is appreciated.

P.S.: If anyone is interested , I can share the deployment procedure.

Best Regards,
Strahil Nikolov

Community Meeting Calendar:

Schedule -
Every 2nd and 4th Tuesday at 14:30 IST / 09:00 UTC

Gluster-devel mailing list
[hidden email]