Disable Portmapper services

[mhrmsn]

Is your feature request related to a problem? Please describe.
Currently it seems that setting up QuickStack also enables Portmapper services, e.g. rpcbind which can potentially be used for DDoS reflection attacks, see BSI / Openly accessible Portmapper services.

rpcbind only seems to be required for longhorn / nfs v3, so it might be ok to simply disable it. See also these issues:
longhorn/longhorn#2603
longhorn/longhorn#6237

Describe the solution you'd like
Disable rpcbind after setup of QuickStack:

systemctl stop rpcbind.service rpcbind.socket
systemctl disable rpcbind.service rpcbind.socket

Describe alternatives you've considered
No alternative solution considered. Alternatively it might be possible to limit portmapping services to nodes' IP addresses or similar.

Additional context
QuickStack v0.0.2

[biersoeckli]

Hello @mhrmsn

Thank you for reporting this issue! I'll investigate it on a test cluster and take the necessary steps accordingly.
I'll post an update in this issue.

[biersoeckli]

This suggestion was merged by #24