New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
sharenfs and IPv6 on Ubuntu 12.04 #1894
Comments
|
@sjthespian Just a bug I suspect. Can you successfully export ZFS via IPv6 is you do it the usual way in Linux and not via the sharenfs property? |
|
You're right, it looks like a zfs sharenfs bug. I just verified that it works fine if set sharenfs=off and just put the filesystem in /etc/exports. |
|
The plot thickens. I was under the impression that it worked perfectly. And it seems to do so, for IPv4. However: Effectively gets: So I THOUGHT I had everything locked down, but in practice, I don't. @sjthespian I don't know why you're using the @-sign in the sharenfs-command, I can set it withouth, and without any brackets. Although it gets exported to the whole world.. |
Becomes: So ZoL breaks on the IPv6-address-part. But that's not all. exportfs complains about this being broken, but converts it to 'just share to *'. So, two issues here: |
|
The '@' was one of a large number of things I had tried. I found it in one of the assortment of howtos I stumbled across while I was trying to get this working. I don't understand your #2 above however, IPv6 is working perfectly for me with exportfs (Ubuntu 12.04 server). I have the following in my /etc/exports file (not my real IPs of course): After running exportfs -a I get the expected results with showmount -e from my macbook: The /srv/www filesystem was shared out with zfs set sharifs, /home is set with sharenfs off and only listed in /etc/exports. |
|
@sjthespian Yes. While the editing of /etc/exportfs and exporting that does work, that is not what ZoL seems to be doing. ZoL runs exportfs directly, with 'client:/path' as final argument. An IPv6-address there isn't supported: But you can export with an IPv4-address there.. |
|
@behlendorf has this been pushed back? No IPv6 support in 2015 is a bit embarrassing, and I imagine it's a moderately trivial parsing issue? |
|
Patches are welcomed. :) |
|
@pdf It's just a matter of someone having time and motivation to write the patches. The file systems can be shared over IPv6 today through the normal Linux mechanisms. |
|
I'd do it myself if my C skills were sharper Even though you may create IPv6 shares in the traditional manner, this is still problematic because it makes it hard to document procedures; it means that either configuration needs to live in two places (confusing, not maintainable), or sharenfs just can't be used in environments with IPv6; and shares cannot be synchronized via ZFS send/receive, so there has to be some sort of extra process to make replication work. |
|
Can confirm. |
|
duplicate/related: #380 |
|
I have requested a CVE number for this as it is a security bug by my understanding. (IPv6 restrictions from the config are not applied). |
|
MITRE assigned CVE-2013-20001 to this. |
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
Closes: openzfs#11171, openzfs#1894 Signed-off-by: Felix Dörre <felix@dogcraft.de>
|
hello! |
I am trying to share a zfs filesystem over both IPv4 and IPv6 but just cannot get it to work. I know the support is there in native NFS, as it works fine for non-zfs filesystems.
Here is an example:
I have tried the address both with and w/o square brackets, it doesn't make any difference.
Any ideas if there is a magic syntax for IPv6 addresses? Or is this just a bug/
The text was updated successfully, but these errors were encountered: