XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    XO Remote mount.nfs: access denied by server while mounting

    Scheduled Pinned Locked Moved Xen Orchestra
    26 Posts 7 Posters 4.8k Views 5 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • tjkreidlT Offline
      tjkreidl Ambassador @daninmanchester
      last edited by

      @daninmanchester Run the "showmount" comand against your NFS server to see if you have access permissions. https://www.thegeekdiary.com/showmount-command-examples-in-linux/

      daninmanchesterD 1 Reply Last reply Reply Quote 0
      • daninmanchesterD Offline
        daninmanchester @tjkreidl
        last edited by

        @tjkreidl verified they can be seen :

        Export list for 192.168.11.60:
        /export/Backups 192.168.11.0/24
        /export/Everyone 192.168.11.0/24
        /export 192.168.11.0/24

        tjkreidlT 1 Reply Last reply Reply Quote 0
        • tjkreidlT Offline
          tjkreidl Ambassador @daninmanchester
          last edited by tjkreidl

          @daninmanchester What does showmount list for the server exports? Is the local 192.168.X.X subnet properly exported from the NFS server? Check the /etc/exports files on the NFS server and make sure that directory is listed. BTW, do you have any sort of multipathing implemented?

          daninmanchesterD 1 Reply Last reply Reply Quote 0
          • daninmanchesterD Offline
            daninmanchester @tjkreidl
            last edited by

            @tjkreidl

            I don't touch things manually, it's done through OMV. This is the exports file. I don't have any multipathing as far as I know. It's not something I've set up.

            # This file is auto-generated by openmediavault (https://www.openmediavault.org)
            # WARNING: Do not edit this file, your changes will get lost.
            
            # /etc/exports: the access control list for filesystems which may be exported
            #               to NFS clients.  See exports(5).
            /export/Everyone 192.168.11.0/24(fsid=94a977de-432c-4653-9870-a1cd0a83110d,ro,subtree_check,insecure,crossmnt)
            /export/Backups 192.168.11.0/24(fsid=bb941285-c5d8-492d-9b49-43a2dc30557c,rw,all_squash,insecure,async,no_subtree_check,anongid=100,crossmnt)
            
            # NFSv4 - pseudo filesystem root
            /export 192.168.11.0/24(ro,fsid=0,root_squash,no_subtree_check,hide)
            /export 192.168.11.70(ro,fsid=0,root_squash,no_subtree_check,hide)
            
            tjkreidlT 1 Reply Last reply Reply Quote 0
            • tjkreidlT Offline
              tjkreidl Ambassador @daninmanchester
              last edited by

              @daninmanchester Hmmm...maybe an NFS V3 vs. V4 support issue? Could you provide the full output of "showmount -e 192.168.11.60" ?

              daninmanchesterD 1 Reply Last reply Reply Quote 0
              • daninmanchesterD Offline
                daninmanchester @tjkreidl
                last edited by

                @tjkreidl what version should I be using or can I force XO to use a particular version?

                It doesn't output any more than I shared last time :

                bash-5.1# showmount -e 192.168.11.60
                Export list for 192.168.11.60:
                /export/Backups 192.168.11.0/24
                /export/Everyone 192.168.11.0/24
                /export 192.168.11.0/24
                bash-5.1#

                It just occurred to me, I'm running XO in a docker not direct on the host. Do I need some network config to enable NFS?

                DanpD 1 Reply Last reply Reply Quote 0
                • DanpD Offline
                  Danp Pro Support Team @daninmanchester
                  last edited by

                  @daninmanchester Have you read this info?

                  daninmanchesterD 1 Reply Last reply Reply Quote 0
                  • H Offline
                    HeMaN @Danp
                    last edited by HeMaN

                    @Danp said in XO Remote mount.nfs: access denied by server while mounting:

                    @daninmanchester said in XO Remote mount.nfs: access denied by server while mounting:

                    "stderr": "mount.nfs: access denied by server while mounting 192.168.11.60:/Backups",

                    Would appear to be a rights issue to me.

                    @tjkreidl verified they can be seen :

                    Export list for 192.168.11.60:
                    /export/Backups 192.168.11.0/24
                    /export/Everyone 192.168.11.0/24
                    /export 192.168.11.0/24

                    do you need to add "/export" (/export/Backups ) to be able to find the right path?

                    tjkreidlT 1 Reply Last reply Reply Quote 0
                    • tjkreidlT Offline
                      tjkreidl Ambassador @HeMaN
                      last edited by tjkreidl

                      @HeMaN Yes, if I recall correctly, in the /etc/exports file. the full path should be specified and then "exportfs -a" should be issued to refresh the export list.
                      I just noticed your error message doesn't include the /export directory in front:
                      mount.nfs: access denied by server while mounting 192.168.11.60:/Backups

                      daninmanchesterD 1 Reply Last reply Reply Quote 0
                      • daninmanchesterD Offline
                        daninmanchester @Danp
                        last edited by

                        @Danp no, I hadn't seen that. but I think I have now done this without any change to my issue. One thing that wasn't 100% clear is where sudoers should be on docker.

                        /etc/sudoers?

                        1 Reply Last reply Reply Quote 0
                        • daninmanchesterD Offline
                          daninmanchester @tjkreidl
                          last edited by

                          @tjkreidl I have tried various flavors.

                          2ee6b541-87da-4d08-bf16-cc0055118d89-image.png

                          1 Reply Last reply Reply Quote 0
                          • daninmanchesterD Offline
                            daninmanchester
                            last edited by

                            Well .... I'm totally baffled.
                            I've tried reapplying permissions.
                            forcing the server UID/GID
                            forcing the client UID/GID.
                            NOACLs
                            Squashing.

                            One thing I can say, is that it is working on my host so it must be something about my XO setup trying to talk to it. which may well still be permissions.

                            4397e128-3a81-4f7f-9d9c-8bb6243a182c-image.png

                            1 Reply Last reply Reply Quote 0
                            • daninmanchesterD Offline
                              daninmanchester
                              last edited by

                              okay, so I further narrowed it down. on the host machine I can mount. it is only within the docker container it is the issue. either at the command line or at XO. This leads me to believe this is a docker related problem not XO.

                              Sorry to have taken up your time, but thanks very much for your help!
                              At least i have a clear direction to google now.

                              M tjkreidlT 2 Replies Last reply Reply Quote 0
                              • M Offline
                                mjtbrady @daninmanchester
                                last edited by

                                @daninmanchester

                                What is the IP address of the host that is running XO?

                                The docker container will need the SYS_ADMIN capability to do NFS mounts.

                                tjkreidlT 1 Reply Last reply Reply Quote 0
                                • tjkreidlT Offline
                                  tjkreidl Ambassador @daninmanchester
                                  last edited by

                                  @daninmanchester I would think Docker is involved, as well. I was going to suggest to create a "standard" test VM ans see if you can connect storage to it. If so, that would put the blame on something specific to the VM that has that Docker container.

                                  1 Reply Last reply Reply Quote 0
                                  • tjkreidlT Offline
                                    tjkreidl Ambassador @mjtbrady
                                    last edited by

                                    @mjtbrady That seems right, because the Docker instanceis independent and internal to the VM that otherwise is part of the XCP-ng networking structure and wouldn't have the necessary access permissions on it's own.

                                    1 Reply Last reply Reply Quote 0
                                    • DanpD Offline
                                      Danp Pro Support Team
                                      last edited by

                                      Could this be due to a missing package (nfs-common)?

                                      1 Reply Last reply Reply Quote 0
                                      • daninmanchesterD Offline
                                        daninmanchester
                                        last edited by

                                        I setup another VM as someone suggested and the NFS share mounted and worked. So there is something I am not understanding about docker permissions / requirements.

                                        In the end, following a permissions reset and forcing the NFS share to squash and use my user/group ID I think I have progress. I can see it is writing to the NFS share.

                                        Then I got : EEXIST: file already exists, open '/run/xo-server/mounts/6299d107-2aa2-41bf-bfd7-2f487ff5422f/xo-vm-backups/801e2b10-5c7d-b7af-ad5e-fbcc83e47d5b/.20220930T221548Z.xva'

                                        A quick google led me to this being related to nfs 3. I switched to NFS 4 then I got path not found.

                                        Not sure why, but I tried removing "export" from the path and it worked.

                                        It does appear now to be running a backup job .... fingers crossed.

                                        What a mine field!

                                        Thanks for all the pointers.

                                        tjkreidlT 1 Reply Last reply Reply Quote 0
                                        • tjkreidlT Offline
                                          tjkreidl Ambassador @daninmanchester
                                          last edited by

                                          @daninmanchester Yes, a mine field is about right. Super good ou have made so much progress!

                                          1 Reply Last reply Reply Quote 0
                                          • olivierlambertO Offline
                                            olivierlambert Vates 🪐 Co-Founder CEO
                                            last edited by

                                            Now you understand why we sell/distribute XO in a virtual appliance we can test 😉

                                            daninmanchesterD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post