NFS3 over KVM-Guest don't map UnixACLs

UNIX for Advanced & Expert Users
1

Hi,

I have an problem with ACLs over NFS3. The Problem is, when i mount a nfsshare from an KVMguest, the UnixACLs were not mapped too. I don't know why. But this is only when i have the NFSshares on an virtulamachine. When i do the same with ein real machine, ACLs work well.
You can see that:

mount from physical machine:

touch data.txt
rwrw--+ data.txt

mount from virtual machine:

touch data.txt
rw-r--  data.txt

When a say "mount" on both. The ACL-flage is set. Strange, very strange.
I've tested this with Ubuntu 12.04 64bit and Gentoo 64bit.

I've testet this with anoter storageformat (qcow2, raw), with virtio, SATA.
I've testet the filesystems ext4 and jfs. Every time the same. I feel pretty helpless.

Thanks a lot for help
Greetings darktux

2

Did all the supporting libraries and config files make it into the virtual machine?
No soft errors logged at mount time, either end?

3

Yes, i've checked it again. And i can't found nothing.

I added these two lines to NFSserver in the fstab:

nfsd /proc/fs/nfsd nfsd auto,defaults,acl 0 0
sunrpc /var/lib/nfs/rpc_pipefs rpc_pipefs auto,defaults,acl 0 0

and when i say mount:

nfsd on /proc/fs/nfsd type nfsd (rw,acl)
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw,acl)

And on the client i see under the mounted share also "acl" but it still not work.

4

It looks pretty good. I wonder if they would mount right using nfs4 or SAMBA ? Gotta love the bleeding edge. :smiley:

5

I finally have the problem solved. It was a missing header line like this:

/export	*(acl,sync,no_subtree_check,fsid=0,rw)

Normaly this used only by nfs4, but nfs3 need the same for using acl's. And it has nothing to do with virtualization. On real hardware it worked because, the real hardware is managed with webmin. And webmin generated this line automaticly.

Greetings :slight_smile: