Commit 1aa8ec9b authored by Leigh B Stoller's avatar Leigh B Stoller

Map NFS root to user emaproot. This is intended to stop experimental nodes

from filling up the shared files system by writing as root (and bypassing
quota). Added this as a config variable.

	NFSMAPTOUSER=emaproot

To back this out, remove this line from defs-default, reconfig, and
reinstall exports_setup, then run exports_setup.
parent d97c0a71
...@@ -658,6 +658,7 @@ TBOPSEMAIL_NOSLASH ...@@ -658,6 +658,7 @@ TBOPSEMAIL_NOSLASH
TBOPSEMAIL TBOPSEMAIL
IPV6_SUBNET_PREFIX IPV6_SUBNET_PREFIX
IPV6_ENABLED IPV6_ENABLED
NFSMAPTOUSER
BROWSER_CONSOLE_ENABLE BROWSER_CONSOLE_ENABLE
EC2META_ENABLE EC2META_ENABLE
NOSITECHECKIN NOSITECHECKIN
...@@ -5089,6 +5090,7 @@ IPV6_SUBNET_PREFIX="" ...@@ -5089,6 +5090,7 @@ IPV6_SUBNET_PREFIX=""
MANAGEMENT_NETWORK="10.249.249.0" MANAGEMENT_NETWORK="10.249.249.0"
MANAGEMENT_NETMASK="255.255.255.0" MANAGEMENT_NETMASK="255.255.255.0"
MANAGEMENT_ROUTER="10.249.249.253" MANAGEMENT_ROUTER="10.249.249.253"
NFSMAPTOUSER="root"
# #
# XXX You really don't want to change these! # XXX You really don't want to change these!
......
...@@ -290,6 +290,7 @@ AC_SUBST(EC2META_ENABLE) ...@@ -290,6 +290,7 @@ AC_SUBST(EC2META_ENABLE)
AC_SUBST(BROWSER_CONSOLE_ENABLE) AC_SUBST(BROWSER_CONSOLE_ENABLE)
AC_SUBST(IPV6_ENABLED) AC_SUBST(IPV6_ENABLED)
AC_SUBST(IPV6_SUBNET_PREFIX) AC_SUBST(IPV6_SUBNET_PREFIX)
AC_SUBST(NFSMAPTOUSER)
# #
# Offer both versions of the email addresses that have the @ escaped # Offer both versions of the email addresses that have the @ escaped
...@@ -431,6 +432,7 @@ IPV6_SUBNET_PREFIX="" ...@@ -431,6 +432,7 @@ IPV6_SUBNET_PREFIX=""
MANAGEMENT_NETWORK="10.249.249.0" MANAGEMENT_NETWORK="10.249.249.0"
MANAGEMENT_NETMASK="255.255.255.0" MANAGEMENT_NETMASK="255.255.255.0"
MANAGEMENT_ROUTER="10.249.249.253" MANAGEMENT_ROUTER="10.249.249.253"
NFSMAPTOUSER="root"
# #
# XXX You really don't want to change these! # XXX You really don't want to change these!
......
...@@ -161,3 +161,9 @@ WINDOWS_KEY_7PRO_X86="" ...@@ -161,3 +161,9 @@ WINDOWS_KEY_7PRO_X86=""
# Fancy new browser in the console support # Fancy new browser in the console support
# #
BROWSER_CONSOLE_ENABLE=1 BROWSER_CONSOLE_ENABLE=1
#
# Map root to a user with no quota to avoid root filling up
# NFS mounted file systems.
#
NFSMAPTOUSER=emaproot
...@@ -66,6 +66,7 @@ my $WINSUPPORT = @WINSUPPORT@; ...@@ -66,6 +66,7 @@ my $WINSUPPORT = @WINSUPPORT@;
my $ISOLATEADMIN= @ISOLATEADMINS@; my $ISOLATEADMIN= @ISOLATEADMINS@;
my $NOSHAREDFS = @NOSHAREDFS@; my $NOSHAREDFS = @NOSHAREDFS@;
my $LINUX_FSNODE= @LINUX_FSNODE@; my $LINUX_FSNODE= @LINUX_FSNODE@;
my $NFSMAPTOUSER= "@NFSMAPTOUSER@";
# XXX for TESTMODE: output to stdout # XXX for TESTMODE: output to stdout
my $TOSTDOUT = 0; my $TOSTDOUT = 0;
...@@ -427,8 +428,8 @@ foreach my $str ( keys(%ipgroups) ) { ...@@ -427,8 +428,8 @@ foreach my $str ( keys(%ipgroups) ) {
if ($debug); if ($debug);
} }
else { else {
print MAP "$str -maproot=root @iplist\n"; print MAP "$str -maproot=$NFSMAPTOUSER @iplist\n";
print "$str -maproot=root @iplist\n" print "$str -maproot=$NFSMAPTOUSER @iplist\n"
if ($debug); if ($debug);
} }
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment