Commit 1aa8ec9b authored by Leigh Stoller's avatar Leigh Stoller

Map NFS root to user emaproot. This is intended to stop experimental nodes

from filling up the shared files system by writing as root (and bypassing
quota). Added this as a config variable.

	NFSMAPTOUSER=emaproot

To back this out, remove this line from defs-default, reconfig, and
reinstall exports_setup, then run exports_setup.
parent d97c0a71
......@@ -658,6 +658,7 @@ TBOPSEMAIL_NOSLASH
TBOPSEMAIL
IPV6_SUBNET_PREFIX
IPV6_ENABLED
NFSMAPTOUSER
BROWSER_CONSOLE_ENABLE
EC2META_ENABLE
NOSITECHECKIN
......@@ -5089,6 +5090,7 @@ IPV6_SUBNET_PREFIX=""
MANAGEMENT_NETWORK="10.249.249.0"
MANAGEMENT_NETMASK="255.255.255.0"
MANAGEMENT_ROUTER="10.249.249.253"
NFSMAPTOUSER="root"
#
# XXX You really don't want to change these!
......
......@@ -290,6 +290,7 @@ AC_SUBST(EC2META_ENABLE)
AC_SUBST(BROWSER_CONSOLE_ENABLE)
AC_SUBST(IPV6_ENABLED)
AC_SUBST(IPV6_SUBNET_PREFIX)
AC_SUBST(NFSMAPTOUSER)
#
# Offer both versions of the email addresses that have the @ escaped
......@@ -431,6 +432,7 @@ IPV6_SUBNET_PREFIX=""
MANAGEMENT_NETWORK="10.249.249.0"
MANAGEMENT_NETMASK="255.255.255.0"
MANAGEMENT_ROUTER="10.249.249.253"
NFSMAPTOUSER="root"
#
# XXX You really don't want to change these!
......
......@@ -161,3 +161,9 @@ WINDOWS_KEY_7PRO_X86=""
# Fancy new browser in the console support
#
BROWSER_CONSOLE_ENABLE=1
#
# Map root to a user with no quota to avoid root filling up
# NFS mounted file systems.
#
NFSMAPTOUSER=emaproot
......@@ -66,6 +66,7 @@ my $WINSUPPORT = @WINSUPPORT@;
my $ISOLATEADMIN= @ISOLATEADMINS@;
my $NOSHAREDFS = @NOSHAREDFS@;
my $LINUX_FSNODE= @LINUX_FSNODE@;
my $NFSMAPTOUSER= "@NFSMAPTOUSER@";
# XXX for TESTMODE: output to stdout
my $TOSTDOUT = 0;
......@@ -427,8 +428,8 @@ foreach my $str ( keys(%ipgroups) ) {
if ($debug);
}
else {
print MAP "$str -maproot=root @iplist\n";
print "$str -maproot=root @iplist\n"
print MAP "$str -maproot=$NFSMAPTOUSER @iplist\n";
print "$str -maproot=$NFSMAPTOUSER @iplist\n"
if ($debug);
}
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment