Re: [gentoo-user] Optional /usr merge in Gentoo

[Alan McKinnon]

On 27/08/2013 21:24, joost@××××××××.org wrote:
> Alan McKinnon <alan.mckinnon@×××××.com> wrote:
>
>     On 27/08/2013 13:36, Tanstaafl wrote:
>
>         On 2013-08-26 2:23 AM, Alan McKinnon <alan.mckinnon@×××××.com>
>         wrote:
>
>             I run it on my NASes, and the thing that really sold me was
>             what it lets
>             me as the admin do:
>
>             I get all the benefits of directories with none of the
>             downsides.
>             I get all the benefits of mount points with none of the
>             downsides.
>             I get all the benefits of discrete filesystems with none of the
>             downsides.
>
>             Like you say, a truly modern fs built for modern needs.
>
>
>         Are these home-built NAS's running FreeBSD (or maybe FreeNAS)? Or
>         TrueNAS or Nexenta boxes?
>
>         I'm wondering what the best way would be to get something set up
>         for ZFS
>         file storage. I have some older servers that I can use, so was
>         leaning
>         toward FreeNAS...
>
>
>
>     Mine are HP mini-servers (the cube shaped ones) with 4 SATA bays running
>     FreeNAS 8.0.something.
>
>     Dunno if you've worked with FreeNAS before, but it's literally a case of
>     write the image to USB or flash storage and boot off it. Then play.
>
>     You will need to be able to boot off a USB stick, CF card or similar,
>     FreeNAS uses an entire drive for it's system partition and it's a shame
>     to waste a whole high-capacity disk just for a 2G system image
>
>
>
> Alan.
>
> How is the security settings on the shares now?
>
> I had issues when accessing through NFS and CIFS simultaneously where
> files written over NFS had to have the permissions altered before they
> were accessible over CIFS.

I've never run into this situation myself, my shares are either accessed
via cfs or via nfs, but never both at the same time.

The permissions issue is an artifact of how NFS works. Sun designed it
to deliver entire filesystems over the network (most often /usr and-or
/home) to trusted clients. "trusted" being the operative word. To get
Unix permissions to work, the uid on the share and client have to match
- that's why we also have NIS - but I've never seen NIS actually used
anywhere, so UIDs tend to be a mix 'n match and almost always devolves
into "full access" to get it to work.

CIFS work different, it auths users by username and supports per-field
access control. That's how that protocol works.

There is no known way to fix NFS v2 & v3 in a mixed network and still
stay sane. NFS v4 does a good job but it's not NFS v3 :-)

it's common for NAS vendors to recommend you not try share the same
files over CIFS and NFS, especially if write access is involced.



>
> Other issue I had was inability to have users only being able to access
> files they were allowed to. With CIFS it sort of worked. But with NFS I
> had full access to all files.
>
> That is the reason why I setup my NAS manually using Gentoo.
>
> --
> Joost
> --
> Sent from my Android phone with K-9 Mail. Please excuse my brevity.


-- 
Alan McKinnon
alan.mckinnon@×××××.com