2.8. Configuring an NFSv3 server with optional NFSv4 support

Procedure

1. Install the nfs-utils package:

   # dnf install nfs-utils

2. Optional: By default, NFSv3 and NFSv4 are enabled. If you do not require NFSv4 or only specific minor versions, uncomment all vers4.<minor_version> parameters and set them accordingly:

   [nfsd]
   # vers3=y
   # vers4=y
   vers4.0=n
   vers4.1=n
   vers4.2=y

   With this configuration, the server provides only the NFS version 3 and 4.2.

   重要

   If you require only a specific NFSv4 minor version, set only the parameters for the minor versions. Do not uncomment the vers4 parameter to avoid an unpredictable activation or deactivation of minor versions. By default, the vers4 parameter enables or disables all NFSv4 minor versions. However, this behavior changes if you set vers4 in conjunction with other vers parameters.

3. By default, NFSv3 RPC services use random ports. To enable a firewall configuration, configure fixed port numbers in the /etc/nfs.conf file:

   1. In the [lockd] section, set a fixed port number for the nlockmgr RPC service, for example:

      [lockd]
      port=5555

      With this setting, the service automatically uses this port number for both the UDP and TCP protocol.

   2. In the [statd] section, set a fixed port number for the rpc.statd service, for example:

      [statd]
      port=6666

      With this setting, the service automatically uses this port number for both the UDP and TCP protocol.

4. Optional: Create a directory that you want to share, for example:

   # mkdir -p /nfs/projects/

   If you want to share an existing directory, skip this step.

5. Set the permissions you require on the /nfs/projects/ directory:

   # chmod 2770 /nfs/projects/
   # chgrp users /nfs/projects/

   These commands set write permissions for the users group on the /nfs/projects/ directory and ensure that the same group is automatically set on new entries created in this directory.

6. Add an export point to the /etc/exports file for each directory that you want to share:

   /nfs/projects/     192.0.2.0/24(rw) 2001:db8::/32(rw)

   This entry shares the /nfs/projects/ directory to be accessible with read and write access to clients in the 192.0.2.0/24 and 2001:db8::/32 subnets.

7. Open the relevant ports in firewalld:

   # firewall-cmd --permanent --add-service={nfs,rpc-bind,mountd}
   # firewall-cmd --permanent --add-port={5555/tcp,5555/udp,6666/tcp,6666/udp}
   # firewall-cmd --reload

8. Enable and start the NFS server:

   # systemctl enable --now rpc-statd nfs-server