Overview
Goal	To use autofs and the command line to mount and unmount network storage with NFS.
Objectives	Mount, access, and unmount network storage with NFS. Automount and access network storage with NFS.
Sections	Mounting Network Storage with NFS (and Practice) Automounting Network Storage with NFS (and Practice)
Lab	Accessing Network Storage with Network File System (NFS)

Mounting Network Storage with NFS

Identify the NFS share details; NFSv4 mount the NFS server root folder.
Create a mount point directory.
mount or update /etc/fstab to mount the NFS share.
umount to unmount a NFS share.

Objectives

After completing this section, students should be able to manually mount, access, and unmount an NFS share.

Manually mounting and unmounting NFS shares

Mounting and unmounting NFS shares

NFS, the Network File System, is an Internet standard protocol used by Linux, UNIX, and similar operating systems as their native network file system. It is an open standard under active extension which supports native Linux permissions and file system features.

Red Hat Enterprise Linux 7 supports NFSv4 (version 4 of the protocol) by default, and falls back automatically to NFSv3 and NFSv2 if that is not available. NFSv4 uses the TCP protocol to communicate with the server, while older versions of NFS may use either TCP or UDP.

NFS servers export shares (directories) and NFS clients mount an exported share to a local mount point (directory). The local mount point must exist. NFS shares can be mounted a number of ways:

manually mounting an NFS share using the mount command.
automatically mounting an NFS share at boot time using /etc/fstab.
mounting an NFS share on demand through a process known as automounting.

Securing file access on NFS shares

NFS servers secure access to files using a number of methods: none, sys, krb5, krb5i, and krb5p. The NFS server can choose to offer a single method or multiple methods for each exported share. NFS clients must connect to the exported share using one of the methods mandated for that share, specified as a mount option sec=method.

Security methods

none: anonymous access to the files, writes to the server (if allowed) will be allocated UID and GID of nfsnobody.
sys: file access based on standard Linux file permissions for UID and GID values. If not specified, this is the default.
krb5: Clients must prove identity using Kerberos and then standard Linux file permissions apply.
krb5i: adds a cryptographically strong guarantee that the data in each request has not been tampered with.
krb5p: adds encryption to all requests between the client and the server, preventing data exposure on the network. This will have a performance impact.

Important

Kerberos options will require, as a minimum, a /etc/krb5.keytab and additional authentication configuration that is not covered in this section (joining the Kerberos Realm). The /etc/krb5.keytab will normally be provided by the authentication or security administrator. Request a keytab that includes either a host principal, nfs principal, or (ideally) both.

NFS uses the nfs-secure service to help negotiate and manage communication with the server when connecting to Kerberos-secured shares. It must be running to use the secured NFS shares; start and enable it to ensure it is always available.

[student@desktopX ~]$ sudo systemctl enable nfs-secure
ln -s '/usr/lib/systemd/system/nfs-secure.service'  ...
[student@desktopX ~]$ sudo systemctl start nfs-secure

Note

The nfs-secure service is part of the nfs-utils package, which should be installed by default. If it is not installed, use:

[student@desktopX ~]$ sudo yum -y install nfs-utils

Mount an NFS share

There are three basic steps to mounting an NFS share:

Identify: The administrator for the NFS server can provide export details, including security requirements. Alternatively:
NFSv4 shares can be identified by mounting the root folder of the NFS server and exploring the exported directories. Do this as root. Access to shares that are using Kerberos security will be denied, but the share (directory) name will be visible. Other share directories will be browsable.
```
[student@desktopX ~]$ sudo mkdir /mountpoint
[student@desktopX ~]$ sudo mount serverX:/ /mountpoint
[student@desktopX ~]$ sudo ls /mountpoint
```
NFSv2 and NFSv3 shares can be discovered using showmount.
```
[student@desktopX ~]$ showmount -e serverX
```
Mount point: Use mkdir to create a mount point in a suitable location.
```
[student@desktopX ~]$ mkdir -p /mountpoint
```
Mount: There are two choices here: manually or incorporated in the /etc/fstab file. Switch to root or use sudo for either operation.
- Manual: Use the mount command.
```
[student@desktopX ~]$ sudo mount -t nfs -o sync serverX:/share /mountpoint
```
  The -t nfs option is the file system type for NFS shares (not strictly required, shown for completeness). The -o sync option tells mount to immediately synchronize write operations with the NFS server (the default is asynchronous). The default security method (sec=sys) will be used to try mounting the NFS share, using standard Linux file permissions.
- /etc/fstab: Use vim to edit the /etc/fstab file and add the mount entry to the bottom of the file. The NFS share will be mounted at each system boot.
```
[student@desktopX ~]$ sudo vim /etc/fstab
...
serverX:/share  /mountpoint  nfs  sync  0 0
```

Use umount, using root privileges, to manually unmount the share.

[student@desktopX ~]$ sudo umount /mountpoint

References

mount(8), umount(8), fstab(5), and mount.nfs(8) man pages

Discuss Red Hat System Administration II

Go to community

Is It possible to reset root password when the system is on multi-user.target?

jennifer1987

27 lip 2023

Hi thereWell, i have a question, Is It possible to reset root password when the system is on multi-user.target? I was not be able to found a foro o some information related with this and another question that I have, If the grub menu dont show up, is it posible to reset the root password?

991

Red Hat System Administration II (RH134)

Haley_Ruccio

21 lip 2023

Build the skills to perform the key tasks needed to become a full-time Linux administratorRed Hat System Administration II (RH134) is the second part of the RHCSA training track for IT professionals who have already attended Red Hat System Administration I. The course goes deeper into core Linux system administration skills in storage configuration and management, installation and deployment of Red Hat Enterprise Linux, management of security features such as SELinux, control of recurring system tasks, management of the boot process and troubleshooting, basic system tuning, and command-line automation and productivity. This course assumes that students have attended Red Hat System Administration I (RH124).Experienced Linux administrators who seek rapid preparation for the RHCSA certification should instead start with RHCSA Rapid Track (RH199).This course is based on Red Hat Enterprise Linux 9.0.Course summaryInstall Red Hat Enterprise Linux using scalable methodsAccess security files, file systems, and networksExecute shell scripting and automation techniquesManage storage devices, logical volumes, and file systemsManage security and system accessControl the boot process and system servicesRun containersAudience for this courseThis course is geared toward Windows system administrators, network administrators, and other system administrators who are interested in supplementing current skills or backstopping other team members, in addition to Linux system administrators who are responsible for these tasks:Configuring, installing, upgrading, and maintaining Linux systems using established standards and proceduresProviding operational supportManaging systems for monitoring system performance and availabilityWriting and deploying scripts for task automation and system administrationRecommended trainingSuccessful completion of Red Hat System Administration I (RH124) is recommended.Experienced Linux administrators seeking to accelerate their path toward becoming a Red Hat Certified System Administrator should start with the RHCSA Rapid Track course (RH199).Take our free assessment to gauge whether this offering is the best fit for your skills.Technology considerationsThere are no special technology requirements.This course is not designed for bring your own device (BYOD).Internet access is not required, but is recommended to allow students to research and access Red Hat online resources.

Welcome to the Red Hat System Administration II (RH134) group in the Red Hat Learning Community!

Deanna

18 lip 2023

We are excited to launch a space dedicated to the Red Hat Training course Red Hat System Administration II! To gain the most value from this group - click the "Join Group" button in the upper right hand corner.We encourage group members to collaborate in this group to discuss topics, ask questions, share best practices and tips, provide course feedback, and share their accomplishments as it relates to RH134.Read more about Red Hat System Administration II here.

417

Revision: rh134-7-c643331