Setting NFS Export Options
On Compute Cloud@Customer, when you create a file system and export, the NFS export options for that file system are set to the defaults. The default values allow full access for all NFS client source connections. These defaults must be changed if you want to restrict access.
If a file system is mounted by any clients, creating, deleting, or editing the Source value can disrupt file system I/O operations.
| Export Option in the Compute Cloud@Customer Console | Export Option in the CLI | Default Value | Description |
|---|---|---|---|
| Source: |
|
0.0.0.0/0 |
The IP address or CIDR block of a connecting NFS client. |
| Ports: |
|
Any |
Always set to:
|
| Access: |
|
Read/Write |
Specifies the source NFS client access. Can be set to one of these values:
|
| Squash: |
|
None |
Determines whether the clients accessing the file system as root have their User ID
(UID) and Group ID (GID) remapped to the squash UID/GID. Possible values:
|
| Squash UID/GID: |
|
65534 |
This setting is used along with the Squash option. When remapping a root user, you can use this setting to change the default anonymousUid and anonymousGid to any user ID of your choice. |
Note – If you change the RW/RO permissions of an export option for an SMB share, the changes are only enforced for newly network-mapped drives of that share. Any previously mapped drives of the same share retain the original permissions. To have the changed permissions enforced on previously mapped drives on SMB clients, disconnect the shares and map them again.
For more information about configuring the options to suit various access scenarios, see Export Options for File Storage.
Use the oci fs export update command and required parameters to update the export information.
oci fs export update --export-id <export_id> --export-options <file://json_file or json_string> [OPTIONS]Note – The
require-privileged-source-portoption can only be set tofalse.For a complete list of CLI commands, flags, and options, see the Command Line Reference.
Use the UpdateExport operation to update the export information.
For information about using the API and signing requests, see REST APIs and Security Credentials. For information about SDKs, see Software Development Kits and Command Line Interface.