LXC container with NSF share service

[entalpia]

Hi, I'm having an issue.
Following multiple tuts, I was trying to configure a NSF share on top of a container.
I've tried multiple distro (Debian, Ubuntu, CentOs), different distro versions (Debian 9/10 and Ubuntu 18/19) and I've also tried with a Web interfaces like Webmin, but anyway I got the same issue:

* nfs-server.service - NFS server and services
   Loaded: loaded (/lib/systemd/system/nfs-server.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Sat 2020-01-11 21:57:12 UTC; 48min ago
  Process: 141 ExecStart=/usr/sbin/rpc.nfsd $RPCNFSDARGS (code=exited, status=1/FAILURE)
  Process: 139 ExecStartPre=/usr/sbin/exportfs -r (code=exited, status=0/SUCCESS)
Main PID: 141 (code=exited, status=1/FAILURE)

Jan 11 21:57:12 NFS systemd[1]: nfs-server.service: Failed to reset devices.list: Operation not permitted
Jan 11 21:57:12 NFS systemd[1]: Starting NFS server and services...
Jan 11 21:57:12 NFS rpc.nfsd[141]: error starting threads: errno 38 (Function not implemented)
Jan 11 21:57:12 NFS systemd[1]: nfs-server.service: Main process exited, code=exited, status=1/FAILURE
Jan 11 21:57:12 NFS systemd[1]: Failed to start NFS server and services.
Jan 11 21:57:12 NFS systemd[1]: nfs-server.service: Unit entered failed state.
Jan 11 21:57:12 NFS systemd[1]: nfs-server.service: Failed with result 'exit-code'.

I've used as references these posts: https://www.howtoforge.com/tutorial/how-to-configure-nfs-storage-in-proxmox-ve/ / https://forum.proxmox.com/threads/nfs-share-from-proxmox-host.20549/ / https://vitux.com/install-nfs-server-and-client-on-ubuntu/ / https://www.linode.com/docs/networking/nfs/how-to-mount-nfs-shares-on-debian-9/ / https://www.rosehosting.com/blog/how-to-install-webmin-on-centos-7/
And I'm using this version of Proxmox 5.4-3

what I'm doing wrong?
tnx

 

[wolfgang]

Hi,

NFS in a container with an NFS is not recommended.
Use instead Ganesha NFS server what is a user-space implementation of NFS.

https://nfs-ganesha.github.io/

 

[priority]

Hi,

Use instead Ganesha NFS server what is a user-space implementation of NFS.

sounds interesting. Actually i am trying to move some services from an old VM into a new Container, including a NFS-Server.
After reading your Post i set up a minimal Container with Debian 10 and nfs-ganesha for testing.
There is not much Information on how to configure a simple NFSv3 Export on the Internet.
I think i got the Export working with minimal settings, but the Container himself and also a external bare metal machine cant mount the export.
Are there Special Settings for the (unpriviliged Container), that i have to configure in Proxmox?

Would be nice to have some more details about nfs-ganesha in PVE Containers.

Thank you.

 

[wolfgang]

Are there Special Settings for the (unpriviliged Container), that i have to configure in Proxmox?

No extra settings needed. Ganesha is a userspace server.

What doe you use as backend and what are the fs in your container?

 

[priority]

Hi Wolfgang,

What doe you use as backend and what are the fs in your container?

Filesystem in the Container for the Export is zfs. This works fine in a priviliged Debian 10 Container with nfs-kernel-server.
What do you mean with backend?

Best regards.

 

[priority]

Hi again,

i did some research and found a similar Problem in this Thread:
https://github.com/nfs-ganesha/nfs-ganesha/issues/420

The Workaround with setting lxc.seccomp.profile= in the container config did not work :-/.

Any ideas?

 

[wolfgang]

In your case, you can use as backend VFS what I would recommend or Lustre which is very complex to use.
You have to install the backend packages too Ganesha has not backend module included.

 

[priority]

Hi Wolfgang,

In your case, you can use as backend VFS what I would recommend or Lustre which is very complex to use.
You have to install the backend packages too Ganesha has not backend module included.

ah, ok. Now i know what you mean. The Package nfs-ganesha-vfs is already installed, because otherwise ganesha didn't start.
But this didn't solve the Problem.

I activated Debug to see if my problem is the same as in the thread i posted.
And yes, it is. The error in the debuglog is "FSAL DEBUG :Failed with Operation not permitted openflags 0x00000020".

But setting the "lxc.seccomp.profile", as mentioned in the thread, did not change anything.

What can i do to get it running?

Do you have an example Config?

Thanks.

 

[priority]

Hi again,

i tried installing latest nfs-ganesha from their project repository.
But the Problem is still the same.

Is there any chance to get this running in an unpriviliged container with zfs storage?

Best regards.