Thanks, I misunderstood the usage of /24. I thought in order to export to a whole subnet, I had to put the subnet address 192.168.0.0/24 while 192.168.0.20/24 would imply a single client within that subnet. I removed the prefix length entirely as CallMeAl suggested, so that’s sorted out.
There’s another issue remaining, see my reply to Al’s comment if you’d like.
Thank you. I’m closer to what I want now. Can you help me explain this behavior though:
For testing purposes, I commented out every line in /etc/exports but these:
/srv/nfsv4 192.168.0.10(ro,sync,secure,root_squash,subtree_check,fsid=0) \
192.168.0.20(ro,sync,secure,root_squash,subtree_check,fsid=0)
Client 192.168.0.20 can mount nfs-server:/ and listing the contents gives both directories foo and bar. It cannot see the contents of foo, as intended, but it can see what’s inside bar (EDIT: it can see down one level, so the subdirectories of bar, but nothing further down). I cannot figure out why? I rebooted the machine in hopes it was just a caching thing, to no avail.
Apart from that, I was hoping 192.168.0.20 could not even mount foo, but as long as its contents are hidden, I can live with that for now.
That can’t be right. For exposing it to a whole subnet, it would have to be 192.168.0.0/24, wouldn’t it?
Non-sysadmin here, I could only find some generic info on ISO 27002/27001, what does it say about containerized applications?
Interesting take. However, I have always held the belief that good will prevail. Why? Well, for one, because I need to think that in order to keep up my will to live, but also because I think good people are far, far more likely to cooperate. Turning all the small dials that may not have an immediate effect, but work out in the long run, across generations. We (mostly) overcame ‘divine’ kings in favor of more democratic systems and that alone is a massive win in my book.
Someone posted this in another thread and I was surprised to see how many well-known projects were listed among them
Worth noting that cards such as this (with mote than one M.2 slot) require the mainboard to support PCIe bifurcation – which most old boards likely do not.
Edit: Cards with just one slot do not require this feature so you can plug them into any board that has a free PCIe slot. Unless you also want to boot from them, in which case you might need to modify your UEFI. I went that route and succeeded, but be aware of the risks involved.
Who run the world? Fungiii~
Thanks for the read, that sent me down an interesting rabbit hole
Yup, is says powered by Avast.
It was certainly the Huawei System UI. How do I tell which engine they’re using?
Can you? I wasn’t aware of that
Even with bar exported to this client, it cannot see its subdirectories’ contents. What the hell is going on? Just to be clear, I did run
exportfs -arvafter every change to /etc/exports.