[Bug 1979885] Re: /etc.nfs.conf fails for nfsv4 server / blkmapd dumps core

[Harald Rudell]

1. rpc-svcgssd.service not restarted with nfs-server
the status was provided in initial bug description:
○ rpc-svcgssd.service - RPC security service for NFS server
     Loaded: loaded (/lib/systemd/system/rpc-svcgssd.service; static)
     Active: inactive (dead) since Fri 2022-06-24 19:07:31 PDT; 12h ago
1 get-around:
do systemctl start rpc-svcgssd.service after restarting nfs-server


2. as proven by the lsof entry above, rpc_pipefs is not open by the blkmapd process, your statement is incorrect
2 get-around: nfs can run without blkmapd


3. in the comparative config printout, nfsconf --dump was used for both servers, I think.
3 observation: the logic around the config is buggy as of 22.04. The config lack a few features as described in this bug
— bug: when to start rpc-svcgssd
- lack: portmap on localhost only
- lack: preventing statd, should be automatic
- lack: it is unclear to me if manage-gids controls the nfsd kernel module, too
For example, there could be a minimum security setting with value krb5p if that seems to be a good thing


4. nfs4-krb5p can run without blkmapd. And it does because blkmapd crashes as described above


The goal of nfs should be to easily disable everything that is not the latest version, ie 4.2. Those people that have legacy hardware and software should then have the settings available to them to support those historic features

nfs4 has a better security model and separates authentication from local
operating systems. Therefore an interest in latest-version-only, maximum
hardened, highest-security (krb5p) nfs.conf. Besides the root mount,
there will then be shares that are either rw or ro

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nfs-utils in Ubuntu.
https://bugs.launchpad.net/bugs/1979885

Title:
  /etc.nfs.conf fails for nfsv4 server / blkmapd dumps core

Status in nfs-utils package in Ubuntu:
  Confirmed

Bug description:
  When using the 22.04 /etc/nfs.conf an nfsv4 server fails to operate

  It kind of works but some clients fail and try nfsv3 ports

  symptoms:

  on boot:
  × nfs-blkmap.service - pNFS block layout mapping daemon
       Loaded: loaded (/lib/systemd/system/nfs-blkmap.service; enabled; vendor preset: enabled)
       Active: failed (Result: core-dump) since Sat 2022-06-25 07:14:34 PDT; 27min ago
  journalctl --catalog --pager-end --unit=nfs-blkmap.service
  Jun 25 07:14:34 c68z blkmapd[2386154]: open pipe file /run/rpc_pipefs/nfs/blocklayout failed: No such file or directory

  on systemctl restart nfs-server.service:
  ○ rpc-svcgssd.service - RPC security service for NFS server
       Loaded: loaded (/lib/systemd/system/rpc-svcgssd.service; static)
       Active: inactive (dead) since Fri 2022-06-24 19:07:31 PDT; 12h ago

  after boot it was:
  ● rpc-svcgssd.service - RPC security service for NFS server                                                                 
       Loaded: loaded (/lib/systemd/system/rpc-svcgssd.service; static)                                                       
       Active: active (running) since Sat 2022-06-25 08:27:27 PDT; 2min 7s ago                                                

  Some clients tries to access port 111 which is not used by nfs4 on the
  network

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: linux-image-5.15.0-40-generic 5.15.0-40.43
  ProcVersionSignature: Ubuntu 5.15.0-40.43-generic 5.15.35
  Uname: Linux 5.15.0-40-generic x86_64
  NonfreeKernelModules: zfs zunicode zcommon znvpair zavl icp
  ApportVersion: 2.20.11-0ubuntu82.1
  Architecture: amd64
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/by-path', '/dev/snd/controlC0', '/dev/snd/hwC0D2', '/dev/snd/pcmC0D10p', '/dev/snd/pcmC0D9p', '/dev/snd/pcmC0D8p', '/dev/snd/pcmC0D7p', '/dev/snd/pcmC0D3p', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
  CRDA: N/A
  CasperMD5CheckResult: unknown
  Date: Sat Jun 25 08:37:48 2022
  HibernationDevice: RESUME=none
  MachineType: Apple Inc. Macmini8,1
  ProcEnviron:
   SHELL=/bin/bash
   LANG=en_US.UTF-8
   TERM=screen
   PATH=(custom, no user)
  ProcFB: 0 i915drmfb
  ProcKernelCmdLine: root=ZFS=rpool/ROOT/ubuntu_mc4at7 ro initrd=EFI\hostname\initrd.img
  PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-5.15.0-40-generic N/A
   linux-backports-modules-5.15.0-40-generic  N/A
   linux-firmware                             20220329.git681281e4-0ubuntu3.2
  RfKill:
   0: hci0: Bluetooth
   	Soft blocked: no
   	Hard blocked: no
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 04/24/2022
  dmi.bios.release: 0.1
  dmi.bios.vendor: Apple Inc.
  dmi.bios.version: 1731.120.10.0.0 (iBridge: 19.16.15071.0.0,0)
  dmi.board.name: Mac-7BA5B2DFE22DDD8C
  dmi.board.vendor: Apple Inc.
  dmi.board.version: Macmini8,1
  dmi.chassis.type: 9
  dmi.chassis.vendor: Apple Inc.
  dmi.chassis.version: Mac-7BA5B2DFE22DDD8C
  dmi.modalias: dmi:bvnAppleInc.:bvr1731.120.10.0.0(iBridge19.16.15071.0.0,0):bd04/24/2022:br0.1:svnAppleInc.:pnMacmini8,1:pvr1.0:rvnAppleInc.:rnMac-7BA5B2DFE22DDD8C:rvrMacmini8,1:cvnAppleInc.:ct9:cvrMac-7BA5B2DFE22DDD8C:sku:
  dmi.product.family: Mac mini
  dmi.product.name: Macmini8,1
  dmi.product.version: 1.0
  dmi.sys.vendor: Apple Inc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/1979885/+subscriptions