commit 1168e13bb0f38c06f09b1431b741179d067cc659 · pyrox.dev/nixpkgs

+35 -13
nixos/modules/tasks/filesystems/nfs.nix
···

       10
       10
        
       

     

       11
       11
        
         rpcMountpoint = "${nfsStateDir}/rpc_pipefs";

     

       12
       12
        
       

     

       13
       13
       -
         idmapdConfFile = pkgs.writeText "idmapd.conf" ''

     

       14
       14
       -
           [General]

     

       15
       15
       -
           Pipefs-Directory = ${rpcMountpoint}

     

       16
       16
       -
           ${optionalString (config.networking.domain != null)

     

       17
       17
       -
             "Domain = ${config.networking.domain}"}

     

       13
       13
       +
         format = pkgs.formats.ini {};

     

       18
       14
        
       

     

       19
       19
       -
           [Mapping]

     

       20
       20
       -
           Nobody-User = nobody

     

       21
       21
       -
           Nobody-Group = nogroup

     

       22
       22
       -
       

     

       23
       23
       -
           [Translation]

     

       24
       24
       -
           Method = nsswitch

     

       25
       25
       -
         '';

     

       26
       26
       -
       

     

       15
       15
       +
         idmapdConfFile = format.generate "idmapd.conf" cfg.idmapd.settings;

     

       27
       16
        
         nfsConfFile = pkgs.writeText "nfs.conf" cfg.extraConfig;

     

       28
       17
        
         requestKeyConfFile = pkgs.writeText "request-key.conf" ''

     

       29
       18
        
           create id_resolver * * ${pkgs.nfs-utils}/bin/nfsidmap -t 600 %k %d

     
···

       38
       27
        
       

     

       39
       28
        
         options = {

     

       40
       29
        
           services.nfs = {

     

       30
       30
       +
             idmapd.settings = mkOption {

     

       31
       31
       +
               type = format.type;

     

       32
       32
       +
               default = {};

     

       33
       33
       +
               description = ''

     

       34
       34
       +
                 libnfsidmap configuration. Refer to

     

       35
       35
       +
                 <link xlink:href="https://linux.die.net/man/5/idmapd.conf"/>

     

       36
       36
       +
                 for details.

     

       37
       37
       +
               '';

     

       38
       38
       +
               example = literalExample ''

     

       39
       39
       +
                 {

     

       40
       40
       +
                   Translation = {

     

       41
       41
       +
                     GSS-Methods = "static,nsswitch";

     

       42
       42
       +
                   };

     

       43
       43
       +
                   Static = {

     

       44
       44
       +
                     "root/hostname.domain.com@REALM.COM" = "root";

     

       45
       45
       +
                   };

     

       46
       46
       +
                 }

     

       47
       47
       +
               '';

     

       48
       48
       +
             };

     

       41
       49
        
             extraConfig = mkOption {

     

       42
       50
        
               type = types.lines;

     

       43
       51
        
               default = "";

     
···

       53
       61
        
         config = mkIf (any (fs: fs == "nfs" || fs == "nfs4") config.boot.supportedFilesystems) {

     

       54
       62
        
       

     

       55
       63
        
           services.rpcbind.enable = true;

     

       64
       64
       +
       

     

       65
       65
       +
           services.nfs.idmapd.settings = {

     

       66
       66
       +
             General = mkMerge [

     

       67
       67
       +
               { Pipefs-Directory = rpcMountpoint; }

     

       68
       68
       +
               (mkIf (config.networking.domain != null) { Domain = config.networking.domain; })

     

       69
       69
       +
             ];

     

       70
       70
       +
             Mapping = {

     

       71
       71
       +
               Nobody-User = "nobody";

     

       72
       72
       +
               Nobody-Group = "nogroup";

     

       73
       73
       +
             };

     

       74
       74
       +
             Translation = {

     

       75
       75
       +
               Method = "nsswitch";

     

       76
       76
       +
             };

     

       77
       77
       +
           };

     

       56
       78
        
       

     

       57
       79
        
           system.fsPackages = [ pkgs.nfs-utils ];

     

       58
       80