[SOLVED] Fatal Error: Failed to mount NFS Volume

[arnaudrigole]

@Sebastian-Roth
Thank you, i think too !
But the described procedure seems to be not secured! (grant RW access for “all”, “all machines”, “everyone” on shared folders…

the cryptowall “locky” ransomware that we had last week ravaged our datas and infected all folders which was shared with “everyone” rw right…

[Quazz]

@arnaudrigole I’m guessing your CIFS/SAMBA shares are mounted as network drives on other computers, yes?

The NFS shares should only be mounted on computers that are going get their image captured or where an image will be deployed and only for the duration of those actions.

I’ve yet to see a virus sniff out possible NFS connections and then be able to somehow use the correct credentials to then infect the shares, but I guess I could be wrong

[arnaudrigole]

@Quazz
Hi!
Yeah thats it.
Ok, so its why when i type \SRVADM on a Windows computer i don’t see the NFS “FOG” directory i just shared ?

I’ll mount as described in the Sebastian’s procedure, and i’ll come back here so say whats up

[ch3i]

@arnaudrigole said:

@Sebastian-Roth
Thank you, i think too !
But the described procedure seems to be not secured! (grant RW access for “all”, “all machines”, “everyone” on shared folders…

the cryptowall “locky” ransomware that we had last week ravaged our datas and infected all folders which was shared with “everyone” rw right…

Au besoin PM moi sur le forum, je pourrais surement te venir en aide.

[Quazz]

@arnaudrigole That and also because Windows doesn’t support NFS by default.

[ch3i]

@Quazz said:

@arnaudrigole That and also because Windows doesn’t support NFS by default.

Windows support NFS… look at Server 2008/2012 (2008 > NFS V3 et 2012 > NFS V4.1)

[Quazz]

@ch3i Server yes, clients not.

[arnaudrigole]

I’ve another problem…
haven’t the time yet to mount my NFS storage so i keep using /images default directory of FOG; but when i try to download an image on a computer it said …

**FATAL ERROR: Failed to mount NFS volume
*if you believe the filesystem is mounted, make sure you have a file called .mntcheck in the directory you are mouting on the server.
**

i don’t see any “.mntcheck” file in /images and /images/dev…
So i created it with “touch /images/.mntcheck” and “touch /images/dev/.mntcheck” but it still dont work…
Can’t deploy anything now …

[Tom Elliott]

@arnaudrigole Did you edit the /etc/exports so it’s looking at the proper directory? If the CIFS share is still mounted on the server at /srv/cifs/SRVADM/images and your Exports file is still looking at /images and /images doesn’t exist on the FOG Server, it would still have a problem.

If /srv/cifs/SRVADM/images is mounted to the folder /images AND, before the share is mounted, and you create the /images/.mntcheck /images/dev/.mntcheck files, then mount the samba over the TOP of the folder, the mounted folder needs these files so you’d have to run the same touch commands to ensure those files are present on the share as well.

I think there’s almost too much going on to properly assist.

What is going on? Are you still mounting the /srv/cifs/SRVADM/images folder?

What’s in your /etc/exports file?

What version are you running?

Where are you defining the mount?

I could also be chasing a rabbit down a hole as I’m still not sure you can NFS Export a CIFS Share either.

If you’re that worried about security, why are you using a common system that OTHER users are accessing and writing data to as your mount point for where FOG stores its images?

[arnaudrigole]

@Tom-Elliott
Thanks for your reply, mine are in your message below:

Did you edit the /etc/exports so it’s looking at the proper directory? If the CIFS share is still mounted on the server at /srv/cifs/SRVADM/images and your Exports file is still looking at /images and /images doesn’t exist on the FOG Server, it would still have a problem. > As you said before, i re-edited it so its look like default now /images and /images/dev

If /srv/cifs/SRVADM/images is mounted to the folder /images AND, before the share is mounted, and you create the /images/.mntcheck /images/dev/.mntcheck files, then mount the samba over the TOP of the folder, the mounted folder needs these files so you’d have to run the same touch commands to ensure those files are present on the share as well. > I’m afraid but i think i don’t understand… After i re-modified the /etc/exports file , i did touch commands on /images and /images/dev. I did not succeed the externalization of image storage, so i just want to go back on default configuration

I think there’s almost too much going on to properly assist. > Yes

What is going on? Are you still mounting the /srv/cifs/SRVADM/images folder? > it appears to be hard for me, i’m actually blocked by NFS and access rights… but i’ll continue to work on it but not now (FOG is currently used for production in my company)

What’s in your /etc/exports file? >** /images (ro,sync,no…default string)
/images/dev (rw,sync, … default string too)

What version are you running? > Fog 1.2.0

Where are you defining the mount? > When i did my tests for storage externalization, i wanna mount //SRVADM/FOG/Images (Windows 2008R2) on /srv/cifs/SRVADM/Images (Fog Server)

I could also be chasing a rabbit down a hole as I’m still not sure you can NFS Export a CIFS Share either. > i think i don’t understand … but i recreated a shared directory by NFS services on my Win 2008R2, and when i try to mount it as : “mount -t nfs //SRVADM:FOG/Images /srv/cifs/SRVADM/images it return me :” mount.nfs : Failed to resolve server //SRVADM: name or service not known" , tried with IP -> same.

If you’re that worried about security, why are you using a common system that OTHER users are accessing and writing data to as your mount point for where FOG stores its images? -> SRVADM is a server dedicated to IT service, we have no common data on it, but i told this only for crypto virus who infect “Everybody” shared directories

Have a good sunny day

[Quazz]

@arnaudrigole " i think i don’t understand … but i recreated a shared directory by NFS services on my Win 2008R2, and when i try to mount it as : “mount -t nfs //SRVADM:FOG/Images /srv/cifs/SRVADM/images it return me :” mount.nfs : Failed to resolve server //SRVADM: name or service not known" , tried with IP -> same."

Your syntax is incorrect, it should be something like mount -t nfs SRVADM(or ip):/FOG/Images destinationpathhere (eg mount/images after doing mkdir mount/images)

// is only used for SAMBA/CIFS paths and won’t work for other methods of connecting.

Also, as a note, NFS needs full path to the destination when you try to mount it, not just to the shared folder. Not sure if that’s the case on your end!

[Tom Elliott]

@Quazz I’m only aware of CIFS using \\ not // as the leader.

[Quazz]

@Tom-Elliott Right you are.

[george1421]

@Quazz said:

// is only used for SAMBA/CIFS paths and won’t work for other methods of connecting.

I agree, we are dealing with a unix system not windows. NFS requires unix style syntax for drive mapping required here.

[arnaudrigole]

@Quazz
Ok so, the mount cmd i type is exactly this : mount -t nfs 10.1.11.64:/FOG/Images /srv/nfs/SRVADM/Images
“FOG” directory is the one shared by NFS on the server, give full rw rights for “anybody” -> nothing returned by the cmd, seems to be OK, but when i type : cd /srv/nfs/SRVADM/images -> input/output error

i did apt-get install nfs-common too

i’m sorry but it look so complicated to mount any Windows shared directory on a linux VM…

[Quazz]

@arnaudrigole Is the FOG directory located at the root of that server? Because you need the full path!

[arnaudrigole]

@Quazz
FOG directory is located physically on E:\informatique\Service_info\FOG\Images but the NFS share is setup on FOG so nfs assistant told me the way is : \SRVADM\FOG , so i have to set:
mount -t nfs 10.1.11.64:/E:/informatique/Service_info/FOG/Images ??
thank you

[Quazz]

@arnaudrigole Do this on your linux machine:

showmount -e 10.1.11.64

I’m not sure if that works with windows server, but if it does, it should basically give you the answer.

[arnaudrigole]

@Quazz
It returns me “Export list for 10.1.11.64: /FOG (everyone)”

[Quazz]

@arnaudrigole Seems like you don’t have an export for /FOG/Images only for /FOG. Can you mount /FOG over NFS?