Cross Reference: /illumos-gate/usr/src/cmd/fs.d/nfs/svc/nfs-server

	nfs-server revision dd51520e127b452179a2ce4ea3bd8dee949f9afe
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#!/sbin/sh
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# CDDL HEADER START
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# The contents of this file are subject to the terms of the
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# Common Development and Distribution License (the "License").
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# You may not use this file except in compliance with the License.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# or http://www.opensolaris.org/os/licensing.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# See the License for the specific language governing permissions
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# and limitations under the License.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# When distributing Covered Code, include this CDDL HEADER in each
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# If applicable, add the following below this CDDL HEADER, with the
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# fields enclosed by brackets "[]" replaced with your own identifying
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# information: Portions Copyright [yyyy] [name of copyright owner]
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# CDDL HEADER END
d62bc4badc1c1f1549c961cfb8b420e650e1272byz#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# Copyright (c) 2009, 2010, Oracle and/or its affiliates. All rights reserved.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# Start/stop processes required for server NFS
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai. /lib/svc/share/smf_include.sh
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai. /lib/svc/share/ipf_include.sh
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllaizone=`smf_zonename`
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# Handling a corner case here. If we were in offline state due to an
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# unsatisfied dependency, the ipf_method process wouldn't have generated
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# the ipfilter configuration. When we transition to online because the
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# dependency is satisfied, the start method will have to generate the
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# ipfilter configuration. To avoid all possible deadlock scenarios,
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# we restart ipfilter which will regenerate the ipfilter configuration
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# for the entire system.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# The ipf_method process signals that it didn't generate ipf rules by
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# removing the service's ipf file. Thus we only restart network/ipfilter
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai# when the file is missing.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai#
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllaiconfigure_ipfilter()
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai{
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    ipfile=`fmri_to_file $SMF_FMRI $IPF_SUFFIX`
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    [ -f "$ipfile" ] && return 0
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        #
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # Nothing to do if:
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        # - ipfilter isn't online
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # - global policy is 'custom'
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # - service's policy is 'use_global'
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        #
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        service_check_state $IPF_FMRI $SMF_ONLINE || return 0
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        [ "`get_global_def_policy`" = "custom" ] && return 0
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    [ "`get_policy $SMF_FMRI`" = "use_global" ] && return 0
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    svcadm restart $IPF_FMRI
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai}
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllaicase "$1" in
bb25c06cca41ca78e5fb87fbb8e81d55beb18c95jg'start')
d62bc4badc1c1f1549c961cfb8b420e650e1272byz    # The NFS server is not supported in a local zone
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    if smf_is_nonglobalzone; then
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        /usr/sbin/svcadm disable -t svc:/network/nfs/server
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        echo "The NFS server is not supported in a local zone"
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        sleep 5 &
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        exit $SMF_EXIT_OK
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    fi
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # Share all file systems enabled for sharing. sharemgr understands
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # regular shares and ZFS shares and will handle both. Technically,
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # the shares would have been started long before getting here since
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # nfsd has a dependency on them.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    startnfsd=0
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # restart stopped shares from the repository
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    /usr/sbin/sharemgr start -P nfs -a
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # Start up mountd and nfsd if anything is exported.
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    if /usr/bin/grep -s nfs /etc/dfs/sharetab >/dev/null; then
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai        startnfsd=1
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    fi
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    # If auto-enable behavior is disabled, always start nfsd
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai    if [ `svcprop -p application/auto_enable nfs/server` = "false" ]; then
        startnfsd=1
    fi

    # Options for nfsd are now set in SMF
    if [ $startnfsd -ne 0 ]; then
        /usr/lib/nfs/mountd
        rc=$?
        if [ $rc != 0 ]; then
            /usr/sbin/svcadm mark -t maintenance svc:/network/nfs/server
            echo "$0: mountd failed with $rc"
            sleep 5 &
            exit $SMF_EXIT_ERR_FATAL
        fi

        /usr/lib/nfs/nfsd
        rc=$?
        if [ $rc != 0 ]; then
            /usr/sbin/svcadm mark -t maintenance svc:/network/nfs/server
            echo "$0: nfsd failed with $rc"
            sleep 5 &
            exit $SMF_EXIT_ERR_FATAL
        fi

        configure_ipfilter
    else
        /usr/sbin/svcadm disable -t svc:/network/nfs/server
        echo "No NFS filesystems are shared"
        sleep 5 &
    fi

    ;;

'refresh')
    /usr/sbin/sharemgr start -P nfs -a
    ;;

'stop')
    /usr/bin/pkill -x -u 0,1 -z $zone '(nfsd|mountd)'

    # Unshare all shared file systems using NFS

    /usr/sbin/sharemgr stop -P nfs -a

    #
    # Wait up to 10 seconds for nfslogd to gracefully handle SIGHUP
    #
    /usr/bin/pkill -HUP -x -u 0 -z $zone nfslogd
    wtime=10

    while [ $wtime -gt 0 ]; do
        /usr/bin/pgrep -x -u 0 -z $zone nfslogd >/dev/null || break
        wtime=`expr $wtime - 1`
        sleep 1
    done

    #
    # Kill nfslogd more forcefully if it did not shutdown during
    # the grace period
    #
    if [ $wtime -eq 0 ]; then
        /usr/bin/pkill -TERM -x -u 0 -z $zone nfslogd
    fi

    # Kill any processes left in service contract
    smf_kill_contract $2 TERM 1
    [ $? -ne 0 ] && exit 1
    ;;

'ipfilter')
    #
    # NFS related services are RPC. nfs/server has nfsd which has
    # well-defined port number but mountd is an RPC daemon.
    #
    # Essentially, we generate rules for the following "services"
    #  - nfs/server which has nfsd and mountd
    #  - nfs/rquota
    #
    # The following services are enabled for both nfs client and
    # server so we'll treat them as client services and simply
    # allow incoming traffic.
    #  - nfs/status
    #  - nfs/nlockmgr
    #  - nfs/cbd
    #
    NFS_FMRI="svc:/network/nfs/server:default"
    RQUOTA_FMRI="svc:/network/nfs/rquota:default"
    FMRI=$2

    file=`fmri_to_file $FMRI $IPF_SUFFIX`
    echo "# $FMRI" >$file
    policy=`get_policy $NFS_FMRI`
    ip="any"

    #
    # nfs/server configuration is processed in the start method.
    #
    if [ "$FMRI" = "$NFS_FMRI" ]; then
        service_check_state $FMRI $SMF_ONLINE
        if [ $? -ne 0 ]; then
            rm  $file
            exit $SMF_EXIT_OK
        fi

        nfs_name=`svcprop -p $FW_CONTEXT_PG/name $FMRI 2>/dev/null`
        tport=`$SERVINFO -p -t -s $nfs_name 2>/dev/null`
        if [ -n "$tport" ]; then
            generate_rules $FMRI $policy "tcp" $ip $tport $file
        fi

        uport=`$SERVINFO -p -u -s $nfs_name 2>/dev/null`
        if [ -n "$uport" ]; then
            generate_rules $FMRI $policy "udp" $ip $uport $file
        fi

        tports=`$SERVINFO -R -p -t -s "mountd" 2>/dev/null`
        if [ -n "$tports" ]; then
            for tport in $tports; do
                generate_rules $FMRI $policy "tcp" $ip \
                    $tport $file
            done
        fi

        uports=`$SERVINFO -R -p -u -s "mountd" 2>/dev/null`
        if [ -n "$uports" ]; then
            for uport in $uports; do
                generate_rules $FMRI $policy "udp" $ip \
                    $uport $file
            done
        fi

    elif [ "$FMRI" = "$RQUOTA_FMRI" ]; then
        iana_name=`svcprop -p inetd/name $FMRI`

        tports=`$SERVINFO -R -p -t -s $iana_name 2>/dev/null`
        if [ -n "$tports" ]; then
            for tport in $tports; do
                generate_rules $NFS_FMRI $policy "tcp" \
                    $ip $tport $file
            done
        fi

        uports=`$SERVINFO -R -p -u -s $iana_name 2>/dev/null`
        if [ -n "$uports" ]; then
            for uport in $uports; do
                generate_rules $NFS_FMRI $policy "udp" \
                    $ip $uport $file
            done
        fi
    else
        #
        # Handle the client services here
        #
        restarter=`svcprop -p general/restarter $FMRI 2>/dev/null`
        if [ "$restarter" = "$INETDFMRI" ]; then
            iana_name=`svcprop -p inetd/name $FMRI`
            isrpc=`svcprop -p inetd/isrpc $FMRI`
        else
            iana_name=`svcprop -p $FW_CONTEXT_PG/name $FMRI`
            isrpc=`svcprop -p $FW_CONTEXT_PG/isrpc $FMRI`
        fi

        if [ "$isrpc" = "true" ]; then
            tports=`$SERVINFO -R -p -t -s $iana_name 2>/dev/null`
            uports=`$SERVINFO -R -p -u -s $iana_name 2>/dev/null`
        else
            tports=`$SERVINFO -p -t -s $iana_name 2>/dev/null`
            uports=`$SERVINFO -p -u -s $iana_name 2>/dev/null`
        fi

        if [ -n "$tports" ]; then
            for tport in $tports; do
                echo "pass in log quick proto tcp from any" \
                    "to any port = ${tport} flags S " \
                    "keep state" >>${file}
            done
        fi

        if [ -n "$uports" ]; then
            for uport in $uports; do
                echo "pass in log quick proto udp from any" \
                    "to any port = ${uport}" >>${file}
            done
        fi
    fi

    ;;

*)
    echo "Usage: $0 { start | stop | refresh }"
    exit 1
    ;;
esac
exit $SMF_EXIT_OK