Skip to content

Ansible Role linuxfabrik.lfops.mount

This role installs NFS and CIFS client utilities when necessary and configures mount points in /etc/fstab.

Available since LFOps 3.0.0.

How the Role Behaves

  • A freshly created filesystem carries no SELinux labels, so confined services such as Apache httpd are denied access to it. When SELinux is not disabled and the mount point of a mounted filesystem is still unlabeled_t, the role runs restorecon -R on it once. A filesystem that already carries labels is not touched, so a context set by hand, for example with chcon, survives. NFS and CIFS shares get their context from the mount options and are never relabeled.

Tags

mount

  • Installs nfs-utils/cifs on RedHat-Based systems or nfs-common/cifs-utils on Debian-Based systems, creates the corresponding directories for the mount points, alters /etc/fstab and mounts the volumes.
  • Relabels a mounted filesystem with restorecon -R while its mount point carries no SELinux label (unlabeled_t), as on a freshly created volume.
  • Triggers: none.

Optional Role Variables

mount__mounts__host_var / mount__mounts__group_var

  • List of directories containing the mounts to create.

  • Subkeys:

    • path:

      • Mandatory. Path to the mount point.
      • Type: String.

    • src:

      • Mandatory. Device (or NFS volume, or something else) to be mounted on path.
      • Type: String.

    • fstype:

      • Mandatory. Filesystem type.
      • Type: String.

    • group:

      • Optional. Group of the mount point directory.
      • Type: String.
      • Default: 'root'

    • opts:

      • Optional. Mount options, man fstab.
      • Type: String.

    • owner:

      • Optional. Owner of the mount point directory.
      • Type: String.
      • Default: 'root'

    • state:

      • Optional. Possible options: absent, absent_from_fstab, ephemeral, mounted, present, remounted or unmounted. For details, have a look at the ansible.posix.mount module.
      • Type: String.
      • Default: 'mounted'

  • Type: List of dictionaries.

  • Default: []

Example:

# optional
mount__mounts__host_var:
  - path: '/mnt/nfs/data'
    fstype: 'nfs'
    src: 'nfs-server.example.com:/path/to/exported/data'
    opts: 'defaults'
    state: 'mounted'
  - path: '/mnt/cifs/data'
    fstype: 'cifs'
    src: '//cifs-server.example.com/CIFS-Share'
    opts: 'username=USERNAME,password=PASSWORD,vers=2.0,rw'
    state: 'mounted'
  - path: '/data'
    fstype: 'xfs'
    src: '/dev/sdb1'
    owner: 'myuser'
    group: 'mygroup'
    opts: 'defaults'
    state: 'mounted'

Troubleshooting

mount.nfs: access denied by server while mounting

  • Run exportfs -rv on the NFS server and try again.

License

The Unlicense

Author Information

Linuxfabrik GmbH, Zurich