May 2026 - Devel - NFS Ganesha List Archives

Run multiple instances of NFSv4 server on same host / proper use of NFS_CORE_PARAM NFS_Program
by Dr. Thomas Orgis 01 Jun '26

01 Jun '26

Hi, I am investigating the option of running nfs-ganesha in an unprivileged user/mount namespace on Linux, to export some directory only visible there, in addition to a main NFS server on the same host. It should be a simple world-readable share, no security considerations client-side. The machine hosts a regular NFS v3 and v4 service that should not be bothered with this task (and it cannot access the FUSE-based mount in the namespace that should be exported, and probably should not for containment/security reasons). I figured that it should be possible to run a NFSv4 server on a different TCP port than 2049, not needing further RPC port mapping. I tried this: NFS_CORE_PARAM { Protocols = 4; NFS_Port = 2050; Enable_UDP = false; Bind_addr = [some IP]; } NFS_KRB5 { Active_krb5 = false; } But soon realized that I am forced to specify additional values to make ganesha.nfsd even try to start, even if I don't need rquota, for example: NFS_CORE_PARAM { Rquota_Port = 8750; # even for nfsv4, ganesha insists on rpcbind?! NFS_Program = 200003; Rquota_Program = 200001; } I can of course not use the default NFS_Program value, as that is occupied by the main NFS instance. Well, at least I assume that from this error: 09/05/2026 18:00:53 : epoch 69ff5a35 : server : ganesha.nfsd-3213231[main] __Register_program :DISP :MAJ :Cannot register NFS V4 on TCP When I run with this setup, the client can contact ganesha, but errors out: client:/# mount -o nfsvers=4.2,proto=tcp,port=2050,ro server:/mount /mount mount.nfs: Protocol family not supported And I see this message in ganesha log with -N FULL_DEBUG: 09/05/2026 17:48:28 : epoch 69ff5747 : server : ganesha.nfsd-3207650[svc_6] nfs_rpc_noprog :DISP :F_DBG :Invalid Program number 100003 This suggests that I still do have a conflict with the RPC program 100003 … I am not that intimate with the details of the NFS protocol. The client does not need to RPC portmap, but the RPC stuff is still needed on the server and prevents multiple instances of NFS servers on one system? What is NFS_Program even for when client mount requests result in Program number 100003 being tried, anyway? Is there another trick I need to add to make this work? When I don't specify NFS_Program to a different value, the client gets mount.nfs: mounting server:/mount failed, reason given by server: No such file or directory I see 09/05/2026 18:03:48 : epoch 69ff5aaf : server : ganesha.nfsd-3214122[svc_2] nfs_rpc_process_request :DISP :DEBUG :Request from ::ffff:[client_ip] for Program 100003, Version 4, Function 1 has xid=1120240127 This seems to imply that the client hardcodes program 100003. I don't see an option for that in nfs(5). Could it be that a simple modification in mount.nfs to add an option for the RPC program to call would enable multiple instances of NFSv4 servers on one system, and that right now the presense of NFS_Program in ganesha config doesn't serve a purpose, at least with Linux kernel clients? Alrighty then, Thomas PS: I have this very setup running with Samba smbd in the namespace kistening on a non-standard port instead of NFS, wich works in principle, but the share needs to support file names with ':' in them, and POSIX semantics in general, so that I figured NFS would be the choice after all. The v9fs Linux client has some warnings to it regarding robustness that make me hesitate to switch to that protocol. -- Dr. Thomas Orgis HPC @ Universität Hamburg

1 2

[XL] Change in ...nfs-ganesha[next]: Implement Internal NSM
by Frank Filz (GerritHub) 29 May '26

29 May '26

Frank Filz has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238226?usp=email ) Change subject: Implement Internal NSM ...................................................................... Implement Internal NSM Add recovery database for recovery_fs and NSM code to support Ganesha taking over from rpc.statd. Ganesha will send SM_NOTIFY from the database and process SM_NOTIFY sent from clients. Change-Id: I4d66aaa09a3ada046c96e735b3e49006cd8a01c8 Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com> MORE internal NSM Change-Id: Ic645da1eb37c8951bff7678ccbe9e460393f7e25 Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com> --- M src/CMakeLists.txt M src/MainNFSD/libganesha_nfsd.ver M src/MainNFSD/nfs_admin_thread.c M src/MainNFSD/nfs_init.c M src/MainNFSD/nfs_rpc_dispatcher_thread.c M src/MainNFSD/nfs_worker_thread.c M src/Protocols/NLM/CMakeLists.txt M src/Protocols/NLM/nlm_util.c M src/Protocols/NLM/nsm.c M src/Protocols/XDR/xdr_nsm.c M src/SAL/nfs4_recovery.c M src/SAL/nlm_owner.c M src/SAL/recovery/recovery_fs.c M src/SAL/state_lock.c M src/include/gsh_recovery.h M src/include/gsh_rpc.h M src/include/nfs_init.h M src/include/nfs_proto_data.h M src/include/nfs_proto_functions.h M src/include/nsm.h M src/include/sal_data.h M src/include/sal_functions.h M src/support/nfs_read_conf.c 23 files changed, 1,669 insertions(+), 33 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/26/1238226/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238226?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: Ic645da1eb37c8951bff7678ccbe9e460393f7e25 Gerrit-Change-Number: 1238226 Gerrit-PatchSet: 1 Gerrit-Owner: Frank Filz <ffilzlnx(a)mindspring.com>

1 0

[L] Change in ...nfs-ganesha[next]: Rewrite sm_notify.c to use CLNT_CALL_WAIT instead of sendto
by Frank Filz (GerritHub) 29 May '26

29 May '26

Frank Filz has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238225?usp=email ) Change subject: Rewrite sm_notify.c to use CLNT_CALL_WAIT instead of sendto ...................................................................... Rewrite sm_notify.c to use CLNT_CALL_WAIT instead of sendto Using sendto was failing, this is a more robust implementation. Change-Id: Ia7e14ef7b5fddd1bf4ece29a0e36ed78bb645567 Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com> --- M src/Protocols/NLM/sm_notify.c 1 file changed, 282 insertions(+), 74 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/25/1238225/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238225?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: Ia7e14ef7b5fddd1bf4ece29a0e36ed78bb645567 Gerrit-Change-Number: 1238225 Gerrit-PatchSet: 1 Gerrit-Owner: Frank Filz <ffilzlnx(a)mindspring.com>

1 0

[XS] Change in ...nfs-ganesha[next]: TEMP ntirpc pullup
by Frank Filz (GerritHub) 29 May '26

29 May '26

Frank Filz has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238224?usp=email ) Change subject: TEMP ntirpc pullup ...................................................................... TEMP ntirpc pullup Change-Id: I16a9f8f1983e00b9c809759a48b4b47db2735f66 Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com> --- M src/libntirpc 1 file changed, 1 insertion(+), 1 deletion(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/24/1238224/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238224?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I16a9f8f1983e00b9c809759a48b4b47db2735f66 Gerrit-Change-Number: 1238224 Gerrit-PatchSet: 1 Gerrit-Owner: Frank Filz <ffilzlnx(a)mindspring.com>

1 0

[M] Change in ...nfs-ganesha[next]: Client list normalization - all have str
by Frank Filz (GerritHub) 29 May '26

29 May '26

Frank Filz has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238223?usp=email ) Change subject: Client list normalization - all have str ...................................................................... Client list normalization - all have str All forms of base_client_entry will have a string form so eliminate the union and move str and cidr to base fields. This incidentally eliminates some memory leaks in code that did not account for freeing result of cidr_to_str. This saves everyone that converts a NETWORK_CLIENT to string from having to call cidr_to_str and simplifies because every client type has a string. Change-Id: I0e2c1496758718b0f34d696c8711bece2cb0999b Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com> --- M src/Protocols/NFS/mnt_Export.c M src/include/client_mgr.h M src/log/log_functions.c M src/support/client_mgr.c M src/support/export_mgr.c 5 files changed, 40 insertions(+), 192 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/23/1238223/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238223?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I0e2c1496758718b0f34d696c8711bece2cb0999b Gerrit-Change-Number: 1238223 Gerrit-PatchSet: 1 Gerrit-Owner: Frank Filz <ffilzlnx(a)mindspring.com>

1 0

[XS] Change in ...nfs-ganesha[next]: Explicitly include uid2grp.h
by Frank Filz (GerritHub) 29 May '26

29 May '26

Frank Filz has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238222?usp=email ) Change subject: Explicitly include uid2grp.h ...................................................................... Explicitly include uid2grp.h And in one case forward declare struct group_data Change-Id: I813fd9a5ed24468441aec98c6be0c1f17b2f2931 Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com> --- M src/MainNFSD/nfs_admin_thread.c M src/Protocols/9P/9p_walk.c M src/Protocols/9P/9p_xattrwalk.c M src/idmapper/idmapper.c M src/include/fsal_api.h M src/include/fsal_types.h 6 files changed, 7 insertions(+), 2 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/22/1238222/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238222?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I813fd9a5ed24468441aec98c6be0c1f17b2f2931 Gerrit-Change-Number: 1238222 Gerrit-PatchSet: 1 Gerrit-Owner: Frank Filz <ffilzlnx(a)mindspring.com>

1 0

[M] Change in ...nfs-ganesha[next]: Trim gsh_rpc.h from many places, also a few other redundant includes
by Frank Filz (GerritHub) 29 May '26

29 May '26

Frank Filz has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238221?usp=email ) Change subject: Trim gsh_rpc.h from many places, also a few other redundant includes ...................................................................... Trim gsh_rpc.h from many places, also a few other redundant includes Change-Id: I31af1cfc45966cb1771efcf50e407572c9930008 Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com> --- M src/FSAL/FSAL_CEPH/mds.c M src/FSAL/FSAL_GLUSTER/mds.c M src/MainNFSD/nfs_main.c M src/MainNFSD/nfs_rpc_dispatcher_thread.c M src/MainNFSD/nfs_rpc_tcp_socket_manager_thread.c M src/Protocols/NFS/nfs3_access.c M src/Protocols/NFS/nfs3_commit.c M src/Protocols/NFS/nfs3_fsstat.c M src/Protocols/NFS/nfs3_getattr.c M src/Protocols/NFS/nfs3_readlink.c M src/Protocols/NFS/nfs3_remove.c M src/Protocols/NFS/nfs3_rmdir.c M src/Protocols/NFS/nfs3_setattr.c M src/Protocols/NFS/nfs4_cb_Compound.c M src/Protocols/NFS/nfs4_op_access.c M src/Protocols/NFS/nfs4_op_delegpurge.c M src/Protocols/NFS/nfs4_op_delegreturn.c M src/Protocols/NFS/nfs4_op_free_stateid.c M src/Protocols/NFS/nfs4_op_getattr.c M src/Protocols/NFS/nfs4_op_getfh.c M src/Protocols/NFS/nfs4_op_illegal.c M src/Protocols/NFS/nfs4_op_layoutget.c M src/Protocols/NFS/nfs4_op_layoutreturn.c M src/Protocols/NFS/nfs4_op_link.c M src/Protocols/NFS/nfs4_op_open_confirm.c M src/Protocols/NFS/nfs4_op_open_downgrade.c M src/Protocols/NFS/nfs4_op_read.c M src/Protocols/NFS/nfs4_op_readdir.c M src/Protocols/NFS/nfs4_op_reclaim_complete.c M src/Protocols/NFS/nfs4_op_set_ssv.c M src/Protocols/NFS/nfs4_op_test_stateid.c M src/Protocols/NFS/nfs_null.c M src/Protocols/NFSACL/nfsacl_Null.c M src/Protocols/NFSACL/nfsacl_getacl.c M src/Protocols/NFSACL/nfsacl_setacl.c M src/Protocols/NLM/nlm_Free_All.c M src/Protocols/NLM/nlm_Null.c M src/Protocols/NLM/nlm_Sm_Notify.c M src/Protocols/NLM/nsm.c M src/Protocols/RQUOTA/rquota_Null.c M src/Protocols/RQUOTA/rquota_getactivequota.c M src/Protocols/RQUOTA/rquota_getquota.c M src/Protocols/RQUOTA/rquota_setactivequota.c M src/Protocols/RQUOTA/rquota_setquota.c M src/Protocols/XDR/xdr_mount.c M src/Protocols/XDR/xdr_nfs23.c M src/Protocols/XDR/xdr_nlm4.c M src/RPCAL/gss_extra.c M src/SAL/nfs4_state_id.c M src/include/client_mgr.h M src/include/gsh_config.h M src/include/nfs_init.h M src/include/nfs_ip_stats.h M src/include/nfs_proto_data.h M src/include/nlm4.h M src/include/uid2grp.h M src/log/log_functions.c M src/support/nfs_creds.c M src/support/nfs_read_conf.c M src/support/uid2grp.c 60 files changed, 5 insertions(+), 104 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/21/1238221/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238221?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I31af1cfc45966cb1771efcf50e407572c9930008 Gerrit-Change-Number: 1238221 Gerrit-PatchSet: 1 Gerrit-Owner: Frank Filz <ffilzlnx(a)mindspring.com>

1 0

[M] Change in ...nfs-ganesha[next]: Move a few more bits from gsh_rpc.h to ip_utils.h
by Frank Filz (GerritHub) 29 May '26

29 May '26

Frank Filz has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238220?usp=email ) Change subject: Move a few more bits from gsh_rpc.h to ip_utils.h ...................................................................... Move a few more bits from gsh_rpc.h to ip_utils.h Change-Id: Iba5f8ead7336db80d1e8eba6c9151f82283601a2 Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com> --- M src/MainNFSD/nfs_rpc_dispatcher_thread.c M src/include/gsh_rpc.h M src/include/ip_utils.h 3 files changed, 68 insertions(+), 71 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/20/1238220/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238220?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: Iba5f8ead7336db80d1e8eba6c9151f82283601a2 Gerrit-Change-Number: 1238220 Gerrit-PatchSet: 1 Gerrit-Owner: Frank Filz <ffilzlnx(a)mindspring.com>

1 0

[S] Change in ...nfs-ganesha[next]: NFSv4: fix OPEN_DOWNGRADE validation for BOTH after separate opens
by JAGNYA DATTA TRIPATHY (GerritHub) 28 May '26

28 May '26

JAGNYA DATTA TRIPATHY has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238122?usp=email ) Change subject: NFSv4: fix OPEN_DOWNGRADE validation for BOTH after separate opens ...................................................................... NFSv4: fix OPEN_DOWNGRADE validation for BOTH after separate opens When a client opens a file twice -- first with READ-only, then with WRITE-only -- the server accumulates share_access_prev as: (1 << OPEN4_SHARE_ACCESS_READ) = bit 1 (value 2) (1 << OPEN4_SHARE_ACCESS_WRITE) = bit 2 (value 4) share_access_prev = 6 The combined share_access is now BOTH (3). A subsequent OPEN_DOWNGRADE to BOTH is a valid no-op: the client holds all rights that BOTH represents. However the existing check: share_access_prev & (1 << OPEN4_SHARE_ACCESS_BOTH) = 6 & (1 << 3) = 6 & 8 = 0 -> NFS4ERR_INVAL fails because BOTH (3) was never passed as a single mode value to any OPEN call, so its bit (bit 3 = value 8) was never stored. RFC 7530 §16.19.4 / RFC 5661 §18.18.3 state that the downgrade target must be "a subset of those used in all OPEN calls". For BOTH this means: valid if BOTH was directly opened OR if both READ and WRITE were individually opened (their union equals BOTH). Introduce share_downgrade_allowed() to implement this rule. For any target other than BOTH the function reduces to the original single-bit check, preserving all existing pynfs OPDG test behaviour: OPDG2: OPEN(BOTH) -> downgrade(READ) -- target=READ != BOTH original check: 8 & 2 = 0 -> NFS4ERR_INVAL (correct, unchanged) OPDG3: OPEN(WRITE)+OPEN(BOTH) -> downgrade(READ) -- target=READ original check: 12 & 2 = 0 -> NFS4ERR_INVAL (correct, unchanged) The BOTH special case only activates for the accumulation scenario and correctly returns NFS4_OK where the original code returned NFS4ERR_INVAL. Change-Id: I58751d89b50933db5223e3620f23d1857893ca77 Signed-off-by: Jagnya Tripathy <jagnya.tripathy(a)gmail.com> --- M src/Protocols/NFS/nfs4_op_open_downgrade.c 1 file changed, 30 insertions(+), 5 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/22/1238122/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238122?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I58751d89b50933db5223e3620f23d1857893ca77 Gerrit-Change-Number: 1238122 Gerrit-PatchSet: 1 Gerrit-Owner: JAGNYA DATTA TRIPATHY <jagnya.tripathy(a)gmail.com>

1 0

[M] Change in ...nfs-ganesha[next]: NFSv4: fix share_access_prev/share_deny_prev bitmask corruption
by JAGNYA DATTA TRIPATHY (GerritHub) 28 May '26

28 May '26

JAGNYA DATTA TRIPATHY has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238099?usp=email ) Change subject: NFSv4: fix share_access_prev/share_deny_prev bitmask corruption ...................................................................... NFSv4: fix share_access_prev/share_deny_prev bitmask corruption When OPEN4_SHARE_ACCESS_BOTH (3) is passed, the original code computes (1 << 3) = 8, setting only a phantom bit 3 in the share_access_prev tracking mask. The OPEN_DOWNGRADE validator looks for (1 << OPEN4_SHARE_ACCESS_READ) = bit 1 and (1 << OPEN4_SHARE_ACCESS_WRITE) = bit 2, neither of which is ever set, so any OPEN_DOWNGRADE following a BOTH-access open returns NFS4ERR_INVAL. This violates RFC 5661 §9.9.1. Introduce build_atomic_prev_mask() in nfs4_op_open.c to decompose a composite share value into its atomic component bit positions (READ and WRITE) before storing in the share_access_prev / share_deny_prev fields. Apply it to both the new-state creation path and the open-upgrade path. Introduce share_prev_covers() in nfs4_op_open_downgrade.c to perform the symmetric decomposition on the downgrade request before checking coverage. This fixes a secondary regression that the init-only fix would introduce: without this change a client downgrading back to BOTH (valid no-op) would see NFS4ERR_INVAL because (1 << 3) = 8 is no longer present in the corrected mask (which stores 6 = (1<<1)|(1<<2)). Truth table after fix (OPEN with BOTH, share_access_prev = 6): OPEN_DOWNGRADE to READ (1): required=2, 6&2=2 -> NFS4_OK OPEN_DOWNGRADE to WRITE (2): required=4, 6&4=4 -> NFS4_OK OPEN_DOWNGRADE to BOTH (3): required=6, 6&6=6 -> NFS4_OK Change-Id: I55dd120bd1fe71b6e5d54fc0fc33b1e92047411f Signed-off-by: Jagnya Tripathy <jagnya.tripathy(a)gmail.com> --- M src/Protocols/NFS/nfs4_op_open.c M src/Protocols/NFS/nfs4_op_open_downgrade.c 2 files changed, 43 insertions(+), 11 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/99/1238099/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1238099?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I55dd120bd1fe71b6e5d54fc0fc33b1e92047411f Gerrit-Change-Number: 1238099 Gerrit-PatchSet: 1 Gerrit-Owner: JAGNYA DATTA TRIPATHY <jagnya.tripathy(a)gmail.com>

1 0