...
Install the NFS server and tools if not installed. On CentOS:
No Format sudo yum install nfs-utils
On Ubuntu
Configure the directory or directories to export. For example, if you want to share a directory called /data within your private tenant network (here, we assume it's 192.168.1.0/24)
No Format echo "/data 192.168.1.0/24(rw,sync,no_root_squash) | sudo tee -a /etc/exports
You may want to adapt it to suit your needs.
Start the services. On CentOS:
No Format sudo systemctl enable rpcbind sudo systemctl enable nfs-server sudo systemctl enable nfs-lock sudo systemctl enable nfs-idmap sudo systemctl start rpcbind sudo systemctl start nfs-server sudo systemctl start nfs-lock sudo systemctl start nfs-idmap
On Ubuntu:
No Format sudo service nfs-kernel-server restart
You may need to configure the firewall to recognise your private network IP range (here assumed to be 192.168.1.0/24 ) as trusted, enabling access to the NFS server. On CentOS:
No Format sudo firewall-cmd --permanent --zone=trusted --add-source=192.168.1.0/24 sudo firewall-cmd --reload
Warning Do not enable NFS on a public / internet-facing interface! Take note of the private IP of the server, as you will need it when configuring the clients. On the EUMETSAT part of EWC, you can also use the name of the machine, but the IP will work too.
No Format ip addr show
Creating new Security Group for NFS server
NFS uses 111 (UDP and TCP) and 2049 (TCP and UDP) ports for communicating through the network. In order to allow connections coming from the network to those ports, you need to create a new security group and set rules. Our "Creating Security Groups" knowledge base article covers the details regarding with the task and you can follow it to create your own rule to allow NFS connections.
Installing and configuring the NFS clients
...