RHEL 中級 #3 ストレージ深化 — Stratis、NFS、Samba

   ユーザーコマンド: stratis pool create / fs create / snapshot
                            │
                            ▼
                    ┌───────────────┐
                    │   stratisd    │   ← デーモン
                    └───────┬───────┘
                            │
                  ┌─────────┴─────────┐
                  │                   │
                  ▼                   ▼
            [device-mapper]      [thin pool / XFS]
                  │                   │
                  ▼                   ▼
              物理ディスク       ファイルシステム

$ sudo dnf install -y stratisd stratis-cli
$ sudo systemctl enable --now stratisd
$ sudo stratis daemon version
3.x.x

$ sudo stratis pool create data_pool /dev/vdb /dev/vdc
$ sudo stratis pool list
Name        Total / Used / Free   Properties
data_pool   30 GiB / 564 MiB / 29.4 GiB   Cr,~Ca

$ sudo stratis blockdev list data_pool
Pool Name   Device Node   Physical Size   Tier
data_pool   /dev/vdb      20 GiB          Data
data_pool   /dev/vdc      10 GiB          Data

$ sudo stratis filesystem create data_pool myfs
$ sudo stratis filesystem list
Pool      Filesystem   Total / Used / Free   Created            Device
data_pool myfs         1 TiB / 546 MiB / 1023 GiB   Apr 18 ...   /dev/stratis/data_pool/myfs

$ sudo mkdir -p /myfs
$ sudo mount /dev/stratis/data_pool/myfs /myfs

# 実際の /etc/fstab には pool UUID helper を使います。
$ sudo stratis pool list
Name        Total / Used / Free   Properties
data_pool   30 GiB / 564 MiB / 29.4 GiB   Cr,~Ca

/dev/stratis/data_pool/myfs  /myfs  xfs  defaults,x-systemd.requires=stratis-fstab-setup@<pool-uuid>.service,x-systemd.after=stratis-fstab-setup@<pool-uuid>.service  0  0

$ sudo stratis filesystem snapshot data_pool myfs myfs_snap
$ sudo stratis filesystem list
Pool      Filesystem   ...   Device
data_pool myfs         ...   /dev/stratis/data_pool/myfs
data_pool myfs_snap    ...   /dev/stratis/data_pool/myfs_snap

$ sudo stratis pool add-data data_pool /dev/vdd
$ sudo stratis pool list
Name        Total / Used / Free   ...
data_pool   40 GiB / 1.2 GiB / 38.8 GiB

   ┌────────────────┐                ┌────────────────┐
   │  NFS サーバー  │                │  NFS クライアント│
   │  (exports)     │                │  (mount)        │
   ├────────────────┤                ├────────────────┤
   │ /var/nfs/share │ ─── network ─→ │ /mnt/share      │
   └────────────────┘                └────────────────┘

$ sudo dnf install -y nfs-utils
$ sudo systemctl enable --now nfs-server
$ systemctl status nfs-server

$ sudo mkdir -p /var/nfs/share
$ sudo chown nobody:nobody /var/nfs/share
$ sudo chmod 775 /var/nfs/share

# ディレクトリ      クライアント(オプション)
/var/nfs/share   192.168.64.0/24(rw,sync,no_subtree_check)
/var/nfs/ro      *(ro,sync,no_subtree_check)

$ sudo exportfs -rav
exporting 192.168.64.0/24:/var/nfs/share
exporting *:/var/nfs/ro

$ sudo exportfs -v       # 現在の export 一覧

$ sudo firewall-cmd --permanent --add-service=nfs
$ sudo firewall-cmd --permanent --add-service=mountd
$ sudo firewall-cmd --permanent --add-service=rpc-bind
$ sudo firewall-cmd --reload

$ sudo setsebool -P nfs_export_all_rw on

$ sudo dnf install -y nfs-utils
$ sudo mkdir -p /mnt/share
$ sudo mount -t nfs 192.168.64.10:/var/nfs/share /mnt/share

$ df -hT /mnt/share
Filesystem                          Type Size Used Avail Use% Mounted on
192.168.64.10:/var/nfs/share        nfs4 20G  175M 20G   1%   /mnt/share

192.168.64.10:/var/nfs/share  /mnt/share  nfs  defaults,_netdev,nofail  0  0

$ sudo dnf install -y autofs

# /etc/auto.master.d/share.autofs
/mnt/auto    /etc/auto.share

# /etc/auto.share
share    -fstype=nfs,rw    192.168.64.10:/var/nfs/share

$ sudo systemctl enable --now autofs

$ sudo dnf install -y samba samba-client
$ sudo systemctl enable --now smb nmb

[global]
   workgroup = WORKGROUP
   server string = RHEL 9 Samba
   security = user
   map to guest = bad user
   netbios name = RHEL9LAB

[share]
   comment = Shared folder
   path = /var/samba/share
   browseable = yes
   read only = no
   guest ok = no
   valid users = curtis, alice

$ sudo useradd -s /sbin/nologin curtis    # すでにあれば省略
$ sudo smbpasswd -a curtis
New SMB password: ...
Retype new SMB password: ...

$ sudo pdbedit -L                          # 登録済み Samba ユーザー一覧
curtis:1000:Curtis Kim

$ sudo mkdir -p /var/samba/share
$ sudo chown -R curtis:curtis /var/samba/share
$ sudo chmod 770 /var/samba/share

$ sudo semanage fcontext -a -t samba_share_t "/var/samba/share(/.*)?"
$ sudo restorecon -Rv /var/samba/share
$ sudo setsebool -P samba_export_all_rw on

$ sudo firewall-cmd --permanent --add-service=samba
$ sudo firewall-cmd --reload

$ sudo dnf install -y cifs-utils
$ sudo mkdir -p /mnt/smbshare
$ sudo mount -t cifs //192.168.64.10/share /mnt/smbshare \
    -o username=curtis,uid=$(id -u),gid=$(id -g)

//192.168.64.10/share  /mnt/smbshare  cifs  credentials=/root/.smbcreds,_netdev,nofail  0  0

$ sudo testparm
Load smb config files from /etc/samba/smb.conf
Loaded services file OK.
Server role: ROLE_STANDALONE
...
[global]
   ...
[share]
   ...