Linux 第三本书第五单元--------网络文件系统

本文链接：https://blog.csdn.net/qq_47783923/article/details/121319846

共享文件
nodea---服务端
nodeb---客户端

nodea：
dnf install samba-client samba-common samba -y
下载amba-client samba-common samba
cd /etc/samba

systemctl status smb.service
systemctl enable --now smb.service
firewall-cmd --permanent --add-service=samba
firewall-cmd --reload

smbpasswd -a westos ----建立westos用户（只能建立存在用户）
useradd -s /sbin/nologin -M zzz
smbpasswd -a zzz
pdbedit -L ----查看所有用户
mkdir /westos

mv smb.conf smb.conf.bak
cp smb.conf.example smb.conf ------备份配置文件

semanage fcontext -a -t samba_share_t '/westos(/.*)?' ---改写安全上下文
restorecon -RvvF /westos/ ---查看改写的安全上下文

vim /etc/samba/smb.conf
{
[westosshare]
comment = westos dir
path = /westos
}
systemctl restart smb.service

touch /westos/file{1..10}

nodeb:
dnf install samba-client -y
smbclient -L //172.25.254.104 -U westos     ---验证westos用户
smbclient -L //172.25.254.104 -U zzz             ----验证zzz用户
mount -o username=zzz,password=westos //172.25.254.104/westosshare /mnt/
    挂载共享到mnt下

cd /mnt

smbclient //172.25.254.104/westosshare -U zzz --登陆查看nodea共享的file{1..10}

==============================================================

sbmba常用配置

writable = yes                     -----可写
write list = westos                 -----指定用户可写
write list = +westos               ------指定组可写
write list = @westos
valid users = lee                       ---指定访问用户
valid users = +lee|@lee               -----指定访问组
browseable = yes|no                  -------是否隐藏共享

{
map to guest = bad user                ----写到全局设定中
guest ok = yes                           ----允许匿名用户访问
}
admin users = lee                         ----指定此共享超级用户身份

=================================================================

samba的多用户挂载

客户端：

dnf install cifs-utils -y
umount /mnt
vim .smbauth
chmod 600 .smbauth

mount -o credentials=/root/.smbauth,multiuser,sec=ntlmssp //172.25.254.104/westosshare /mnt                   ----挂载
【
credentials=/root/.smbauth---指定认证文件
   multiuser                ----支持多用户
   sec=ntlmssp              ----指定认证类型
】

su - westos

cifscreds add -u westos 172.25.254.104
ls /mnt

==========================================================

autofs+samba

dnf install autofs-1:5.1.4-40.el8.x86_64 -y
systemctl enable --now autofs.service

vim /etc/auto.master
{
/samba /etc/auto.samba

}

vim /etc/auto.samba
{
westos -fstype=cifs,credentials=/root/.smbauth,multiuser,sec=ntlmssp ://172.25.254.104/westosshare

}
vim /etc/autofs.conf
{
timeout = 5
}

systemctl restart autofs

cd /samba/westos
df                         -------查看挂载成功
cd                        ----退出目录
df                            -----自动取消挂载

========================================================

nfs

nodea:
dnf install nfs-utils -y

systemctl enable --now nfs-server

firewall-cmd --permanent --add-service=nfs

firewall-cmd --permanent --add-service=rpc-bind

firewall-cmd --permanent --add-service=mountd
需要添加三个服务

firewall-cmd --reload

mkdir /westosnfs

chmod 777 /westosnfs

vim /etc/exports
{
/westosnfs *(rw) ------给所有人读写
}
exportfs -rv

nodeb:
showmount -e 172.25.254.104 连接服务端

mount 172.25.254.104:/westosnfs /mnt/ ---挂载mnt下
cd /mnt
touch westosfile{1..10}

再到ndoea里看
ll /westosnfs

========================================================

nfs自动挂载

nodeb:

umount /mnt

vim /etc/auto.master
{
/nfsshare /etc/auto.nfs
}

vim /etc/auto.nfs
{
westosnfs -rw 172.25.254.104:/westosnfs
}

systemctl restart autofs.service

cd /nfsshare
cd westosnfs

df
==================iscsi============磁盘共享
104服务端：
dnf install targetcli -y
fdisk -l   ###查看磁盘分区：若无vdb，需要关闭虚拟机进行添加
fdisk /dev/vdb ：n添加，+2G，p查看，wq退出保存
targetcli    ###进入编辑
------------------
/backstores/block create westos:storage1 /dev/vdb1 ###在软件中建立一个别名为storage1
                        在此软件中设备的别名系统中真实的设备
/iscsi create iqn.2021-11.org.westos:storage1 ###建立对外的共享名称

/iscsi/iqn.2021-11.org.westos:storage1/tpg1/luns create /backstores/block/westos:storage1   ###把共享名称和内部制定的设备关联
/iscsi/iqn.2021-11.org.westos:storage1/tpg1/acls create iqn.2021-11.org.westos:westoskey1   ###为共享设备设定访问key
ls
exit
--------------------
firewall-cmd --permanent --add-port=3260/tcp    ###火墙中添加端口
firewall-cmd --reload

204客户端：
dnf search iscsi
dnf install iscsi-initiator-utils.x86_64 -y
iscsiadm -m discovery -t st -p 172.25.254.104    ###查找iscsi设备
vim /etc/iscsi/initiatorname.iscsi    ###编辑访问key否则无法登陆
------------------
InitiatorName=iqn.2021-11.org.westos:westoskey1   ###与103上targetcli编辑的一致
-------------------
systemctl restart iscsid
iscsiadm -m node -T iqn.2021-11.org.westos:storage1 -p 172.25.254.104 -l   ###-l：登陆
fdisk -l    ###多了一个/dev/sda
mkfs.xfs /dev/sda1    ###扫描/dev/sda
mount /dev/sda1 /mnt/    ###挂载到mnt
df    ###查看挂载

==========================================
共享磁盘自动挂载

blkid

vim /etc/fstab
{
UUID=403c1348-5b32-4ae8-b9c2-632abce72604 /mnt xfs defaults,_netdev 0 0
}