Defining /etc/exports file entries

[MikeL_4]

We have an entry in /etc/exports for NFS mounting a directory on 2 of our servers that have full access to this directory structure.

/appscode -root=server1:server2

We now have a request to allow any server read access to a subdirectory under /appscode

When I try to add another entry for this subdirectory:
/appscode/pkgs/apps_A -anon=2

The exportfs -av complains that /appscode is already exported:

exportfs error: /appscode/pkgs/apps_A: parent-directory (/appscode) already exported

Is there any way around this and locking them into only knowing about this directory ?

[Tim Nelson · Accepted solution]

Not if you already have the parent exported somewhere.

You can create multiple sub-directory exports after you remove the parent.

The other option is to export the parent and control the sub-dirs by permissions.

I would stay away from the "any" server as well. A controlled list of servers would be more secured vs anybody from anywhere.

[A. Clay Stephenson]

Not with the question as stated. You could export several separate subtrees under /appscode which would require more client mounts.

[MikeL_4]

Thanks