svc - zygaena/hammerhead

root / base / usr / src / cmd / fs.d / nfs / svc
svc Plain Text 1504 lines 42.5 KB
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# Copyright 2012 Nexenta Systems, Inc.  All rights reserved.

#
#

MANIFEST=	server.xml client.xml rquota.xml mapid.xml nlockmgr.xml \
		status.xml cbd.xml nfslogd.xml
SVCMETHOD=	nfs-server nfs-client nlockmgr

include $(SRC)/cmd/Makefile.cmd

ROOTMANIFESTDIR=	$(ROOTSVCNETWORKNFS)

all:

install:	$(ROOTMANIFEST) $(ROOTSVCMETHOD)

clean:
	$(RM) $(OBJS)

check:		$(CHKMANIFEST)

include $(SRC)/cmd/Makefile.targ
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<!--
 Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
 Use is subject to license terms.

 CDDL HEADER START

 The contents of this file are subject to the terms of the
 Common Development and Distribution License (the "License").
 You may not use this file except in compliance with the License.

 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 or http://www.opensolaris.org/os/licensing.
 See the License for the specific language governing permissions
 and limitations under the License.

 When distributing Covered Code, include this CDDL HEADER in each
 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 If applicable, add the following below this CDDL HEADER, with the
 fields enclosed by brackets "[]" replaced with your own identifying
 information: Portions Copyright [yyyy] [name of copyright owner]

 CDDL HEADER END

	NOTE:  This service manifest is not editable; its contents will
	be overwritten by package or patch operations, including
	operating system upgrade.  Make customizations in a different
	file.

	Note: if this service is modified to consist of anything other
	than a single instance named 'default', you must make changes to
	$SRC/head/rpcsvc/daemon_utils.h and libnsl:open_daemon_lock().
-->

<service_bundle type='manifest' name='SUNWnfscr:nfs-cbd'>

<service
	name='network/nfs/cbd'
	type='service'
	version='1'>

	<create_default_instance enabled='false' />

	<single_instance />

	<dependency name='network'
	    grouping='require_any'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/milestone/network' />
	</dependency>

	<dependency name='rpcbind'
	    grouping='require_all'
	    restart_on='restart'
	    type='service'>
		<service_fmri value='svc:/network/rpc/bind' />
	</dependency>

	<dependency name='name-services'
	    grouping='require_all'
	    restart_on='refresh'
	    type='service'>
		<service_fmri value='svc:/milestone/name-services' />
	</dependency>

	<dependency name='filesystem-minimal'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/system/filesystem/minimal' />
	</dependency>

	<exec_method
	    type='method'
	    name='start'
	    exec='/usr/lib/nfs/nfs4cbd'
	    timeout_seconds='60' />

	<exec_method
	    type='method'
	    name='stop'
	    exec=':kill'
	    timeout_seconds='60' />

	<property_group name='firewall_context' type='com.sun,fw_definition'>
		<propval name='isrpc' type='boolean' value='true' />
		<propval name='name' type='astring' value='1073741824' />
		<propval name='ipf_method' type='astring'
			value='/lib/svc/method/nfs-server ipfilter' />
	</property_group>

	<property_group name='application' type='framework'>
		<stability value='Evolving' />
		<propval name='auto_enable' type='boolean' value='true' />
	</property_group>

	<stability value='Stable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
			NFS callback service
			</loctext>
		</common_name>
		<documentation>
			<manpage title='nfs4cbd' section='8'
				manpath='/usr/share/man' />
		</documentation>
	</template>
</service>

</service_bundle>
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<!--
    CDDL HEADER START

    The contents of this file are subject to the terms of the
    Common Development and Distribution License (the "License").
    You may not use this file except in compliance with the License.

    You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
    or http://www.opensolaris.org/os/licensing.
    See the License for the specific language governing permissions
    and limitations under the License.

    When distributing Covered Code, include this CDDL HEADER in each
    file and include the License file at usr/src/OPENSOLARIS.LICENSE.
    If applicable, add the following below this CDDL HEADER, with the
    fields enclosed by brackets "[]" replaced with your own identifying
    information: Portions Copyright [yyyy] [name of copyright owner]

    CDDL HEADER END

    Copyright (c) 2004, 2010, Oracle and/or its affiliates. All rights reserved.

    NOTE:  This service manifest is not editable; its contents will
    be overwritten by package or patch operations, including
    operating system upgrade.  Make customizations in a different
    file.
-->

<service_bundle type='manifest' name='SUNWnfscr:nfs-client'>

<service
	name='network/nfs/client'
	type='service'
	version='1'>

	<dependency name='network'
	    grouping='require_any'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/milestone/network' />
	</dependency>

	<dependency name='nlockmgr'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/network/nfs/nlockmgr' />
	</dependency>

	<dependency name='cbd'
	    grouping='optional_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/network/nfs/cbd' />
	</dependency>

	<dependency name='mapid'
	    grouping='optional_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/network/nfs/mapid' />
	</dependency>

	<dependency name='rpcbind'
	    grouping='require_all'
	    restart_on='restart'
	    type='service'>
		<service_fmri value='svc:/network/rpc/bind' />
	</dependency>

	<dependency name='keyserv'
	    grouping='optional_all'
	    restart_on='none'
	    type='service'>
		<service_fmri value='svc:/network/rpc/keyserv' />
	</dependency>

	<dependency name='gss'
	    grouping='optional_all'
	    restart_on='none'
	    type='service'>
		<service_fmri value='svc:/network/rpc/gss' />
	</dependency>

	<dependency name='name-services'
	    grouping='require_all'
	    restart_on='refresh'
	    type='service'>
		<service_fmri value='svc:/milestone/name-services' />
	</dependency>

	<dependent
		name='nfs-client_multi-user'
		grouping='optional_all'
		restart_on='none'>
		<service_fmri value='svc:/milestone/multi-user' />
	</dependent>

	<!--
	  Err on the side of caution for the mountalls in the nfs-client
	  startup script.  Don't timeout just because remote servers are
	  being sluggish.
	-->
	<exec_method
	    type='method'
	    name='start'
	    exec='/lib/svc/method/nfs-client %m'
	    timeout_seconds='3600' />

	<exec_method
	    type='method'
	    name='stop'
	    exec='/lib/svc/method/nfs-client %m'
	    timeout_seconds='60' />

	<property_group
	    name='startd'
	    type='framework'>
		<propval name='duration' type='astring' value='transient' />
	</property_group>

	<instance name='default' enabled='false'>
	  <property_group name='nfs-props' type='com.oracle.nfs,props'>
	    <propval name='client_versmax' type='integer' value='4'/>
	    <propval name='client_versmin' type='integer' value='2'/>
	  </property_group>
	</instance>
	<stability value='Unstable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
			NFS client
			</loctext>
		</common_name>
		<documentation>
			<manpage title='mount_nfs' section='8'
				manpath='/usr/share/man' />
		</documentation>
	</template>
</service>

</service_bundle>
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<!--
    CDDL HEADER START

    The contents of this file are subject to the terms of the
    Common Development and Distribution License (the "License").
    You may not use this file except in compliance with the License.

    You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
    or http://www.opensolaris.org/os/licensing.
    See the License for the specific language governing permissions
    and limitations under the License.

    When distributing Covered Code, include this CDDL HEADER in each
    file and include the License file at usr/src/OPENSOLARIS.LICENSE.
    If applicable, add the following below this CDDL HEADER, with the
    fields enclosed by brackets "[]" replaced with your own identifying
    information: Portions Copyright [yyyy] [name of copyright owner]

    CDDL HEADER END

    Copyright (c) 2004, 2010, Oracle and/or its affiliates. All rights reserved.

    NOTE:  This service manifest is not editable; its contents will
    be overwritten by package or patch operations, including
    operating system upgrade.  Make customizations in a different
    file.

    Note: if this service is modified to consist of anything other
    than a single instance named 'default', you must make changes to
    $SRC/head/rpcsvc/daemon_utils.h and libnsl:open_daemon_lock().
-->

<service_bundle type='manifest' name='SUNWnfscr:nfs-mapid'>

<service
	name='network/nfs/mapid'
	type='service'
	version='1'>

	<dependency name='network'
	    grouping='require_any'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/milestone/network' />
	</dependency>

	<dependency name='rpcbind'
	    grouping='require_all'
	    restart_on='restart'
	    type='service'>
		<service_fmri value='svc:/network/rpc/bind' />
	</dependency>

	<dependency name='name-services'
	    grouping='require_all'
	    restart_on='refresh'
	    type='service'>
		<service_fmri value='svc:/milestone/name-services' />
	</dependency>

	<dependency name='idmap'
	    grouping='optional_all'
	    restart_on='none'
	    type='service'>
		<service_fmri value='svc:/system/idmap' />
	</dependency>

	<dependency name='filesystem-minimal'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/system/filesystem/minimal' />
	</dependency>

	<exec_method
	    type='method'
	    name='start'
	    exec='/usr/lib/nfs/nfsmapid'
	    timeout_seconds='60' />

	<exec_method
	    type='method'
	    name='refresh'
	    exec='/usr/bin/kill -HUP `/bin/cat /etc/svc/volatile/nfs-mapid.lock`'
	    timeout_seconds='60' />

	<exec_method
	    type='method'
	    name='stop'
	    exec=':kill'
	    timeout_seconds='60' />

	<property_group name='application' type='framework'>
		<stability value='Evolving' />
		<propval name='auto_enable' type='boolean' value='true' />
	</property_group>
	<instance name='default' enabled='false'>
	  <property_group name='nfs-props' type='com.oracle.nfs,props'>
	    <propval name='nfsmapid_domain' type='astring' value=''/>
	  </property_group>
	</instance>

	<stability value='Stable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
				NFS ID mapper
			</loctext>
		</common_name>
		<documentation>
			<manpage title='nfsmapid' section='8'
				manpath='/usr/share/man' />
		</documentation>
	</template>
</service>

</service_bundle>
#!/sbin/sh
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
# Copyright 2015 Nexenta Systems, Inc. All rights reserved.
#

#
# Start/stop client NFS service
#

. /lib/svc/share/smf_include.sh

stop_nfsclnt()
{
	/sbin/umountall -F nfs
}

case "$1" in
'start')

	/sbin/mountall -F nfs
	/sbin/swapadd
	;;

'stop')
	stop_nfsclnt
	;;

*)
	echo "Usage: $0 { start | stop }"
	exit 1
	;;
esac
exit $SMF_EXIT_OK
#!/sbin/sh
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

#
# Copyright (c) 2009, 2010, Oracle and/or its affiliates. All rights reserved.
# Copyright 2016 Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
# Copyright 2018 Nexenta Systems, Inc.  All rights reserved.
#

# Start/stop processes required for server NFS

. /lib/svc/share/smf_include.sh
. /lib/svc/share/ipf_include.sh
zone=`smf_zonename`

#
# Handling a corner case here. If we were in offline state due to an
# unsatisfied dependency, the ipf_method process wouldn't have generated
# the ipfilter configuration. When we transition to online because the
# dependency is satisfied, the start method will have to generate the
# ipfilter configuration. To avoid all possible deadlock scenarios,
# we restart ipfilter which will regenerate the ipfilter configuration
# for the entire system.
#
# The ipf_method process signals that it didn't generate ipf rules by
# removing the service's ipf file. Thus we only restart network/ipfilter
# when the file is missing.
#
configure_ipfilter()
{
	ipfile=`fmri_to_file $SMF_FMRI $IPF_SUFFIX`
	ip6file=`fmri_to_file $SMF_FMRI $IPF6_SUFFIX`
	[ -f "$ipfile" -a -f "$ip6file" ] && return 0

        #
	# Nothing to do if:
        # - ipfilter isn't online
	# - global policy is 'custom'
	# - service's policy is 'use_global'
        #
        service_check_state $IPF_FMRI $SMF_ONLINE || return 0
        [ "`get_global_def_policy`" = "custom" ] && return 0
	[ "`get_policy $SMF_FMRI`" = "use_global" ] && return 0

	svcadm restart $IPF_FMRI
}

case "$1" in
'start')
	# Share all file systems enabled for sharing. sharemgr understands
	# regular shares and ZFS shares and will handle both. Technically,
	# the shares would have been started long before getting here since
	# nfsd has a dependency on them.

	# restart stopped shares from the repository
	/usr/sbin/sharemgr start -P nfs -a

	# Options for nfsd are now set in SMF

	/usr/lib/nfs/mountd
	rc=$?
	if [ $rc != 0 ]; then
		/sbin/svcadm mark -t maintenance svc:/network/nfs/server
		echo "$0: mountd failed with $rc"
		sleep 5 &
		exit $SMF_EXIT_ERR_FATAL
	fi

	/usr/lib/nfs/nfsd
	rc=$?
	if [ $rc != 0 ]; then
		/sbin/svcadm mark -t maintenance svc:/network/nfs/server
		echo "$0: nfsd failed with $rc"
		sleep 5 &
		exit $SMF_EXIT_ERR_FATAL
	fi

	configure_ipfilter
	;;

'refresh')
	/usr/sbin/sharemgr start -P nfs -a
	;;

'stop')
	/usr/bin/pkill -x -u 0,1 -z $zone '(nfsd|mountd)'

	# Unshare all shared file systems using NFS

	/usr/sbin/sharemgr stop -P nfs -a

	# Kill any processes left in service contract
	smf_kill_contract $2 TERM 1
	[ $? -ne 0 ] && exit 1
	;;

'ipfilter')
	#
	# NFS related services are RPC. nfs/server has nfsd which has
	# well-defined port number but mountd is an RPC daemon.
	#
	# Essentially, we generate rules for the following "services"
	#  - nfs/server which has nfsd and mountd
	#  - nfs/rquota
	#
	# The following services are enabled for both nfs client and
	# server, if nfs/client is enabled we'll treat them as client
	# services and simply allow incoming traffic.
	#  - nfs/status
	#  - nfs/nlockmgr
	#  - nfs/cbd
	#
	NFS_FMRI="svc:/network/nfs/server:default"
	NFSCLI_FMRI="svc:/network/nfs/client:default"
	RQUOTA_FMRI="svc:/network/nfs/rquota:default"
	FMRI=$2

	file=`fmri_to_file $FMRI $IPF_SUFFIX`
	file6=`fmri_to_file $FMRI $IPF6_SUFFIX`
	echo "# $FMRI" >$file
	echo "# $FMRI" >$file6
	policy=`get_policy $NFS_FMRI`

	#
	# nfs/server configuration is processed in the start method.
	#
	if [ "$FMRI" = "$NFS_FMRI" ]; then
		service_check_state $FMRI $SMF_ONLINE
		if [ $? -ne 0 ]; then
			rm  $file
			exit $SMF_EXIT_OK
		fi

		nfs_name=`svcprop -p $FW_CONTEXT_PG/name $FMRI 2>/dev/null`
		tport=`$SERVINFO -p -t -s $nfs_name 2>/dev/null`
		if [ -n "$tport" ]; then
			generate_rules $FMRI $policy "tcp" $tport $file
		fi

		tport6=`$SERVINFO -p -t6 -s $nfs_name 2>/dev/null`
		if [ -n "$tport6" ]; then
			generate_rules $FMRI $policy "tcp" $tport6 $file6 _6
		fi

		uport=`$SERVINFO -p -u -s $nfs_name 2>/dev/null`
		if [ -n "$uport" ]; then
			generate_rules $FMRI $policy "udp" $uport $file
		fi

		uport6=`$SERVINFO -p -u6 -s $nfs_name 2>/dev/null`
		if [ -n "$uport6" ]; then
			generate_rules $FMRI $policy "udp" $uport6 $file6 _6
		fi

		# mountd IPv6 ports are also reachable through IPv4, so include
		# them when generating IPv4 rules.
		tports=`$SERVINFO -R -p -t -s "mountd" 2>/dev/null`
		tports6=`$SERVINFO -R -p -t6 -s "mountd" 2>/dev/null`
		if [ -n "$tports" -o -n "$tports6" ]; then
			tports=`unique_ports $tports $tports6`
			for tport in $tports; do
				generate_rules $FMRI $policy "tcp" \
				    $tport $file
			done
		fi

		if [ -n "$tports6" ]; then
			for tport6 in $tports6; do
				generate_rules $FMRI $policy "tcp" \
				    $tport6 $file6 _6
			done
		fi

		uports=`$SERVINFO -R -p -u -s "mountd" 2>/dev/null`
		uports6=`$SERVINFO -R -p -u6 -s "mountd" 2>/dev/null`
		if [ -n "$uports" -o -n "$uports6" ]; then
			uports=`unique_ports $uports $uports6`
			for uport in $uports; do
				generate_rules $FMRI $policy "udp" \
				    $uport $file
			done
		fi

		if [ -n "$uports6" ]; then
			for uport6 in $uports6; do
				generate_rules $FMRI $policy "udp" \
				    $uport6 $file6 _6
			done
		fi

	elif [ "$FMRI" = "$RQUOTA_FMRI" ]; then
		iana_name=`svcprop -p inetd/name $FMRI`

		# rquota IPv6 ports are also reachable through IPv4, so include
		# them when generating IPv4 rules.
		tports=`$SERVINFO -R -p -t -s $iana_name 2>/dev/null`
		tports6=`$SERVINFO -R -p -t6 -s $iana_name 2>/dev/null`
		if [ -n "$tports" -o -n "$tports6" ]; then
			tports=`unique_ports $tports $tports6`
			for tport in $tports; do
				generate_rules $NFS_FMRI $policy "tcp" \
				    $tport $file
			done
		fi

		if [ -n "$tports6" ]; then
			for tport6 in $tports6; do
				generate_rules $NFS_FMRI $policy "tcp" \
				    $tport6 $file6 _6
			done
		fi

		uports=`$SERVINFO -R -p -u -s $iana_name 2>/dev/null`
		uports6=`$SERVINFO -R -p -u6 -s $iana_name 2>/dev/null`
		if [ -n "$uports" -o -n "$uports6" ]; then
			uports=`unique_ports $uports $uports6`
			for uport in $uports; do
				generate_rules $NFS_FMRI $policy "udp" \
				    $uport $file
			done
		fi

		if [ -n "$uports6" ]; then
			for uport6 in $uports6; do
				generate_rules $NFS_FMRI $policy "udp" \
				    $uport6 $file6 _6
			done
		fi
	else
		#
		# Handle the client services here
		#
		if service_check_state $NFSCLI_FMRI $SMF_ONLINE; then
			policy=none
			ip=any
		fi

		restarter=`svcprop -p general/restarter $FMRI 2>/dev/null`
		if [ "$restarter" = "$INETDFMRI" ]; then
			iana_name=`svcprop -p inetd/name $FMRI`
			isrpc=`svcprop -p inetd/isrpc $FMRI`
		else
			iana_name=`svcprop -p $FW_CONTEXT_PG/name $FMRI`
			isrpc=`svcprop -p $FW_CONTEXT_PG/isrpc $FMRI`
		fi

		if [ "$isrpc" = "true" ]; then
			tports=`$SERVINFO -R -p -t -s $iana_name 2>/dev/null`
			tports6=`$SERVINFO -R -p -t6 -s $iana_name 2>/dev/null`
			uports=`$SERVINFO -R -p -u -s $iana_name 2>/dev/null`
			uports6=`$SERVINFO -R -p -u6 -s $iana_name 2>/dev/null`
		else
			tports=`$SERVINFO -p -t -s $iana_name 2>/dev/null`
			tports6=`$SERVINFO -p -t6 -s $iana_name 2>/dev/null`
			uports=`$SERVINFO -p -u -s $iana_name 2>/dev/null`
			uports6=`$SERVINFO -p -u6 -s $iana_name 2>/dev/null`
		fi

		# IPv6 ports are also reachable through IPv4, so include
		# them when generating IPv4 rules.
		if [ -n "$tports" -o -n "$tports6" ]; then
			tports=`unique_ports $tports $tports6`
			for tport in $tports; do
				generate_rules $FMRI $policy "tcp" $tport $file
			done
		fi

		if [ -n "$tports6" ]; then
			for tport6 in $tports6; do
				generate_rules $FMRI $policy "tcp" $tport6 $file6 _6
			done
		fi

		if [ -n "$uports" -o -n "$uports6" ]; then
			uports=`unique_ports $uports $uports6`
			for uport in $uports; do
				generate_rules $FMRI $policy "udp" $uport $file
			done
		fi

		if [ -n "$uports6" ]; then
			for uport6 in $uports6; do
				generate_rules $FMRI $policy "udp" $uport6 $file6 _6
			done
		fi
	fi

	;;

*)
	echo "Usage: $0 { start | stop | refresh }"
	exit 1
	;;
esac
exit $SMF_EXIT_OK
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<!--
  This file and its contents are supplied under the terms of the
  Common Development and Distribution License ("CDDL"), version 1.0.
  You may only use this file in accordance with the terms of version
  1.0 of the CDDL.

  A full copy of the text of the CDDL should have accompanied this
  source.  A copy of the CDDL is also available via the Internet at
  http://www.illumos.org/license/CDDL.


  Copyright 2012 Nexenta Systems, Inc.  All rights reserved.
-->

<service_bundle type='manifest' name='SUNWnfssr:nfslogd'>

<service
	name='network/nfs/log'
	type='service'
	version='1'>

	<dependency name='nfs-server'
	    grouping='require_all'
	    restart_on='refresh'
	    type='service'>
		<service_fmri value='svc:/network/nfs/server' />
	</dependency>

	<dependency name='filesystem-minimal'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/system/filesystem/minimal' />
	</dependency>

	<exec_method
	    type='method'
	    name='start'
	    exec='/usr/lib/nfs/nfslogd'
	    timeout_seconds='60' />

	<exec_method
	    type='method'
	    name='stop'
	    exec=':kill -TERM'
	    timeout_seconds='10' />

	<instance name='default' enabled='false'>
	</instance>

	<stability value='Stable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
				NFS log daemon
			</loctext>
		</common_name>
		<documentation>
			<manpage title='nfslogd' section='8'
				manpath='/usr/share/man' />
		</documentation>
	</template>
</service>

</service_bundle>
#!/sbin/sh
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
# Copyright (c) 2015 by Delphix. All rights reserved.
# Use is subject to license terms.
#

#
# Start the lockd service; we are serving NFS and we need to verify
# that rpcbind is accepting traffic from the network.
#

BIND_FMRI=svc:/network/rpc/bind
do_change=false
if set -- `svcprop -t -p config/local_only $BIND_FMRI`; then
	if [ "$2" != boolean ]; then
		echo "$0: config/local_only property for $BIND_FMRI has wrong "\
		    "type" 1>&2
	elif [ "$#" -ne 3 ]; then
		echo "$0: config/local_only property for $BIND_FMRI has wrong "\
		    "number of values" 1>&2
	elif [ "$3" = true ]; then
		do_change=true
	fi
else
	# If the property is not found, we just set it.
	do_change=true
fi

if $do_change
then
	# These will generate errors in the log.
	svccfg -s $BIND_FMRI setprop config/local_only = boolean: false
	if [ $? != 0 ]; then
		echo "$0: WARNING setprop failed" 1>&2
	fi

	svcadm refresh $BIND_FMRI
	if [ $? != 0 ]; then
		echo "$0: WARNING svcadm refresh failed" 1>&2
	fi
fi

#
# We have to wait for statd to finish starting up before lockd can
# start running. If statd hangs after service startup (so SMF thinks
# it's done) but before it registers an rpc address, we can end up
# failing in the kernel when we attempt to contact it.
#
until /usr/bin/rpcinfo -T tcp 127.0.0.1 status >/dev/null 2>&1
do
	sleep 1
done

exec /usr/lib/nfs/lockd
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<!--
 CDDL HEADER START

 The contents of this file are subject to the terms of the
 Common Development and Distribution License (the "License").
 You may not use this file except in compliance with the License.

 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 or http://www.opensolaris.org/os/licensing.
 See the License for the specific language governing permissions
 and limitations under the License.

 When distributing Covered Code, include this CDDL HEADER in each
 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 If applicable, add the following below this CDDL HEADER, with the
 fields enclosed by brackets "[]" replaced with your own identifying
 information: Portions Copyright [yyyy] [name of copyright owner]

 CDDL HEADER END

	Copyright (c) 2004, 2010, Oracle and/or its affiliates. All rights reserved.
	Copyright (c) 2012, 2015 by Delphix. All rights reserved.
	Copyright 2018 Nexenta Systems, Inc.  All rights reserved.
	Copyright 2019 Nexenta by DDN, Inc.  All rights reserved.

	NOTE:  This service manifest is not editable; its contents will
	be overwritten by package or patch operations, including
	operating system upgrade.  Make customizations in a different
	file.

	Note: if this service is modified to consist of anything other
	than a single instance named 'default', you must make changes to
	$SRC/head/rpcsvc/daemon_utils.h and libnsl:open_daemon_lock().
-->

<service_bundle type='manifest' name='SUNWnfscr:nfs-nlockmgr'>

<service
	name='network/nfs/nlockmgr'
	type='service'
	version='2'>

	<dependency name='network'
	    grouping='require_any'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/milestone/network' />
	</dependency>

	<dependency name='rpcbind'
	    grouping='require_all'
	    restart_on='restart'
	    type='service'>
		<service_fmri value='svc:/network/rpc/bind' />
	</dependency>

	<dependency name='status'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/network/nfs/status' />
	</dependency>

	<dependency name='filesystem-minimal'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/system/filesystem/minimal' />
	</dependency>

	<exec_method
	    type='method'
	    name='start'
	    exec='/lib/svc/method/nlockmgr'
	    timeout_seconds='300' />

	<exec_method
	    type='method'
	    name='stop'
	    exec=':kill'
	    timeout_seconds='60' />

	<property_group name='firewall_context' type='com.sun,fw_definition'>
		<propval name='isrpc' type='boolean' value='true' />
		<propval name='name' type='astring' value='nlockmgr' />
		<propval name='ipf_method' type='astring'
			value='/lib/svc/method/nfs-server ipfilter' />
	</property_group>

	<property_group name='application' type='framework'>
		<stability value='Evolving' />
		<propval name='auto_enable' type='boolean' value='true' />
	</property_group>
	<instance name='default' enabled='false'>
	  <property_group name='nfs-props' type='com.oracle.nfs,props'>
	    <propval name='grace_period' type='integer' value='60'/>
	    <propval name='lockd_listen_backlog' type='integer' value='32'/>
	    <propval name='lockd_retransmit_timeout' type='integer' value='5'/>
	    <propval name='lockd_servers' type='integer' value='256'/>
	  </property_group>
	</instance>
	<stability value='Stable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
				NFS lock manager
			</loctext>
		</common_name>
		<documentation>
			<manpage title='lockd' section='8'
				manpath='/usr/share/man' />
		</documentation>
	</template>
</service>

</service_bundle>
<?xml version='1.0'?>
<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>

<!--
 Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
 Use is subject to license terms.

 Copyright 2016 Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>

 CDDL HEADER START

 The contents of this file are subject to the terms of the
 Common Development and Distribution License (the "License").
 You may not use this file except in compliance with the License.

 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 or http://www.opensolaris.org/os/licensing.
 See the License for the specific language governing permissions
 and limitations under the License.

 When distributing Covered Code, include this CDDL HEADER in each
 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 If applicable, add the following below this CDDL HEADER, with the
 fields enclosed by brackets "[]" replaced with your own identifying
 information: Portions Copyright [yyyy] [name of copyright owner]

 CDDL HEADER END

	NOTE:  This service manifest is not editable; its contents will
	be overwritten by package or patch operations, including
	operating system upgrade.  Make customizations in a different
	file.
-->

<service_bundle type='manifest' name='SUNWnfssr:rquotad'>

<service
    name='network/nfs/rquota'
    type='service'
    version='1'>

	<create_default_instance enabled='false' />

	<restarter>
		<service_fmri value='svc:/network/inetd:default' />
	</restarter>

	<dependency name='rpcbind'
	    grouping='require_all'
	    restart_on='restart'
	    type='service'>
		<service_fmri value='svc:/network/rpc/bind' />
	</dependency>

	<exec_method
		type='method'
		name='inetd_start'
		exec='/usr/lib/nfs/rquotad'
		timeout_seconds='0'>
		<method_context working_directory='/'>
			<method_credential user='root' group='root' />
		</method_context>
	</exec_method>

	<exec_method
		type='method'
		name='inetd_offline'
		exec=':kill_process'
		timeout_seconds='0'>
	</exec_method>

	<exec_method
		type='method'
		name='inetd_disable'
		exec=':kill'
		timeout_seconds='0'>
	</exec_method>

	<property_group name='application' type='framework'>
		<stability value='Evolving' />
		<propval name='auto_enable' type='boolean' value='true' />
	</property_group>

	<property_group name='inetd' type='framework'>
		<stability value='Evolving' />
		<propval name='name' type='astring' value='rquotad' />
		<propval name='endpoint_type' type='astring' value='tli' />
		<propval name='proto' type='astring' value='datagram_v' />
		<propval name='isrpc' type='boolean' value='true' />
		<propval name='rpc_low_version' type='integer' value='1' />
		<propval name='rpc_high_version' type='integer' value='1' />
		<propval name='wait' type='boolean' value='true' />
	</property_group>

	<property_group name='firewall_context' type='com.sun,fw_definition'>
		<propval name='name' type='astring' value='rquotad' />
		<propval name='ipf_method' type='astring'
		    value='/lib/svc/method/nfs-server ipfilter' />
	</property_group>

	<property_group name='firewall_config' type='com.sun,fw_configuration'>
		<propval name='policy' type='astring' value='use_global' />
		<propval name='block_policy' type='astring'
			value='use_global' />
		<propval name='apply_to' type='astring' value='' />
		<propval name='apply_to_6' type='astring' value='' />
		<propval name='exceptions' type='astring' value='' />
		<propval name='exceptions_6' type='astring' value='' />
		<propval name='target' type='astring' value='' />
		<propval name='target_6' type='astring' value='' />
		<propval name='value_authorization' type='astring'
		    value='solaris.smf.value.firewall.config' />
	</property_group>

	<stability value='Stable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
				remote quota server
			</loctext>
		</common_name>
		<documentation>
			<manpage title='rquotad' section='8'
			    manpath='/usr/share/man' />
		</documentation>
	</template>

</service>

</service_bundle>
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<!--

 CDDL HEADER START

 The contents of this file are subject to the terms of the
 Common Development and Distribution License (the "License").
 You may not use this file except in compliance with the License.

 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 or http://www.opensolaris.org/os/licensing.
 See the License for the specific language governing permissions
 and limitations under the License.

 When distributing Covered Code, include this CDDL HEADER in each
 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 If applicable, add the following below this CDDL HEADER, with the
 fields enclosed by brackets "[]" replaced with your own identifying
 information: Portions Copyright [yyyy] [name of copyright owner]

 CDDL HEADER END

	Copyright (c) 2004, 2010, Oracle and/or its affiliates. All rights reserved.
	Copyright (c) 2012 by Delphix. All rights reserved.
	Copyright 2014 Nexenta Systems, Inc.  All rights reserved
	Copyright 2016 Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
	Copyright (c) 2012, 2014 by Delphix. All rights reserved.
	Copyright 2022 RackTop Systems.

	NOTE:  This service manifest is not editable; its contents will
	be overwritten by package or patch operations, including
	operating system upgrade.  Make customizations in a different
	file.

	Note: if this service is modified to consist of anything other
	than a single instance named 'default', you must make changes to
	$SRC/head/rpcsvc/daemon_utils.h and libnsl:open_daemon_lock().
-->

<service_bundle type='manifest' name='SUNWnfssr:nfs-server'>

<service
	name='network/nfs/server'
	type='service'
	version='2'>

	<dependency name='network'
	    grouping='require_any'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/milestone/network' />
	</dependency>

	<dependency name='nlockmgr'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/network/nfs/nlockmgr' />
	</dependency>

	<dependency name='mapid'
	    grouping='optional_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/network/nfs/mapid' />
	</dependency>

	<dependency name='rpcbind'
	    grouping='require_all'
	    restart_on='restart'
	    type='service'>
		<service_fmri value='svc:/network/rpc/bind' />
	</dependency>

	<dependency name='keyserv'
	    grouping='optional_all'
	    restart_on='none'
	    type='service'>
		<service_fmri value='svc:/network/rpc/keyserv' />
	</dependency>

	<dependency name='gss'
	    grouping='optional_all'
	    restart_on='none'
	    type='service'>
		<service_fmri value='svc:/network/rpc/gss' />
	</dependency>

	<dependency name='share-group'
	    grouping='optional_all'
	    restart_on='none'
	    type='service'>
		<service_fmri value='svc:/network/shares/group' />
	</dependency>

	<dependency name='reparse'
	    grouping='optional_all'
	    restart_on='none'
	    type='service'>
		<service_fmri value='svc:/system/filesystem/reparse' />
	</dependency>

	<!-- Must have all local filesystems mounted before we share them -->
	<dependency name='filesystem-local'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/system/filesystem/local' />
	</dependency>

	<dependent
		name='nfs-server_multi-user-server'
		grouping='optional_all'
		restart_on='none'>
		<service_fmri value='svc:/milestone/multi-user-server' />
	</dependent>

	<!--
	  The shareall done as part of the nfs-server method may take a
	  long time, as the contents of dfstab can be arbitrarily large.
	  Set the timeout appropriately for both 'start' and 'refresh'.
	-->
	<exec_method
	    type='method'
	    name='start'
	    exec='/lib/svc/method/nfs-server %m'
	    timeout_seconds='3600' />

	<exec_method
	    type='method'
	    name='refresh'
	    exec='/lib/svc/method/nfs-server %m'
	    timeout_seconds='3600' />

	<!--
	  The stop method runs unshareall as well as up to a 10 second
	  sleep to do graceful versus forceful shutdown of daemons.  Set
	  the timeout appropriately.
	-->
	<exec_method
	    type='method'
	    name='stop'
	    exec='/lib/svc/method/nfs-server %m %{restarter/contract}'
	    timeout_seconds='3600' />

	<property_group name='application' type='framework'>
		<stability value='Evolving' />
		<propval name='auto_enable' type='boolean' value='true' />
	</property_group>

	<property_group name='firewall_context' type='com.sun,fw_definition'>
		<propval name='name' type='astring' value='nfsd' />
		<propval name='ipf_method' type='astring'
		    value='/lib/svc/method/nfs-server ipfilter' />
	</property_group>

	<property_group name='firewall_config' type='com.sun,fw_configuration'>
		<propval name='policy' type='astring' value='use_global' />
		<propval name='block_policy' type='astring'
			value='use_global' />
		<propval name='apply_to' type='astring' value='' />
		<propval name='apply_to_6' type='astring' value='' />
		<propval name='exceptions' type='astring' value='' />
		<propval name='exceptions_6' type='astring' value='' />
		<propval name='target' type='astring' value='' />
		<propval name='target_6' type='astring' value='' />
		<propval name='value_authorization' type='astring'
			value='solaris.smf.value.firewall.config' />
	</property_group>
	<instance name='default' enabled='false'>
	 <property_group name='nfs-props' type='com.oracle.nfs,props'>
	   <propval name='device' type='astring' value=''/>
	   <propval name='listen_backlog' type='integer' value='32'/>
	   <propval name='max_connections' type='integer' value='-1'/>
	   <propval name='protocol' type='astring' value='ALL'/>
	   <propval name='server_delegation' type='astring' value='on'/>
	   <propval name='server_versmax' type='astring' value='4'/>
	   <propval name='server_versmin' type='astring' value='2'/>
	   <propval name='servers' type='integer' value='256'/>
	   <propval name='mountd_listen_backlog' type='integer' value='64'/>
	   <propval name='mountd_max_threads' type='integer' value='16'/>
	   <propval name='mountd_port' type='integer' value='0'/>
	   <propval name='mountd_remote_dump' type='boolean' value='false'/>
	 </property_group>
	</instance>

	<stability value='Stable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
				NFS server
			</loctext>
		</common_name>
		<documentation>
			<manpage title='nfsd' section='8'
				manpath='/usr/share/man' />
		</documentation>
	</template>
</service>

</service_bundle>
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<!--
 Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
 Use is subject to license terms.

 CDDL HEADER START

 The contents of this file are subject to the terms of the
 Common Development and Distribution License (the "License").
 You may not use this file except in compliance with the License.

 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 or http://www.opensolaris.org/os/licensing.
 See the License for the specific language governing permissions
 and limitations under the License.

 When distributing Covered Code, include this CDDL HEADER in each
 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 If applicable, add the following below this CDDL HEADER, with the
 fields enclosed by brackets "[]" replaced with your own identifying
 information: Portions Copyright [yyyy] [name of copyright owner]

 CDDL HEADER END

	NOTE:  This service manifest is not editable; its contents will
	be overwritten by package or patch operations, including
	operating system upgrade.  Make customizations in a different
	file.

	Note: if this service is modified to consist of anything other
	than a single instance named 'default', you must make changes to
	$SRC/head/rpcsvc/daemon_utils.h and libnsl:open_daemon_lock().
-->

<!-- Copyright (c) 2016 by Delphix. All rights reserved. -->

<service_bundle type='manifest' name='SUNWnfscr:nfs-status'>

<service
	name='network/nfs/status'
	type='service'
	version='1'>

	<dependency name='network'
	    grouping='require_any'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/milestone/network' />
	</dependency>

	<dependency name='rpcbind'
	    grouping='require_all'
	    restart_on='restart'
	    type='service'>
		<service_fmri value='svc:/network/rpc/bind' />
	</dependency>

	<dependency name='filesystem-local'
	    grouping='require_all'
	    restart_on='error'
	    type='service'>
		<service_fmri value='svc:/system/filesystem/local' />
	</dependency>

	<exec_method
	    type='method'
	    name='start'
	    exec='/usr/lib/nfs/statd'
	    timeout_seconds='60' />

	<exec_method
	    type='method'
	    name='stop'
	    exec=':kill'
	    timeout_seconds='60' />

	<property_group name='firewall_context' type='com.sun,fw_definition'>
		<propval name='isrpc' type='boolean' value='true' />
		<propval name='name' type='astring' value='status' />
		<propval name='ipf_method' type='astring'
			value='/lib/svc/method/nfs-server ipfilter' />
	</property_group>

	<property_group name='application' type='framework'>
		<stability value='Evolving' />
		<propval name='auto_enable' type='boolean' value='true' />
	</property_group>

	<instance name='default' enabled='false'>
		<property_group name='nfs-props' type='com.oracle.nfs,props'>
			<propval name='statd_port' type='integer' value='0'/>
		</property_group>
	</instance>

	<stability value='Stable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
				NFS status monitor
			</loctext>
		</common_name>
		<documentation>
			<manpage title='statd' section='8'
				manpath='/usr/share/man' />
		</documentation>
	</template>
</service>

</service_bundle>