man pages section 1M: System Administration Commands

mount_nfs(1M)

NAME

mount_nfs- Mount remote NFS resources

SYNOPSIS

mount

-F

generic_options

-o

specific_options

-O

-S

attribute_list

resource

mount

-F

generic_options

-o

specific_options

-O

-S

attribute_list

mount_point

mount

-F

generic_options

-o

specific_options

-O

-S

attribute_list

resource

mount_point

DESCRIPTION

The mount utility attaches a named resource to the file system hierarchy at the pathname location mount_point, which must already exist. If mount_point has any contents prior to the mount operation, the contents remain hidden until the resource is once again unmounted.

If the resource is listed in the /etc/vfstab file, the command line can specify either resource or mount_point, and mount will consult /etc/vfstab for more information. If the -F option is omitted, mount takes the file system type from /etc/vfstab.

If the resource is not listed in the /etc/vfstab file, then the command line must specify both the resource and the mount_point.

A named resource can have one of the following formats:

host:pathname: Where host is the name of the NFS server host, and pathname is the path name of the directory on the server being mounted. The path name is interpreted according to the server's path name parsing rules and is not necessarily slash-separated, though on most servers, this will be the case.
nfs://host[:port]/pathname: This is an NFS URL and follows the standard convention for NFS URLs as described in Internet RFC 2225 -- NFS URL Scheme. See the discussion of URL's and the public option under NFS FILE SYSTEMS below for a more detailed discussion.
A comma-separated list of host:pathname and/or nfs://host[:port]/pathname resources: See the discussion of Replicated file systems and failover under NFS FILE SYSTEMS below for a more detailed discussion.

mount maintains a table of mounted file systems in /etc/mnttab, described in mnttab(4). See mount(1M) for more details.

Security attributes can be specified at mount time, with the -o or -S option on the mount command line or in the vfstab_adjunct(4) file. See the DESCRIPTION in the mount man page for more about specifying security attributes.

Trusted Solaris security policy applies when mounting and unmounting file systems.

mount must run with the sys_mount and net_privaddr privileges. To succeed in all cases, mount also needs: file_mac_read, file_dac_read, file_mac_write, file_dac_write, file_mac_search, file_dac_search, proc_setsl, and sys_trans_label.

OPTIONS

See mount(1M) for the list of supported generic_options.

-o specific_options

Set file system specific options according to a comma-separated list with no intervening spaces. Most attributes for the -S option may also be specified for the -o option. See the -S option.

acdirmax=n

Hold cached attributes for no more than n seconds after directory update. The default value is 60.

acdirmin=n

Hold cached attributes for at least n seconds after directory update. The default value is 30.

acregmax=n

Hold cached attributes for no more than n seconds after file modification. The default value is 60.

acregmin=n

Hold cached attributes for at least n seconds after file modification. The default value is 3.

actimeo=n

Set min and max times for regular files and directories to n seconds.

bg | fg

If the first attempt fails, retry in the background, or, in the foreground. The default is fg.

devices | nodevices

Allow (disallow) opens on character and block devices. The default is devices.

Note: In the Trusted Solaris environment, device special files are typically located only in the /dev and /devices directories in the root file system. All other file systems should be mounted with the nodevices option to prevent recognition of devices that may reside in any other directories.

grpid

By default, the GID associated with a newly created file will obey the System V semantics; that is, the GID is set to the effective GID of the calling process. This behavior may be overridden on a per-directory basis by setting the set-GID bit of the parent directory; in this case, the GID of a newly created file is set to the GID of the parent directory (see open(2) and mkdir(2)). Files created on file systems that are mounted with the grpid option will obey BSD semantics independent of whether the set-GID bit of the parent directory is set; that is, the GID is unconditionally inherited from that of the parent directory.

hard | soft

Return an error if the server does not respond, or continue the retry request until the server responds. The default value is hard.

intr | nointr

Allow (do not allow) keyboard interrupts to kill a process that is hung while waiting for a response on a hard-mounted file system. The default is intr, which makes it possible for clients to interrupt applications that may be waiting for a remote mount.

kerberos

This option has been deprecated in favor of the sec=krb4 option.

noac

Suppress data and attribute caching.

port=n

The server IP port number. The default is NFS_PORT. If the port option is specified, and if the resource includes one or more NFS URLs, and if any of the URLs include a port number, then the port number in the option and in the URL must be the same.

posix

Request POSIX.1 semantics for the file system. Requires a mount Version 2 mountd(1M) on the server. See standards(5) for information regarding POSIX.

priv|nopriv

Forced privileges on executables are allowed or disallowed. The default is priv.

proto=<netid>

<netid> is a value of network_id field from entry in the /etc/netconfig file. By default, the transport protocol used for the NFS mount will be first available connection oriented transport supported on both the client and the server. If no connection oriented transport is found, then the first available connectionless transport is used. This default behavior can be overridden with the proto=<netid> option.

public

The public option forces the use of the public file handle when connecting to the NFS server. The resource specified may or may not have an NFS URL. See the discussion of URL's and the public option under NFS FILE SYSTEMS below for a more detailed discussion.

quota | noquota

Enable or prevent quota(1M) to check whether the user is over quota on this file system; if the file system has quotas enabled on the server, quotas will still be checked for operations on this file system. This option is not supported in the Trusted Solaris environment.

remount

Remounts a read-only file system as read-write (using the rw option). This option cannot be used with other -o options, and this option works only on currently mounted read-only file systems.

retrans=n

Set the number of NFS retransmissions to n. The default value is 5. For connection-oriented transports, this option has no effect because it is assumed that the transport will perform retransmissions on behalf of NFS.

retry=n

The number of times to retry the mount operation. The default is 10000.

The default for the automounter is 0, in other words, do not retry. You might find it useful to increase this value on heavily loaded servers, where automounter traffic is dropped, causing unnecessary "server not responding" errors.

ro | rw

resource is mounted read-only or read-write. The default is rw.

rsize=n

Set the read buffer size to n bytes. The default value is 32768 when using Version 3 of the NFS protocol. The default can be negotiated down if the server prefers a smaller transfer size. When using Version 2, the default value is 8192.

sec=mode

Set the security mode for NFS transactions. If sec= is not specified, then the default action is to use AUTH_SYS over NFS Version 2 mounts, or to negotiate a mode over NFS Version 3 mounts. NFS Version 3 mounts negotiate a security mode when the server returns an array of security modes. The client will pick the first mode in the array that is supported on the client. Only one mode can be specified with the sec= option. See nfssec(5) for the available mode options.

secure

This option has been deprecated in favor of the sec=dh option.

suid | nosuid

Allow or disallow setuid execution. The default is suid.

timeo=n

Set the NFS timeout to n tenths of a second. The default value is 11 tenths of a second for connectionless transports, and 600 tenths of a second for connection-oriented transports.

vers=<NFS version number>

By default, the version of NFS protocol used between the client and the server is the highest one available on both systems. If the NFS server does not support NFS Version 3 protocol, then the NFS mount will use NFS Version 2 protocol.

Note: File systems being mounted from Trusted Solaris 1.2 servers should be specified with vers=2. Because the Trusted Solaris 2.5.1 environment does not recognize security attributes, such as labels, on file systems mounted from NFS Version 2 servers, all such filesystems should be mounted as unlabeled filesystems and should have mount-time security attributes supplied for them either with the -S option or in the vfstab_adjunct file.

wsize=n

Set the write buffer size to n bytes. The default value is 32768 when using Version 3 of the NFS protocol. The default can be negotiated down if the server prefers a smaller transfer size. When using Version 2, the default value is 8192.

-S attribute_list

See the definition of the -S option in the OPTIONS section of the mount(1M) man page.

-O: Overlay mount. Allow the file system to be mounted over an existing mount point, making the underlying file system inaccessible. If a mount is attempted on a pre-existing mount point without setting this flag, the mount will fail, producing the error "device busy".

NFS FILE SYSTEMS

Background versus Foreground

File systems mounted with the -bg option indicate that mount is to retry in the background if the server's mount daemon (mountd(1M)) does not respond. mount retries the request up to the count specified in the retry=n option. (Note that the default value for retry differs between mount and automount. See the description of retry, above.) Once the file system is mounted, each NFS request made in the kernel waits timeo=n tenths of a second for a response. If no response arrives, the time-out is multiplied by 2 and the request is retransmitted. When the number of retransmissions has reached the number specified in the retrans=n option, a file system mounted with the soft option returns an error on the request; one mounted with the hard option prints a warning message and continues to retry the request.

Hard versus Soft

File systems that are mounted read-write or that contain executable files should always be mounted with the hard option. Applications using soft mounted file systems may incur unexpected I/O errors, file corruption, and unexpected program core dumps. The soft option is not recommended.

Authenticated Requests

The server may require authenticated NFS requests from the client. Either sec=dh or sec=krb4 authentication may be required. See nfssec(5).

URLs and the public option

If the public option is specified, or if the resource includes an NFS URL, mount will attempt to connect to the server using the public file hand lookup protocol. See Internet RFC 2054 -- WebNFS Client Specification. If the server supports the public file handle, the attempt is successful; mount will not need to contact the server's rpcbind(1M), and the mountd(1M) daemons to get the port number of the mount server and the initial file handle of pathname, respectively. If the NFS client and server are separated by a firewall that allows all outbount connections through specific ports, such as NFS_PORT, then this enables NFS operations through the firewall. The public option and the NFS URL can be specified independently or together. They interact as specified in the following matrix:

	resource style
	`host`:`pathname`	NFS URL
public option	+ force public file handle and fail `mount`if not supported.	+ force public file handle and fail `mount`if not supported.
	+ use Native paths	+ use Canonical paths
default	+ use MOUNT protocol	+ try public file handle with Canonical paths. Fall back to MOUNT protocol if not supported.

A Native path is a path name that is interpreted according to conventions used on the native operating system of the NFS server. A Canonical path is a path name that is interpreted according to the URL rules. See Internet RFC 1738 -- Uniform Resource Locators (URL). Also, see EXAMPLES for uses of Native and Canonical paths.

Replicated file systems and failover

resource can list multiple read-only file systems to be used to provide data. These file systems should contain equivalent directory structures and identical files. It is also recommended that they be created by a utility such as rdist(1). The file systems may be specified either with a comma-separated list of host:/pathname entries and/or NFS URL entries, or with a comma -separated list of hosts, if all file system names are the same. If multiple file systems are named and the first server in the list is down, failover will use the next alternate server to access files. If the read-only option is not chosen, replication will be disabled. File access will block on the original if NFS locks are active for that file.

File Attributes

To improve NFS read performance, files and file attributes are cached. File modification times get updated whenever a write occurs. However, file access times may be temporarily out-of-date until the cache gets refreshed.

The attribute cache retains file attributes on the client. Attributes for a file are assigned a time to be flushed. If the file is modified before the flush time, then the flush time is extended by the time since the last modification (under the assumption that files that changed recently are likely to change soon). There is a minimum and maximum flush time extension for regular files and for directories. Setting actimeo=n sets flush time to n seconds for both regular files and directories.

Setting actimeo=0 disables attribute caching on the client. This means that every reference to attributes will be satisfied directly from the server though file data will still be cached. While this guarantees that the client always has the latest file attributes from the server, it has an adverse effect on performance through additional latency, network load, and server load.

Setting the noac option also disables attribute caching, but has the further effect of disabling client write caching. While this guarantees that data written by an application will be written directly to a server, where it can be viewed immediately by other clients, it has a significant adverse effect on client write performance. Data written into memory-mapped file pages (mmap(2)) will not be written directly to this server.

EXAMPLES

Example 1 Mounting An NFS File System

To mount an NFS file system:

example# mount serv:/usr/src /usr/src

Example 2 Mounting An NFS File System Read-Only With No Suid Privileges

To mount an NFS file system read-only with no suid privileges:

example# mount -r -o nosuid serv:/usr/src /usr/src

Example 3 Mounting An NFS File System Over Version 2, With The UDP Transport

To mount an NFS file system over Version 2, with the UDP transport:

example# mount -o vers=2,proto=udp serv:/usr/src /usr/src

Example 4 Mounting An NFS File System Using An NFS URL

To mount an NFS file system using an NFS URL (a canonical path):

example# mount nfs://serv/usr/man /usr/man

Example 5 Mounting An NFS File System Forcing Use Of The Public File Handle

To mount an NFS file system and force the use of the public file handle and an NFS URL (a canonical path) that has a non 7-bit ASCII escape sequence:

example# mount -o public nfs://serv/usr/%A0abc /mnt/test

Example 6 Mounting An NFS File System Using A Native Path

To mount an NFS file system using a native path (where the server uses colons (":") as the component separator) and the public file handle:

example# mount -o public serv:C:doc:new /usr/doc

Example 7 Mounting an NFS file system using `AUTH_KERB` authentication.

To mount an NFS file system using AUTH_KERB authentication:

example# mount -o sec=krb4 serv:/usr/src /usr/src

Example 8 Mounting a replicated set of NFS file systems with the same pathnames.

To mount a replicated set of NFS file systems with the same pathnames:

example# mount serv-a,serv-b,serv-c:/usr/man /usr/man

Example 9 Mounting a replicated set of NFS file systems with different pathnames.

To mount a replicated set of NFS file systems with different pathnames:

example# mount serv-x:/usr/man,serv-y:/var/man,nfs://serv-z/man /usr/man

SUMMARY OF TRUSTED SOLARIS CHANGES

The -o quota option has been removed; and the nodevices and nopriv options have been added.

Mount-time security attributes can be specified for file systems whose objects do not have any attributes (such as user and group IDs) and for file systems that do not have the Trusted Solaris extended security attributes (such as sensitivity labels). Trusted Solaris security policy applies when mounting.

Note -

Information labels (ILs) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any ILs on communications and files from systems running earlier releases as ADMIN_LOW.

Objects still have CMW labels, and CMW labels still include the IL component: IL[SL]; however, the IL component is fixed at ADMIN_LOW.

As a result, Trusted Solaris 7 has the following characteristics:

ILs do not display in window labels; SLs (Sensitivity Labels) display alone within brackets.
ILs do not float.
Setting an IL on an object has no effect.
Getting an object's IL will always return ADMIN_LOW.
Although certain utilities, library functions, and system calls can manipulate IL strings, the resulting ILs are always ADMIN_LOW, and cannot be set on any objects.

FILES

/etc/mnttab: table of mounted file systems
/etc/dfs/fstypes: default distributed file system type
/etc/vfstab: table of automatically mounted resources

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWcsu

Trusted Solaris 8 Reference Manual

mount(1M), mountall(1M), mountd(1M), mkdir(2), mount(2), open(2), umount(2), mnttab(4), vfstab_adjunct(4)

SunOS 5.8 Reference Manual

rdist(1), quota(1M), mmap(2), attributes(5), nfssec(5), standards(5), lofs(7FS)

NOTES

The sensitivity label mount-time attributes are only useful for mounts from NFS servers that are not labels-cognizant. The mount-time sensitivity label must always be equal to the assigned slabel, if one is specified, in the NFS server's combination tnrhdb(4)/ tnrhtp(4) entry. An unlabeled file system is always mounted at the sensitivity label specified for the unlabeled server in the trusted networking databases; if a different sensitivity label is specified at mount time, the mount fails.

An NFS server should not attempt to mount its own file systems. See lofs(7FS).

If the directory on which a file system is to be mounted is a symbolic link, the file system is mounted on the directory to which the symbolic link refers, rather than being mounted on top of the symbolic link itself.

SunOS 4.X used the biod maintenance procedure to perform parallel read-ahead and write-behind on NFS clients. SunOS 5.X made biod obsolete with multi-threaded processing, which transparently performs parallel read-ahead and write-behind.

Since the root (/) file system is mounted read-only by the kernel during the boot process, only the remount option (and options that can be used in conjuction with remount) affect the root (/) entry in the /etc/vfstab file.

Trusted Solaris 8 Last Revised 14 Jul 2000

mount_nfs(1M)

NAME

SYNOPSIS

DESCRIPTION

OPTIONS

NFS FILE SYSTEMS

File Attributes

EXAMPLES

Example 1 Mounting An NFS File System

Example 2 Mounting An NFS File System Read-Only With No Suid Privileges

Example 3 Mounting An NFS File System Over Version 2, With The UDP Transport

Example 4 Mounting An NFS File System Using An NFS URL

Example 5 Mounting An NFS File System Forcing Use Of The Public File Handle

Example 6 Mounting An NFS File System Using A Native Path

Example 7 Mounting an NFS file system using AUTH_KERB authentication.

Example 8 Mounting a replicated set of NFS file systems with the same pathnames.

Example 9 Mounting a replicated set of NFS file systems with different pathnames.

SUMMARY OF TRUSTED SOLARIS CHANGES

FILES

ATTRIBUTES

SEE ALSO

Trusted Solaris 8 Reference Manual

SunOS 5.8 Reference Manual

NOTES

Example 7 Mounting an NFS file system using `AUTH_KERB` authentication.