Re: NFS root permission denied in 'clearcritlocal'?

On Wed, 20 May 2026, Rhialto wrote:

> It sounds like you are trying to export the same file system with
> different options (/var and /var/lib). Even if /var is a separate file
> system from /, /var/lib would typically be on the same file system. Last
> I checked, that wasn't really possible.

The only possible option conflict I can see should only apply to the
QEMU host machine.  Relevant portions of the server's "/etc/exports":

# general access to the big file system:
/r0 -alldirs -maproot=sysop:staff -network <net>/<mask>
/r0 -alldirs -noresvport -maproot=sysop:staff MacOSX

# added so qemu guests can access pkgsrc tree:
/r0 -alldirs -noresvport -noresvmnt -maproot=sysop:staff qemu-host


# NFS root, /usr, /var/lib for diskless operation:

# sparc
/r0/diskless/ossian -maproot=root sparc-tmp

/r0/diskless/sparc-rel/usr -maproot=root sparcs
/r0/diskless/sparc-rel/var/lib -maproot=root sparcs

/r0/diskless/sparc-cur/usr -maproot=root sparcs
/r0/diskless/sparc-cur/var/lib -maproot=root sparcs


# n86 boxen

/r0/diskless/plexor -maproot=root plexor
/r0/diskless/plextwo -maproot=root plextwo

# NetBSD-current/i386 w/native Xorg
/r0/diskless/i386/usr -maproot=root n86
/r0/diskless/i386/var/lib -maproot=root n86


# amd64 boxen
/r0/diskless/qemu-host -maproot=root qemu-host
/r0/diskless/skuld -maproot=root skuld

/r0/diskless/amd64/usr -maproot=root amd64
/r0/diskless/amd64/var/lib -maproot=root amd64


# BeagleBone{Black,Green}
/r0/diskless/bbg2 -maproot=root bbg2

/r0/diskless/earmv7hfel/usr -maproot=root evbarm
/r0/diskless/earmv7hfel/var/lib -maproot=root evbarm


The only change I made to the "/etc/exports" file was to add the
line:

/r0 -alldirs -noresvport -noresvmnt -maproot=sysop:staff qemu-host

Perhaps a more restrictive export with those options will satisfy the
"at most once" requirement.

-- 
|/"\ John D. Baker, KN5UKS               NetBSD     Darwin/MacOS X
|\ / jdbaker[snail]consolidated[flyspeck]net  OpenBSD            FreeBSD
| X  No HTML/proprietary data in email.   BSD just sits there and works!
|/ \ GPGkeyID:  D703 4A7E 479F 63F8 D3F4  BD99 9572 8F23 E4AD 1645