this post was submitted on 28 Nov 2023
80 points (95.5% liked)

Linux

48130 readers
455 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
nooter692@lemmy.ml
AgreeableLandscape@lemmy.ml
MarcellusDrum@lemmy.ml
cypherpunks@lemmy.ml
cyclohexane@lemmy.ml
d3Xt3r@lemmy.nz
80
Best practices in mounting NAS shares? (lemmy.world)
submitted 11 months ago* (last edited 11 months ago) by dtrain@lemmy.world to c/linux@lemmy.ml
15 comments fedilink hide all child comments
 

What are some best practices in mounting NAS shares that you all follow?

Currently I am mounting using fstab to my user’s home directory with full rwx permissions, but that feels wrong.

I’ve read to use the mnt directory or the media directory but opinions differ.

My main concern is I want to protect against inadvertently deleting the contents of the NAS with an errant rm command. And yes I have backups of my NAS too.

Edit: this is a home NAS with 1 user on this Linux PC (the other clients being windows and Mac systems)

Would love to hear everyone’s philosophy! Thanks!

top 15 comments
sorted by: hot top controversial new old
[–] teawrecks@sopuli.xyz 12 points 11 months ago (1 children)

The NAS should be regularly backed up/snapshotted, so that even if you/a bad process deletes everything, you can restore it all quickly and easily.

[–] LastYearsPumpkin@feddit.ch 5 points 11 months ago (1 children)

A backup is an emergency protection, not a primary plan. This attitude is dangerously close to making the backup a critical part of their uptime.

[–] teawrecks@sopuli.xyz 5 points 11 months ago

Having something rm your entire NAS is an emergency, not something that should be happening regularly. If it is, you've got bigger problems.

[–] tkf@infosec.pub 7 points 11 months ago (1 children)

I'm curious, what file system do you use to mount your share? (SMB, SSHFS, WebDAV, NFS..?) I've never managed to get decent performance on a remote-mounted directory because of the latency, even on a local network, and this becomes an issue with large directories

[–] SpaceCadet@feddit.nl 5 points 11 months ago (1 children)

I've found that NFS gives me the best performance and the least issues. For my use cases, single user where throughput is more important than latency, it's indistinguishable from a local disk. It basically goes as fast as my gigabit NIC allows, which is more or less the maximum throughput of the hard disks as well.

A benefit of NFS over SMB is that you can just use Unix ownerships and permissions. I do make sure to synchronize UIDs and GIDs across my devices because I could never get idmapping to work with my NAS.

[–] 2xsaiko@discuss.tchncs.de 1 points 11 months ago

idmapping

idmap only works with Kerberos auth, but iirc I didn't have to set anything up specifically for it. Though I've also never really had to test it since my UIDs match coincidentally, I just tested with the nfsidmap command.

[–] LastYearsPumpkin@feddit.ch 5 points 11 months ago (1 children)

How many users are there?

Is there a chance that the computer will boot without access to the NAS (aside from failure conditions).

Are you doing anything with ownership to prevent reading, or changing, sensitive files?

[–] dtrain@lemmy.world 2 points 11 months ago (3 children)

This is a home NAS with one user (myself) on this Linux client. Other clients will be Windows for other users.

My NAS user has full rw permissions across the NAS shares (but not admin privs). I’m not super comfortable with this config as it strike me as too permissive to mount on the home directory. Would love to hear better approaches.

Yes, there is a chance the NAS can be down when booting the Linux pc.

[–] LastYearsPumpkin@feddit.ch 5 points 11 months ago

Well, with multiple users you'd need to decide what the use case is for the whole NAS and then work down from there.

Are you sharing everything in the NAS with everyone? In that case your NAS setup is fine, just a little permissive, because with RW to everything, the end users can break everything.

If it were me setting this up, I'd have different mount points for different users. 1 mount for each user that only they can read/write (not even you should be able to see it), and 1 mount that everyone can read/write, maybe if you want to go a little bonkers, 1 mount that everyone can read, but only you can write to.

Then you'd mount those three to separate mounts in your /media, and you can link them from your home directory for specific use cases.

Obviously this is completely overkill, but you can take the parts that sound appealing to you and ignore the rest.

[–] MasterBlaster@lemmy.world 1 points 11 months ago

I set up the mount points in configuration as dynamic NFS volumes and added Bookmarks to nautilus. You can get to the volume either with cd command or right-click -> terminal here. You can shut down the NAS and only lose the share, which returns when the system goes online.

This is much better than WbDAV, which is fine for simple sharing or for devices that can't handle NFS easily like Android phones.

[–] lemmyvore@feddit.nl 1 points 11 months ago

There aren't many options... you can either modify the share or you cannot. 🙂 Pick one.

[–] possiblylinux127@lemmy.zip 2 points 11 months ago

I just mount the share in my file manager

[–] TCB13@lemmy.world 2 points 11 months ago

https://www.golinuxcloud.com/mount-partition-using-systemd/#Steps_to_mount_partition_using_systemd_unit_file

[–] 0x4E4F@infosec.pub 2 points 11 months ago

Mounting it in fstab is a bad idea... in home even worse.

Just make some desktop entries with the shares and that should be enough.

[–] dan@upvote.au 2 points 11 months ago

If you do this, make sure you use snapshots, ideally taken automatically. You wouldn't want ransomware to overwrite the files on your NAS.