<html><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-15"><META name="Author" content="Novell GroupWise WebAccess"></head><body style='font-family: Tahoma, sans-serif; font-size: 13px; '>ok, playing around with netstat I figure all the ports that need to be open in iptables for this thing to work, I figure having the firewall down was too big of a risk so why not figuring out the ports and opening them in iptables and sharing the knowledge with you guys. The following ports are to be open:<br><br>111 tcp/udp<br>32803 tcp/udp<br>32769 udp<br>892 tcp/udp<br>875 tcp/udp<br>2049 tcp/udp<br><br>If I only mentioned tcp or udp after the port it means either or both, if you see one/two it means both protocols must be enable. Also make sure you tweaked around you /etc/sysconfig/nfs file, I noticed that by default you need to have some of the stuff from there un-comment for it to work, I will post my file so you can use it as a skeleton to change yours. If you have any questions let me know and I will try to help you out.<br><br>My nfs config bellow ( this only applies to Centos 5.5), I didn't test in another release.<br><br>[root@zeus /]# cat /etc/sysconfig/nfs<br>#<br># Define which protocol versions mountd<br># will advertise. The values are "no" or "yes"<br># with yes being the default<br>#MOUNTD_NFS_V1="no"<br>#MOUNTD_NFS_V2="no"<br>#MOUNTD_NFS_V3="no"<br>#<br>#<br># Path to remote quota server. See rquotad(8)<br>#RQUOTAD="/usr/sbin/rpc.rquotad"<br># Port rquotad should listen on.<br>RQUOTAD_PORT=875<br># Optinal options passed to rquotad<br>#RPCRQUOTADOPTS=""<br>#<br># Optional arguments passed to in-kernel lockd<br>#LOCKDARG=<br># TCP port rpc.lockd should listen on.<br>LOCKD_TCPPORT=32803<br># UDP port rpc.lockd should listen on.<br>LOCKD_UDPPORT=32769<br>#<br>#<br># Optional arguments passed to rpc.nfsd. See rpc.nfsd(8)<br># Turn off v2 and v3 protocol support<br>#RPCNFSDARGS="-N 2 -N 3"<br># Turn off v4 protocol support<br>#RPCNFSDARGS="-N 4"<br># Number of nfs server processes to be started.<br># The default is 8.<br>#RPCNFSDCOUNT=8<br># Stop the nfsd module from being pre-loaded<br>#NFSD_MODULE="noload"<br>#<br>#<br># Optional arguments passed to rpc.mountd. See rpc.mountd(8)<br>#RPCMOUNTDOPTS=""<br># Port rpc.mountd should listen on.<br>MOUNTD_PORT=892<br>#<br>#<br># Optional arguments passed to rpc.statd. See rpc.statd(8)<br>#STATDARG=""<br># Port rpc.statd should listen on.<br>#STATD_PORT=662<br># Outgoing port statd should used. The default is port<br># is random<br>STATD_OUTGOING_PORT=2020<br># Specify callout program<br>#STATD_HA_CALLOUT="/usr/local/bin/foo"<br>#<br>#<br># Optional arguments passed to rpc.idmapd. See rpc.idmapd(8)<br>#RPCIDMAPDARGS=""<br>#<br># Set to turn on Secure NFS mounts.<br>#SECURE_NFS="yes"<br># Optional arguments passed to rpc.gssd. See rpc.gssd(8)<br>#RPCGSSDARGS="-vvv"<br># Optional arguments passed to rpc.svcgssd. See rpc.svcgssd(8)<br>#RPCSVCGSSDARGS="-vvv"<br># Don't load security modules in to the kernel<br>#SECURE_NFS_MODS="noload"<br>#<br># Don't load sunrpc module.<br>#RPCMTAB="noload"<br>#<br><br>Best of luck! and thank you for the clues.<br><br><br><br>>>> "Lisandro Grullon" <lgrullon@citytech.cuny.edu> 01/05/11 12:31 PM >>><br>
ok, I got things working flawlessly. Call me stupid for not checking the sha1sum of the DVD ISO of the first mirror. When I checked the ISO sha1sum it didn't check the posted figure under the centos.org, so I thought something may be wrong witht hat DVD ISO. I re downloaded the ISO and its all working flawlessly now, off course I won't go into the details of the firewall issues and the actual NFS configuration, I will create a video to help people out doing this install via NFS. Anyone recomended a good screen capture application to do this task, after I create it I will posted in youtube for all to see it. Thank you all and don't forget to check all your sha1sum or md5 keys from DVD or CD ISO, it looks like we can't trust the actual mirrors. Thank you again.<br><br>NFS install is mega fast in a 1Gbps network. My hard drive is the slow horse now.<br><br>>>> Rajagopal Swaminathan <raju.rajsand@gmail.com> 01/05/11 12:16 PM >>><br>Greetings,<br><br>On 1/5/11, Lisandro Grullon <lgrullon@citytech.cuny.edu> wrote:<br>> I am learning Centos from the ground up,<br>> I need to learn how to install this via NFS.<br>> I am aware that FTp and HTTP and options available, but what is the point of<br>> having NFS during the install if it doesn't work.<br><br>Now, Let us distinguish between first install in any setup and future<br>installs/re-installs<br><br>Now the first install part. This is the long way. at least. full<br>install preferred. once and highly recommended -- helps later in<br>troubleshooting network scenario quickly through the first machine.<br>Let us call this Machine FirstFullCentos for this example.<br><br>Now one needs an existing server -- say like FirstFullCentos to carry<br>out further installs.<br><br>Of course<br><br>> I need to find a way to<br>> get the installation going at least for learning purposes. If you have any<br>> clues give me a hand, I am not planning to have to running in my environment<br>> but at least i would have the concept under my belt. Thank you.<br>><br>>>>> Nico Kadel-Garcia 01/04/11 7:25 PM >>><br>> On Tue, Jan 4, 2011 at 2:43 PM, Lisandro Grullon<br>> wrote:<br>>> Dear CentOS community,<br>>> I have install centos via CD, DVD and Directly off the net via http and<br>>> FTP.<br>>> Now I want to do a NFS install from a local server and a client. Both,<br>>> client and server are in the same vlan 10.14.10.0/255.255.255.0.<br>><br>> *Don't*. From painful experience, the NFS is very fragile to local<br>> network interruptions and tends to leave unreleased mountpoints<br>> reported on the NFS server, which makes getting meaningful monitoring<br>> of the server quite awkward.<br><br>HUmmm.. did you say in NFS udp mode?<br><br>><br>>> The server has a static 10.14.10.15 address and the client gets its own<br>>> address via DHCP. I download the DVD image from one of the mirrors and<br>>> placed it under /centos-media/centosdvd32/DVD/CentOS-5.5-i386-bin-DVD.iso<br>>> which is a dedicated partition on the server to hold all images. After<br>>> that<br>>> I exported the usual entries under /etc/exports and reloaded NFS using<br>>> /sbin/service nfs reload. This is what my exports file looks like:<br>>><br>>> [root@zeus DVD]# cat /etc/exports<br>>> /centos-media/centosdvd64 10.14.10.0/255.255.255.0(ro,sync,all_squash)<br>>> /centos-media/centosdvd32/DVD 10.14.10.0/255.255.255.0(ro,sync,all_squash)<br>>><br>>> After doing so, I also modified the entries under IPtables to allow<br>>> traffic<br>>> in 111 and 2049 at the UDP/TCP level and restarted the service as shown<br>>> bellow.<br>><br>> Oh, dear. This sort of thing is requirement is why you simply run a<br>> light FTP or HTTP server and make it accessible that way. It's<br>> nominally slower, but the difference is hardly noticeable.<br>><br>>> [root@zeus DVD]# cat /etc/sysconfig/iptables<br>>> # Firewall configuration written by system-config-securitylevel<br>>> # Manual customization of this file is not recommended.<br>>> *filter<br>>> :INPUT ACCEPT [0:0]<br>>> :FORWARD ACCEPT [0:0]<br>>> :OUTPUT ACCEPT [0:0]<br>>> :RH-Firewall-1-INPUT - [0:0]<br>>> -A INPUT -j RH-Firewall-1-INPUT<br>>> -A FORWARD -j RH-Firewall-1-INPUT<br>>> -A RH-Firewall-1-INPUT -i lo -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -p 50 -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -p 51 -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j<br>>> ACCEPT<br>>> -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited<br>>> -A RH-Firewall-1-INPUT -s 10.14.10.0/24 -m state --state NEW -p tcp<br>>> --dport<br>>> 2049 -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -s 10.14.10.0/24 -m state --state NEW -p tcp<br>>> --dport<br>>> 111 -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -s 10.14.10.0/24 -m state --state NEW -p udp<br>>> --dport<br>>> 2049 -j ACCEPT<br>>> -A RH-Firewall-1-INPUT -s 10.14.10.0/24 -m state --state NEW -p udp<br>>> --dport<br>>> 111 -j ACCEPT<br>>> COMMIT<br>>><br>>> [root@zeus DVD]# /sbin/service iptables restart<br>>><br>>> When I try loading the net-install disc from the client i get to the area<br>>> where I specify the Ip of the server and the NFS path in the server,<br>>> hitting<br>>> enter returns "That directory does not seem to contain CentOS installation<br>>> tree", I triple check the ISO and I know its there with all appropriate<br>>> permissions. Can someone tell me what am I missing? I have spend all day<br>>> trying to get NFS working in the local vlan, i know that all ports are<br>>> open<br>>> within the vlan at the routers level. Any clues?<br>><br>> What is the actual path you are giving it? Are you looking at the top<br>> of the relevant NFS exported directory? And did you pout all the<br>> contents of the ISO image there, are are you doing somehing stranger?<br><br>Did you mount the ISO at the /centos-media/centosdvd64 mountpoint on<br>10.14.10.15?<br><br>Couldn't locate the output of your mount command on 10.14.10.15.<br><br>what can say, anyways HTH,<br><br>Regards,<br><br>Rajagopal<br>_______________________________________________<br>CentOS mailing list<br>CentOS@centos.org<br>http://lists.centos.org/mailman/listinfo/centos<br></lgrullon@citytech.cuny.edu></body></html>