<commit_before>// Module included in the following assemblies:
//
// * storage/persistent-storage/persistent-storage-nfs.adoc

= Export settings

In order to enable arbitrary container users to read and write the volume, 
each exported volume on the NFS server should conform to the following 
conditions:

* Every export must be exported using the following format:
+
----
/<example_fs> *(rw,root_squash)
----

* The firewall must be configured to allow traffic to the mount point.
** For NFSv4, configure the default port `2049` (*nfs*) and port 
`111` (*portmapper*).
+
.NFSv4
----
# iptables -I INPUT 1 -p tcp --dport 2049 -j ACCEPT
# iptables -I INPUT 1 -p tcp --dport 111 -j ACCEPT
----

** For NFSv3, there are three ports to configure:
`2049` (*nfs*), `20048` (*mountd*), and `111` (*portmapper*).
+
.NFSv3
----
# iptables -I INPUT 1 -p tcp --dport 2049 -j ACCEPT
# iptables -I INPUT 1 -p tcp --dport 20048 -j ACCEPT
# iptables -I INPUT 1 -p tcp --dport 111 -j ACCEPT
----

* The NFS export and directory must be set up so that they are accessible 
by the target Pods. Either set the export to be owned by the container's 
primary UID, or supply the Pod group access using `supplementalGroups`, 
as shown in group IDs above. 
<commit_msg>Port 111 not needed for NFSv4<commit_after>// Module included in the following assemblies:
//
// * storage/persistent-storage/persistent-storage-nfs.adoc

= Export settings

In order to enable arbitrary container users to read and write the volume,
each exported volume on the NFS server should conform to the following
conditions:

* Every export must be exported using the following format:
+
----
/<example_fs> *(rw,root_squash)
----

* The firewall must be configured to allow traffic to the mount point.
** For NFSv4, configure the default port `2049` (*nfs*).
+
.NFSv4
----
# iptables -I INPUT 1 -p tcp --dport 2049 -j ACCEPT
----

** For NFSv3, there are three ports to configure:
`2049` (*nfs*), `20048` (*mountd*), and `111` (*portmapper*).
+
.NFSv3
----
# iptables -I INPUT 1 -p tcp --dport 2049 -j ACCEPT
# iptables -I INPUT 1 -p tcp --dport 20048 -j ACCEPT
# iptables -I INPUT 1 -p tcp --dport 111 -j ACCEPT
----

* The NFS export and directory must be set up so that they are accessible
by the target Pods. Either set the export to be owned by the container's
primary UID, or supply the Pod group access using `supplementalGroups`,
as shown in group IDs above.

{'fraction_non_alphanumeric': 0.10991735537190082, 'fraction_numerical': 0.03760330578512397, 'mean_word_length': 3.3779385171790235, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 5, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '3106738', 'n_tokens_mistral': 851, 'n_tokens_neox': 776, 'n_words': 355}