martin/HomeAssistantAddons
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(nfs): add root_squash option per share, default true for security

Browse Source
This commit is contained in:
Martin Tahiraj
2026-03-31 12:17:42 +02:00
parent 3123d313c1
commit ab6901cf4b
2 changed files with 14 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
nfs/config.json
View File

@@ -1,6 +1,6 @@
{ {
"name": "NFS Server", "name": "NFS Server",
"version": "1.0.7", "version": "1.0.8",
"slug": "nfs_server", "slug": "nfs_server",
"description": "Expose Home Assistant media folder via NFS.", "description": "Expose Home Assistant media folder via NFS.",
"arch": [ "arch": [
@@ -26,7 +26,8 @@
{ {
"folder": "media", "folder": "media",
"allowed_network": "192.168.1.0/24", "allowed_network": "192.168.1.0/24",
"read_only": false "read_only": false,
"root_squash": true
} }
] ]
}, },
@@ -35,7 +36,8 @@
{ {
"folder": "str", "folder": "str",
"allowed_network": "str", "allowed_network": "str",
"read_only": "bool" "read_only": "bool",
"root_squash": "bool"
} }
] ]
}, },

11
nfs/run.sh
View File

@@ -15,12 +15,19 @@ else
FOLDER=$(jq -r ".shares[${i}].folder" "${CONFIG}") FOLDER=$(jq -r ".shares[${i}].folder" "${CONFIG}")
NETWORK=$(jq -r ".shares[${i}].allowed_network" "${CONFIG}") NETWORK=$(jq -r ".shares[${i}].allowed_network" "${CONFIG}")
READ_ONLY=$(jq -r ".shares[${i}].read_only" "${CONFIG}") READ_ONLY=$(jq -r ".shares[${i}].read_only" "${CONFIG}")
ROOT_SQUASH=$(jq -r ".shares[${i}].root_squash" "${CONFIG}")
MOUNT_PATH="/${FOLDER}" MOUNT_PATH="/${FOLDER}"
if [ "${READ_ONLY}" = "true" ]; then if [ "${READ_ONLY}" = "true" ]; then
OPTIONS="ro,no_root_squash" OPTIONS="ro"
else else
OPTIONS="rw,no_root_squash" OPTIONS="rw"
fi
if [ "${ROOT_SQUASH}" = "true" ]; then
OPTIONS="${OPTIONS},root_squash"
else
OPTIONS="${OPTIONS},no_root_squash"
fi fi
bashio::log.info "Exporting ${MOUNT_PATH} to ${NETWORK} (${OPTIONS})..." bashio::log.info "Exporting ${MOUNT_PATH} to ${NETWORK} (${OPTIONS})..."