Resolved: Cannot mount NFS TrueNAS Scale (client) from OPNsense router share (FreeBSD)

TrueNAS General
1

How stupid of me, a thousand pardons. I had the TrueNAS IP assigned to an outgoing tunnel. How it work internally I have no clue.

Sorry again,

-Ben

Main issue: cannot mount NFS from TrueNAS Scale (client) to OPNsense router share (FreeBSD)
Second issue: cannot list NFS folder contents on TrueNAS Scale (client) mapped to Ubuntu workstation (share)

TrueNAS: ElectricEel-24.10.2.4
OPNsense: 23.7.12_5-amd64

Used to work - I think both had minor version upgrades
Yes I am sudo
Of couse both were rebooted
On same internal network 192.168.1.0/24
No firewall
Mounts from TrueNAS shares work
My fingers hurt from searching the internet

OPNsense /etc/exports: /var/etc/acme-client/home/XXX -network=192.168.1.0/24 -maproot=root (remember this is FreeBSD not Linux)
Ubuntu Workstation /etc/exports: /mnt/nfs_share 192.168.1.0/24(rw,sync,no_subtree_check,no_root_squash)

From TrueNAS 192.168.1.5 Scale shell:

  • tried mount -t nfs 192.168.1.1:/var/etc/acme-client/home/XXX /mnt/certs to OPNsense router 192.168.1.1 - returned mount.nfs timed out :frowning:
  • tried rpcinfo -p 192.168.1.1 OPNsense router: RPC: Remote system error - Connection timed out :frowning:
  • tried nc -v -u 192.168.1.1 111 - success! (port open and listening) :slight_smile:
  • tried nc -v -u 192.168.1.1 2049 - success! (port open and listening) :slight_smile:
  • tried rpcinfo -p 192.168.1.2 to Ubuntu workstation RPC: success! :slight_smile:
  • tried NFS mount to 192.168.1.2 Ubuntu workstation share - partial success :frowning:
    – can map drive but cannot list contents
    – mount command lists:
    — 192.168.1.2:/mnt/nfs_share on /mnt/test type nfs4 (rw,relatime,vers=4.2,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,clientaddr=192.168.1.5,local_lock=none,addr=192.168.1.2)
    – root@Truenas[/mnt/test]# ls
    – root@Truenas[/mnt/test]# (folder is blank)

From Ubuntu workstation 192.168.1.2

  • tried both mount and rpc to OPNsense - success!
    – XXXX@Ryzen:~$ rpcinfo -p 192.168.1.1
    program vers proto port service
    100000 4 tcp 111 portmapper
    100000 3 tcp 111 portmapper
    100000 2 tcp 111 portmapper
    100000 4 udp 111 portmapper
    100000 3 udp 111 portmapper
    100000 2 udp 111 portmapper
    100000 4 7 111 portmapper
    100000 3 7 111 portmapper
    100000 2 7 111 portmapper
    100005 1 udp 946 mountd
    100005 3 udp 946 mountd
    100005 1 tcp 946 mountd
    100005 3 tcp 946 mountd
    100003 2 udp 2049 nfs
    100003 3 udp 2049 nfs
    100003 2 tcp 2049 nfs
    100003 3 tcp 2049 nfs

From VM Ubuntu server on TrueNAS:

  • mounted OPNsense share - success!
  • rpcinfo -p to OPNsense router - success!
  • can map and list contents from Ubuntu VM on TrueNAS
    – root@Server:/mnt/test# ls
    – test1 (shows folder on workstation)

Bottom line:
It worked once upon a time.
Ubuntu VM and workstation connect to OPNsense share no problem.
Ubuntu VM connects to Workstation and lists share.
TrueNAS won’t connect to OPNsense but will connect to ubuntu workstation although it won’t list the contents of the share.

TIA -Ben

2

Is this a duplicate posting of Issue: Cannot mount NFS TrueNAS Scale (client) from OPNsense router share (FreeBSB).

3

Yep new here, my mistake trying to navigate new forum system…

4

There’s an SSH based automation in OPNsense’s ACME client …

5

Thanks pmh,

I am using that on OPNSense. I need the share because I have docker mailserver running on TrueNAS that needs ssl certs plus OPNsense proxies other apps for ssl (postfix has to have path to certs.) The easy way to do that is to OPNsense share with the mailserver docker container. It was working but stopped. The shares should still work so it is either an OPNsense or TrueNAS issue and from my testing it appears to be TrueNAS.

6

pmh,

I missed the point that in docker the cert path is to TrueNAS /mnt/cert and TrueNAS /mnt/cert is mapped to OPNsence.

It is simpler to have one instance of ACME running on OPNsence…

-Ben

7

At least make that export read-only to let me sleep well :face_with_tongue:

8

Good point I will.

Any thoughts as to why the share to TrueNAS does not work?

-Ben

9

Sorry, BSD-, not Linux guy. No idea.