hi Octave, thanks much for the comments. However, I think there's a need to take a few steps back...
The requirements you list are things that seems to me to be: once we have decided that we want an NFS server in a zone, these are important things that should be true of the delivered product. But I'm not yet seeing clear reasons for *why* we want an NFS server in a zone. I'm certainly not saying that we don't want this, I just want to fully understand the need for it. > scrap projects. Probably the most common idea for having a zone NFS > server is for Jumpstart or home directories. As things stand today, > it's not doable. Right, but these things are easily done (of course) using a server in the global zone: what advantages do we gain by putting the server in a local zone? > I think the key requirements would be: > > 1. Full NFS server functionality within a zone. So things like share, > /etc/dfs/dfstab, sharemgr, ZFS sharing, etc. should work in the same > manner as they do in the global zone. Yes, this would definitely be a delivery requirement for this project, but it doesn't sound like a justification for it. > 2. Security. Separation of NFS namespace to insure proper security > between zones. I'm not sure I quite understand this. Would you please expand? > 3. Performance. NFS serving out of a zone should not be slower or less > scalable than NFS serving from the global zone. Indeed, this would be an important delivery requirement, of course. thanks again for your comments. cheers, calum.