Nfs Testing

The NFS role at ansible/collections/ansible\_collections/lab/franklin/roles/nfs} has been migrated from Molecule to native ansible-test. The role validates:

• Server-side export configuration (/etc/exports)
• Client-side fstab management and mount points
• Kerberos security validation (sec=krb5i -- though keytabs remain undeployed; sec=krb5i is non-functional without keytab infrastructure)

From stargate:

cd ~/workspace/lab-franklin/ansible/collections/ansible_collections/lab/franklin
ansible-test sanity --python 3.12
ansible-test integration nfs --python 3.12

Molecule tests remain as historical artifacts only and are no longer invoked.

Testing now emphasizes:

• <strong>Export template rendering</strong>: Jinja2 templates generate valid /etc/exports content for active roles (chonk's /mnt/storage1, storage2, storage3 exports)
• <strong>Client-side mount validation</strong>: fstab line insertion and idmapd.conf deployment on client nodes
• <strong>Jetson home directory consistency</strong>: NFS-mounted homes from stargate:/mnt/clusterfs2 must maintain uid/gid alignment

NFS-mounted user homes require OpenSSH StrictModes compliance:

• Home directory 0750, .ssh 0700, authorized\_keys 0600 -- verified as part of integration tests
• Kerberos keytabs never deployed; sec=krb5i in exports vars is non-functional

For thorough testing, add:

• Export verification (check showmount -e)
• Mount/unmount cycle tests on client container
• StrictModes permission validation post-mount

The following Molecule-specific items are no longer relevant as of August 2026:

• [D42RECATED] Server-side converge with hostname override
• [D42RECATED] Client-side converge (mount directory creation)
• [D42RECATED] Verify phase checks exports file content
• [D42RECATED] Idempotence test: second converge

All future work uses ansible-test exclusively.