From ef83ee2669c8bf97653912888f50ad8203c07a6b Mon Sep 17 00:00:00 2001
From: Thomas Schneider <thomas@fsmpi.rwth-aachen.de>
Date: Tue, 14 Jun 2022 22:10:42 +0200
Subject: [PATCH] nfs-{server,client}: Mask rpc-svcgssd on clients, unmask on
 servers

The service gets pulled in by any nfs systemd unit, but is required (and
functional) only on servers.  As the service fails, monitoring complains.
---
 nfs-client/tasks/main.yml | 4 ++--
 nfs-server/tasks/main.yml | 7 +++++++
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/nfs-client/tasks/main.yml b/nfs-client/tasks/main.yml
index a737f14..de13684 100644
--- a/nfs-client/tasks/main.yml
+++ b/nfs-client/tasks/main.yml
@@ -76,10 +76,10 @@
   tags:
     - nfs-client
 
-- name: enable rpc-svcgssd iff we use kerberized NFS
+- name: Disable rpc-svcgssd
   systemd:
     name: rpc-svcgssd.service
-    masked: "{{ not nfs_enable_gss }}"
+    masked: true
   tags:
     - nfs-client
 
diff --git a/nfs-server/tasks/main.yml b/nfs-server/tasks/main.yml
index a3c4643..ce404ba 100644
--- a/nfs-server/tasks/main.yml
+++ b/nfs-server/tasks/main.yml
@@ -59,6 +59,13 @@
   tags:
     - nfs-server
 
+- name: Unmask rpc-svcgssd.service
+  systemd:
+    name: rpc-svcgssd.service
+    masked: false
+  tags:
+    - nfs-server
+
 - name: ensure nfs-server is enabled and running
   service:
     name: nfs-server
-- 
GitLab