NFS File Server - Hardened NFSv4 Network Share

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Production-Ready NFS File Server

Deploy a fully configured, security-hardened network file server on your own EC2 instance within minutes. Built on the operating system's own kernel NFS server - the file-sharing standard trusted across Linux and Unix networks - this AMI eliminates the manual exports and nfsd tuning of a bare install and avoids the per-share and per-GB fees of managed file services. You retain full control over your instance, storage, and network configuration with no vendor lock-in.

## Why Choose This Over Alternatives?

Unlike managed file-share services, this server runs on infrastructure you own. There are no per-share monthly charges, no throughput-provisioning fees, and no capacity tiers beyond the EBS volume you attach. Teams running shared application data, build artifacts, home directories, or media libraries use this approach to keep costs predictable while retaining full control of their export policy and client access list.

## Secure by Default

The image ships locked down. The exported directory is available to the loopback address only until you explicitly allow your own client network - there is no wildcard export, no 0.0.0.0/0, no insecure option, and no no_root_squash in the shipped configuration. Root on a client is squashed to an unprivileged account, exports use sync and no_subtree_check, and the server is NFSv4-only so there is a single well-known port and no rpcbind or statd attack surface. You decide which trusted networks may mount the share, and an EC2 Security Group gives you a second, independent control over reachability.

## Dedicated Data Volume

The exported directory lives on a dedicated, independently resizable EBS volume kept separate from the operating system disk, mounted by filesystem UUID so the layout is stable across reboots and re-launches. You can grow storage, snapshot it, or move it without touching the OS, and every customer instance re-provisions the same clean layout.

## One-Command Share Management

A bundled CLI tool makes day-to-day operation simple:

• nfs-share status - show the server state and configured client networks
• nfs-share list - show the live export table
• nfs-share allow - grant a trusted network read/write access (add --ro for read-only)
• nfs-share deny - revoke a network's access

The tool refuses world-open exports and refuses to drop root squashing, so a misconfiguration cannot silently open the share to the internet. No manual editing of the exports file is required.

## Ready to Use

A per-instance information file is written on first boot with the server's private IP and the exact commands to open the share to your network. Confirm the server works immediately with the built-in loopback mount check, then allow your client network and mount from any trusted host. The included user guide covers the export model, opening the share, mounting from a client, quotas, and security group configuration.

## Deployment on AWS

This AMI integrates naturally with your existing AWS environment. Place it in a private subnet, restrict inbound traffic on port 2049 to your client subnets via Security Groups, and attach a larger EBS volume as your data grows. Snapshot the data volume for point-in-time backups and integrate with your existing monitoring.

## Get Started with a Guided Setup

Want help designing your file-sharing architecture or planning your export policy? Contact cloudimg for a free guided setup session. Our engineers will walk you through instance sizing, security group configuration, export and client-access design, and backup strategy - so you reach production faster.

## Use Cases

• Shared application data - Provide a common file share for a fleet of application servers that need the same content, uploads, or configuration
• Home directories and team shares - Centralize user home directories or department shares for Linux and Unix clients on a trusted network
• Build and CI artifacts - Give build agents a shared workspace for artifacts and caches on an independently resizable volume
• Media and archive storage - Serve a large, growing media or archive library to trusted clients without per-GB service fees

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.