NFS - Disable V2 and V3

[maestro7879]

Required Info:

• AWS ParallelCluster version [e.g. 3.1.1]: 3.11.1

CIS security controls would like to have rpcbind.service and rpcbind.socket disabled/masked. The build-image requires a start of rpcbind which as I understand is only required for NFS2 and 3. Is it possible to not make this a requirement?

Error -
Expected process to exit with [0], but received '1'
Stdout: ---- Begin output of ["/usr/bin/systemctl", "--system", "start", "rpc-statd.service"] ----
Stdout: STDOUT:
Stdout: STDERR: Failed to start rpc-statd.service: Unit rpcbind.socket is masked.
Stdout: ---- End output of ["/usr/bin/systemctl", "--system", "start", "rpc-statd.service"] ----
Stdout: Ran ["/usr/bin/systemctl", "--system", "start", "rpc-statd.service"] returned 1

[himani2411]

Hi @maestro7879

In AWS ParallelCluster we use third party cookbook which is the one which enables/starts the rpcbind service.
However we use NFSv4. I have created a Backlog Item for the request you have made to evaluate if it will affect any feature we have with Storage