View source for Orion/Terminal Administration Guide/Shared Filesystem

= Shared Filesystem =

The <tt>orion.ini</tt> file in the Orion distribution specifies a value <tt>-data</tt> which determines that value of the server workspace. If you unzip Orion into <tt>/opt/orion</tt>, by default this folder will be <tt>/opt/orion/eclipse/serverworkspace</tt>. 

== Shared Folder User Access ==

It is expected that the Orion server process is not running as root. Usually a non root user, such as <tt>orionuser</tt> in <tt>oriongroup</tt> is used to run the Orion server.

The server workspace is where each users projects and files are located. This folder must be accessible by both the Orion server and Docker server at the same location. So if the Orion server is reading and writing to <tt>/serverworkspace</tt> as specified on it's <tt>orion.ini</tt>, then the docker server also needs to be able to read and write the same folder at <tt>/serverworkspace</tt>.

In addition, the files would be be created and owned by the same <tt>orionuser</tt> (uid 1000) and group <tt>oriongroup</tt> (gid 1000) on both servers.

== NFS Considerations ==

It should be noted that since the Docker daemon runs as root, the <tt>/serverworkspace</tt> will need to be accessable and readable by root on the Docker server. 

Normally we do not want root to be able to read and write via NFS. We limit this access by having Docker server access <tt>/serverworkspace</tt> with a special configuration.

A way to specify in <tt>/etc/exports</tt> would be as follows:
  /serverworkspace	192.128.121.22(rw,sync,no_subtree_check,all_squash,anonuid=1000,anongid=1000)

In the case above, we specify <tt>anonuid</tt> and <tt>anongid</tt> so that all access is via the same Orion <tt>orionuser</tt> (uid 1000) and group <tt>oriongroup</tt> (gid 1000). To make sure that the Docker daemon can read and write within the Orion serverworkspace, a simple test if to  make sure <tt>touch /serverworkspace/newfile.txt</tt> runs successfully as root on the Docker server and the resulting file is visible as an update on the Orion server and is owned by the userid 1000.