I am trying to mount an nfs share from my local network using qubesos. I know that the same configuration works on a different debian machine, but it doesn’t work under an app VM, creating the following error:
$ sudo mount -t nfs -o nfsvers=4.2 -o sec=krb5p <nfs share> /mnt/removable/ -vvv
mount.nfs: timeout set for Sat Mar 14 16:35:14 2026
mount.nfs: trying text-based options 'nfsvers=4.2,sec=krb5p,addr=10.206.0.206,clientaddr=10.137.0.9'
mount.nfs: mount(2): Invalid argument
mount.nfs: an incorrect mount option was specified for /mnt/removable
Is this a firewall issue somehow? I don’t see how that would happen, since nfs should work over the internet. I have installed nfs-utils to the template, but I’m not completely certain that’s actually what’s being used.
First, good on you for using krb5p.
Where is the server? Can you ping it from the VM? Can you access the NFS ports?
I bet you need to open ports 2049 and 111
The server is physically connected to my laptop with only a switch in between. However, my Qubesos config has two routers (one of which is a firewall) between the hardware and what I’m actually working on. I checked with curl, and I have access to ports 2049 and 111, as well as the webui on 443.
