Guide and reference

The mount grant

Linux requires root for ZFS mount and unmount. pālana invokes those two operations through non-interactive sudo.

Rule#

<user> ALL=(root) NOPASSWD: /usr/sbin/zfs mount *, /usr/sbin/zfs unmount *

Replace <user> with the SSH login for the host. Check the absolute ZFS path with command -v zfs because some systems install it under /sbin. Add the resulting line with visudo.

The rule permits passwordless execution of the two listed command forms with arbitrary following arguments. It does not permit other ZFS subcommands. A site can restrict the argument patterns further when its dataset names are fixed.

Application behavior#

Mount and unmount plans use sudo -n, which refuses immediately when the rule is absent because the SSH command has no password prompt. The refusal includes the rule with the configured SSH user when that value is available.

After installing the rule, open the field with f and press r on the host so its sudo capability is probed again. Dataset and snapshot commands continue to use the connected user's delegated ZFS permissions.