PowerProtect DD: Changes to /ddvar access over NFS in DDOS 8.3.0.15, 7.13.1.25, 7.10.1.60 and later releases.

Summary: Changes to /ddvar access over Network File System (NFS) Protocol in DDOS releases 8.3.0.15, 7.13.1.25, 7.10.1.60 and later.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

DDOS releases 8.3.0.15, 7.13.1.25, 7.10.1.60 and later includes security enhancements that affect how /ddvar is shared over NFS. 
There is no configuration change needed if /ddvar is shared over CIFS.  

If upgrading from a DDOS release prior to the above, unmount/unmap NFS/CIFS shares for ddvar from all NFS/CIFS clients before the upgrade. Not unmounting prior to the upgrade could result in a stale file handle in the mount; however, this will not cause any issues with the DD upgrade or its usual functions. 
They can be remapped/remounted after the upgrade.

 

Change in NFS ddvar share
 
On Legacy DDOS versions prior to 8.3.0.15, 7.13.1.25, 7.10.1.60 the top level /ddvar partition was shared over NFS.

Example: No longer supported

# nfs export show list
Export                             Path                                          # Client   Tenant-Unit
                                                                                  Entries
--------------------------------   -------------------------------------------   --------   -----------
/ddvar                             /ddvar                                               1   -
--------------------------------   -------------------------------------------   --------   ----------- 

# nfs export add /ddvar clients xyz
NFS client entry(s) added.

 

On newer DDOS versions 8.3.0.15, 7.13.1.25, 7.10.1.60 and later, the top-level /ddvar can no longer be exported over NFS.
Directories underlying /ddvar must be individually exported depending on the use-case.

Example: Supported

# nfs export show list
Export                 Path                   # Client   Tenant-Unit
                                               Entries
--------------------   --------------------   --------   -----------
/ddvar/core            /ddvar/core                   0   -
/ddvar/log             /ddvar/log                    0   -
/ddvar/releases        /ddvar/releases               0   -
/ddvar/support         /ddvar/support                0   -
/ddvar/traces          /ddvar/traces                 0   -
--------------------   --------------------   --------   -----------

#  nfs export add /ddvar clients xyz
**** Invalid argument: NFS export '/ddvar' cannot be found  <<< Adding /ddvar NFS share will return error.

# nfs export add /ddvar/releases clients xyz
NFS client entry(s) added.

# nfs export show detailed /ddvar/releases
NFS Export: /ddvar/releases
    Path:                         /ddvar/releases
    Tenant-Unit:                  -
    NFSv3 Mounts:                 0
    Active NFSv3 clients:         0
    Active NFSv4 clients:         0

    Client          Options
    -------------   -------------------------------------------------------
    xyz             (sec=sys,rw,root_squash,no_all_squash,secure,version=3)
    -------------   -------------------------------------------------------
    Total Client Entries: 1

 

Note: In DDOS releases 8.3.0.15, 7.13.1.25, 7.10.1.60 and later, SCP/FTP access is limited to the following directories:

/ddvar/core
/ddvar/log
/ddvar/releases
/ddvar/support
/ddvar/traces

In addition, you can use SCP to access /ddvar/certificates and top-level /ddvar for uploading certificates, login-banner, licenses, so on.

Additional Information

DSA-2025-139: Dell Technologies PowerProtect Data Domain Security Update for a Security Vulnerability

Affected Products

DD OS

Products

Data Domain, DD OS 7.10, DD OS 7.13, DD OS 8.3
Article Properties
Article Number: 000302621
Article Type: How To
Last Modified: 16 Apr 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.