Having read NFS mount through ConnectTCP delays shutdown · Issue #5911 · QubesOS/qubes-issues · GitHub, I’m asking myself:
What is the difference between just putting
and creating full fledged systemd service and socket, as described in Firewall | Qubes OS, point 4?
Former works fine for me and is easier to implement. Though docs describe latter as reference.
Till now, I have not experienced any race conditions, as described in the issue.