diff --git a/CHANGES b/CHANGES
index 2c7152018..f841496ca 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2795,4 +2795,7 @@
 * dashboard: add admin notes
 * Use systemd-resolved as the system resolver. unbound is now only for mail server and recursive DNS lookups
 
+[8.0.1]
+* nfs: disable rpcbind service. we only support nfsv4 mounting
+* dashboard: only show postinstall if notes are not just empty
 
diff --git a/scripts/init-ubuntu.sh b/scripts/init-ubuntu.sh
index 8d51e40d7..887e44809 100755
--- a/scripts/init-ubuntu.sh
+++ b/scripts/init-ubuntu.sh
@@ -199,6 +199,10 @@ systemctl disable postfix || true
 # on vultr, ufw is enabled by default. we have our own firewall
 ufw disable || true
 
+# nfs-common depends on rpcbind which is only needed for NFS v2/v3 . systemctl list-sockets | grep 111
+systemctl disable rpcbind.socket rpcbind.service || true
+systemctl stop rpcbind.socket rpcbind.service || true
+
 # Ubuntu 22 has private home directories by default (https://discourse.ubuntu.com/t/private-home-directories-for-ubuntu-21-04-onwards/)
 sed -e 's/^HOME_MODE\([[:space:]]\+\).*$/HOME_MODE\10755/' -i /etc/login.defs
 
diff --git a/setup/start.sh b/setup/start.sh
index c3ae03b56..dc4b33ca9 100755
--- a/setup/start.sh
+++ b/setup/start.sh
@@ -132,6 +132,10 @@ systemctl enable --now cron
 # ensure unbound runs
 systemctl restart unbound
 
+# nfs-common depends on rpcbind which is only needed for NFS v2/v3 . can be removed after 8.0.1 . systemctl list-sockets | grep 111
+systemctl disable rpcbind.socket rpcbind.service || true
+systemctl stop rpcbind.socket rpcbind.service || true
+
 log "Configuring sudoers"
 rm -f /etc/sudoers.d/${USER} /etc/sudoers.d/cloudron
 cp "${script_dir}/start/sudoers" /etc/sudoers.d/cloudron