3 ms·
Remote file systems are the worlds biggest pain in the ass. NFS seems like the easiest option but its ancient and insecure over the network. SFTP can be mounted
by Polylactic_acid 6y ago
Remote file systems are the worlds biggest pain in the ass. NFS seems like the easiest option but its ancient and insecure over the network. SFTP can be mounted and is also easy while being secure but is super CPU heavy on a single thread.
All of the options I looked in to would fail when a program expects to be able to set permissions on things in the remote directory.
- duckMuppet 6y agoNFS using Kerberos over the network is very secure while being fast. Complaining about nfs being insecure is to be ignorant regarding how NFS was originally intended to be implemented.
- cat199 6y ago> NFS seems like the easiest option but its ancient and insecure over the network. r.e. old: nfsv4 is a different beast than nfs3; r.e. secure: these things don't hold true with krb5 auth.
- pjc50 6y agoIt's still not link layer encrypted, IIRC?
- Polylactic_acid 6y agoWikipedia says v4 came out in 2000 and a search for encryption on the page shows no results. sftp gives you really good key based authentication and encryption over the network. I wouldn't trust NFS for anything other than a highly secure internal network.
- yrro 6y agoMount with sec=krb5p and you get encryption (the p is short for Privacy).
- starfallg 6y ago>a search for encryption on the page shows no results https://wiki.debian.org/NFS/Kerberos https://wiki.debian.org/NFS/Kerberos krb5p is pretty secure. You just need a Kerberos implementation. The alternative is to run NFS over Stunnel, which is what Amazon does for EFS.