• @fartsparkles@lemmy.world
    link
    fedilink
    512 days ago

    NFS is insecure out of the box so typically tunnelled over TLS (not seen it done over SSH since why bother if there’s SFTP?).

    I’d rather a desktop app or a terminal app for remote file systems than install a kext on a mac. Like, kicking stuff out of the kernel was an excellent idea.

    FUSE would knock over my old mac anytime a transfer was longer than an hour or two. Not to mention the vulnerabilities poorly developed or maintained kexts introduce.

      • 2xsaiko
        link
        fedilink
        211 days ago

        Eh, works for me for home use. I just have it running on the same machine as the NFS server. The only thing that bothers me is that I can’t use normal Kerberos for SMB, I’d have to set up Samba AD. Boooo

        I even managed to make it work with just mDNS as I’m currently in a horrible network I don’t control.

    • 2xsaiko
      link
      fedilink
      411 days ago

      NFS is insecure out of the box so typically tunnelled over TLS

      Set up Kerberos, it will also give you correct file ownership and then you don’t need any additional tunnel.

    • macniel
      link
      fedilink
      412 days ago

      for that I then just use VPN/Wireguard if I really need to access my home server remotely off-site.