Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have an osx desktop Environment with nfs shares and using linux/vm´s as nfs-clients We want to encrpyt the nfs-data/directories on our os-x machines.

Is that possible? Apple´s File-Fault is using kerberos, but file-fault data isnt´ accessible via nfs. Is there a possibility to use file-vault anyway or should we use truecrypt volumes?

How do we setup truecypt/filevault + nfs?

share|improve this question
up vote 0 down vote accepted

There is only one scenario that I can think of where encrypting data on an NSF server makes sense, and that is to protect your data if someone steals the server. The reason is that the filesystem must be unencrypted for the NFS server to work. The only way around this would be if the NSF server itself decrypts data on demand. You would also need to ensure the security of the data over the wire and on the clients.

For the case where it makes sense, put the data on an encrypted disk image created using Disk Utility. Mount the disk when the server boots and startup NSF.

share|improve this answer
this is exactly the intention: protection against stealing the harddisks. I figured out, that FileVault prevents other users, like the build in apache, but not our nfs server settings. This is because, the nfs is activated by a deamon wich runs is started right after a specific userlogin. – dgAlien May 27 '10 at 11:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .