On Tue, 2004-09-14 at 16:29 -0400, Alan Cox wrote: > On Tue, Sep 14, 2004 at 10:44:07AM -0700, Josh England wrote: > > prompt and running the 'mount -t nfs' by hand. This pushes the security > > concerns onto the NFS server. I believe that NFS v4 has paid more > > attention to security details. > > So I hack DHCP, or the kernel PXE boot. Booting without keys on local storage > is a known hard problem. I'm not aware of any solutions The design plan for this involves using keys on first "install" as one of the three or four things you have to set. The keys should also specify the IP address of the directory server, so everything else should be fetchable from there. I don't think we've moved this into the technical bits yet though. -Seth
