←back to thread

Apple: SSH and FileVault

(keith.github.io)
507 points ingve | 5 comments | 18 Sep 25 20:15 UTC | HN request time: 0.461s | source
Show context
sugarpimpdorsey ◴[18 Sep 25 20:39 UTC] No.45294739[source]▶
Maybe stop using Macs as multiuser servers?

Unavailability of FileVault-mounted home directories when not logged in has been the case since Tiger.

I'm curious - if the OpenSSH config files are not available - how do they start sshd? If the system keys are encrypted, how do they accept connections?

There's a surprising lack of detail here.

replies(4): >>45294817 #>>45294905 #>>45294943 #>>45301003 #
1. numbsafari ◴[18 Sep 25 20:47 UTC] No.45294817[source]▶
How about I just want to access my files remotely after a reboot occurs without having to get to the device at my house?

Agreed, though… MacOS isn’t a proper multi-user system and X is Not Unix…

replies(2): >>45294865 #>>45295141 #
2. gjsman-1000 ◴[18 Sep 25 20:51 UTC] No.45294865[source]▶
macOS is a Unix by pedigree; Linux is not.

https://en.wikipedia.org/wiki/List_of_Unix_systems#/media/Fi...

I have to dig out this chart when people complain about macOS's "non-standard utilities." Linux's GNU tools are the ones that aren't standard. If anything, Linux did an "embrace, extend, extinguish" against Unix in general.

replies(2): >>45294925 #>>45295174 #
3. dangus ◴[18 Sep 25 20:57 UTC] No.45294925[source]▶
I’d add that it is rather prescriptive to declare that macOS is not a “proper multi-user system.”

It is quite capable of handling multiple users. Maybe just not in the way that certain people want it to.

4. jacobgkau ◴[18 Sep 25 21:20 UTC] No.45295141[source]▶
In addition to the pedigree that someone else pointed out, macOS is also explicitly certified as UNIX by the legal stewards of that name: https://www.opengroup.org/openbrand/register/

This includes Tahoe specifically: https://www.opengroup.org/openbrand/register/brand3725.htm

5. jen20 ◴[18 Sep 25 21:24 UTC] No.45295174[source]▶
It's also not just Unix by pedigree, but also by certification [1].

[1]: https://www.opengroup.org/openbrand/certificates/1223p.pdf