'tahoe mount' command #1357

New Issue

tahoe-lafs · 2011-02-04T04:00:27Z

davidsarah commented

2011-02-04 04:00:27 +00:00

(/tahoe-lafs/trac-2024-07-25/issues/6415)#comment:1 suggested a tahoe mount command, which would mount a Tahoe directory at a local mount point.

tahoe mount [OPTIONS] [-o MOUNT_OPTION[,...]] TAHOE_PATH MOUNT_POINT

(As for all other CLI commands, TAHOE_PATH could be given relative to the default tahoe: alias, an explicit alias, or an explicit URI.)

I propose implementing this using SFTP+sshfs. The SFTP frontend would be changed to allow logging in with an arbitrary cap URI as root directory (#1356). Then the above mount command would be implemented by invoking sshfs with the -o password_stdin option, and passing the URI on stdin. This avoids exposing the URI via the command line. Because any aliases in TAHOE_PATH are resolved by tahoe mount, it also avoids ambient authority weaknesses, even when an attacker is not prevented from connecting to the SFTP server.

The host and port of the SFTP server would be obtained by determining the node directory as usual, and looking for a tahoe.cfg with an sftpdport setting in that directory. (It might be useful to allow specifying this in a separate sftp.url file analogous to node.url, I'm not sure.)

(/tahoe-lafs/trac-2024-07-25/issues/6415)#comment:1 suggested a `tahoe mount` command, which would mount a Tahoe directory at a local mount point. ``` tahoe mount [OPTIONS] [-o MOUNT_OPTION[,...]] TAHOE_PATH MOUNT_POINT ``` (As for all other CLI commands, TAHOE_PATH could be given relative to the default `tahoe:` alias, an explicit alias, or an explicit URI.) I propose implementing this using SFTP+sshfs. The SFTP frontend would be changed to allow logging in with an arbitrary cap URI as root directory (#1356). Then the above mount command would be implemented by invoking `sshfs` with the `-o password_stdin` option, and passing the URI on stdin. This avoids exposing the URI via the command line. Because any aliases in `TAHOE_PATH` are resolved by `tahoe mount`, it also avoids ambient authority weaknesses, even when an attacker is not prevented from connecting to the SFTP server. The host and port of the SFTP server would be obtained by determining the node directory as usual, and looking for a `tahoe.cfg` with an `sftpdport` setting in that directory. (It might be useful to allow specifying this in a separate `sftp.url` file analogous to `node.url`, I'm not sure.)

tahoe-lafs added the

labels 2011-02-04 04:00:27 +00:00

tahoe-lafs added this to the 1.9.0 milestone 2011-02-04 04:00:27 +00:00

davidsarah commented

2011-02-04 04:31:48 +00:00

Replying to davidsarah:

Then the above mount command would be implemented by invoking sshfs with the -o password_stdin option, and passing the URI on stdin.

Note that this doesn't preclude supporting other ways to mount a Tahoe filesystem using the same tahoe mount syntax, if we implement other FUSE interfaces in future. There could be a tahoe.cfg setting to specify the command that is executed. For example:

[mount]
# What command will 'tahoe mount' use to mount the filesystem?
# This command will take the root URI on stdin. For SFTP, the root URI
# is the password. For example, when using sshfs you should pass the
# '-o password_stdin' option. The variables $MOUNTPOINT and $SFTPPORT
# can be used to specify the mount point, and SFTP port number if needed.

command = sshfs uri@127.0.0.1 $MOUNTPOINT -p $SFTPPORT -o password_stdin,reconnect,big_writes

Replying to [davidsarah](/tahoe-lafs/trac-2024-07-25/issues/6419): > Then the above mount command would be implemented by invoking `sshfs` with the `-o password_stdin` option, and passing the URI on stdin. Note that this doesn't preclude supporting other ways to mount a Tahoe filesystem using the same `tahoe mount` syntax, if we implement other FUSE interfaces in future. There could be a `tahoe.cfg` setting to specify the command that is executed. For example: ``` [mount] # What command will 'tahoe mount' use to mount the filesystem? # This command will take the root URI on stdin. For SFTP, the root URI # is the password. For example, when using sshfs you should pass the # '-o password_stdin' option. The variables $MOUNTPOINT and $SFTPPORT # can be used to specify the mount point, and SFTP port number if needed. command = sshfs uri@127.0.0.1 $MOUNTPOINT -p $SFTPPORT -o password_stdin,reconnect,big_writes ```