CISF / SMB traffic encryption ?

[Saahib]

Hi,
I just configured remote CISF mount, however couldn't see any way to make sure traffic is encrypted to smb share because I am using it over internet.

I can do just fine from CLI using :

mount.cifs -o seal,user=<username>,pass=<password> //path/to/SMB/Server/backup /PATH/FOLDER

As per docs, I believe using -o seal asks for encrypted traffic if supported by server.

tl;dr
Does SMB share added by PVE GUI uses encryption when supported, if not, how do I enable ?

 

[fabian]

you can provide additional mount options in /etc/pve/storage.cfg via the "options" parameter, see "man pvesm"

 

[Saahib]

Thats great actually. I have enabled in storage.cfg, however, is there way to confirm that it is now actually encrypted ?

 

[fabian]

you can check with "mount" whether the option is active or not.