Is Yunohost safe from vps provider?

Support
1

What type of hardware are you using: VPS bought online
What YunoHost version are you running: 12.1.39 (stable)
How are you able to access your server: SSH
Are you in a special context or did you perform specific tweaking on your YunoHost instance ?: No

Describe your issue

As the title says.

I host my Yunohost instanse at Hetzner. The VPS comes with Debian preinstalled, and of course Hetzner has access to that. But when I install Yunohost on top of the Debian installation? Will Hetzner have access to the Yunohost installation and its files?

Share relevant logs or error messages

security
privacy

2

Answering your concern the way I understand it: the filesystem is not encrypted in anyway by default YunoHost installation, so if your VPS provider decides to snapshot the VM and examine its contents all the files will be there, in plaintext.

1 Like
3

Thanks.

That is, of course, quite dissapointing.

Is it not quite common these days to encrypt the installation of an OS?

4

It’s problematic as the encryption key/passphrase must reside somewhere outside of VPS, thus requiring admin interaction during system restart.

There are solutions proposed but so far no real development in YunoHost core has been made in this area.

5

Thanks. It seems to be - if at all - a thing in the future…