NS8 - Question of understanding

[giacomo (Giacomo Sanchietti)]

@giacomo

AFAIK ransomeware is encrypting all samba shares. How to restore from an earlier backup all shares? In 2018 we isolated Wannacry. Out of curiousity I wanted to see how this virus works. I built a VM and let it in a sandbox linux SME server go. It took only minutes and all shares were encrypted. The restore of all email and all shares from a safe point, took roughly two hours. How will NS8 in this case be affected? Only samba (docker) shares? What else could be affected? Where would be the difference to a plain linux server with samba and email? Where are the advantages?

In this area NS8 (or container in general) behaves like NS7 (or a normal Linux distro): if a file is accessible from a client, it’s also accessible by a cryptolocker running on that client.

The backup in NS8 is done by restic: it’s encrypted and not accessible by the container.
If you need to restore the mail (or the share), you can just restore the single application:Backup and restore — NS8 documentation

@giacomo

I highly doubt this to be easy. This would be the very first time to migrate IT with a finger-snip.

Never said it’s easy But you can do it: no lock-in.

@giacomo

This is a bit of a jump. There’s no official firebase docker. I mean an ERP software is absolutely essential for a company. No need to explain more.

@schulzstefan

A good question: is this still SME?

I think it’s not, this is why we build NS8. But the IT world is trying to push K8S also for SME.