I have this one little issue with my home 3-node PVE cluster. One node is the fileserver with a large zfs pool exported via NFS to the other 2 nodes. This node also happens to be the one that boots ...
Basic NFS seems ridiculously insecure, while NFSv4 with Kerberos looks to be a real pain to set up. My Linux systems are already domain-joined to AD via sssd/adcli and I have working keytab, ssh/sudo ...