Best cloud storage services with CLI for Trusted End Node Security (formerly Lightweight Portable Security (LPS)): (Guide)

Introduction

Linux Trusted End Node Security (formerly Lightweight Portable Security, LPS) is a minimal, live-boot distro designed for secure operations on potentially untrusted machines. Because it runs entirely in RAM and resets on reboot, integrating cloud storage via the command-line (CLI) ensures persistent, encrypted access without installing heavy GUI clients. Below we explore top cloud storage providers—pCloud, MEGA, Proton Drive, Filen, Tresorit, Icedrive—and add Backblaze B2 and OneDrive for completeness. We compare features, show CLI setup for each, discuss common issues, and advise on choosing the right one for LPS.

Comparison Table

Provider Details and CLI Setup

pCloud

pCloud offers client-side encryption (Crypto) and a native CLI client pcloudcc.

Installation

# Download and extract
wget https://github.com/pCloud/pcloudcc/releases/download/v2.2.0/pcloudcc_2.2.0_amd64.tar.gz
tar -xzvf pcloudcc_2.2.0_amd64.tar.gz
# Run pcloudcc
sudo ./pcloudcc --username your@email.com --passwd YOUR_PASSWORD

Usage Examples

# List remote
pcloudcc --listfolders
# Upload file
pcloudcc --upload localfile.txt /root/
# Download file
pcloudcc --download /root/remote.txt ./local.txt

Common issues: Missing FUSE support (add kernel module) firewall blocking pCloud port.

MEGA

MEGAcmd is the official CLI for MEGA.

Installation

# Debian/Ubuntu
sudo apt-get update
sudo apt-get install megacmd
# Or download AppImage for LPS
wget https://github.com/meganz/MEGAcmd/releases/download/v1.9.0/megacmd-1.9.0-Linux-x86_64.AppImage
chmod  x megacmd-1.9.0-Linux-x86_64.AppImage

Usage Examples

# Login
mega-login your@email.com PASSWORD
# List
mega-ls
# Upload
mega-put localfile.txt /Root/
# Download
mega-get /Root/remote.txt .

Common issues: AppImage missing libfuse—launch with –appimage-extract or include fuse module.

Proton Drive

Use rclone’s Proton Drive backend.

Installation

# Download rclone
curl https://rclone.org/install.sh  sudo bash
# Configure Proton Drive
rclone config
# Choose: n) new remote
# Name: proton
# Storage: protondrive
# Follow OAuth in browser

Usage Examples

# List files
rclone ls proton:
# Upload folder
rclone copy ~/localdir proton:/Backup
# Mount (FUSE)
rclone mount proton: /mnt/proton --daemon

Common issues: OAuth redirect failing in LPS—use external browser on another machine and paste token.

Filen

Filen CLI simplifies end-to-end encryption uploads.

Installation

# Download binary
wget https://github.com/filen/filen-cli/releases/download/v0.2.12/filen-cli-linux-x64
chmod  x filen-cli-linux-x64
sudo mv filen-cli-linux-x64 /usr/local/bin/filen-cli

Usage Examples

# Login
filen-cli login
# Upload file
filen-cli upload ./secret.txt --path=/
# Download file
filen-cli download file_id --path=./

Common issues: Certificate errors—install CA cert bundle (ca-certificates).

Tresorit

Tresorit-CLI is in beta but usable for basic sync.

Installation

# Debian package
wget https://github.com/tresorit/tresorit-cli/releases/download/v1.0.18/tresorit-cli_1.0.18_amd64.deb
sudo dpkg -i tresorit-cli_1.0.18_amd64.deb

Usage Examples

# Authenticate
tresorit login
# Sync a tresor
tresorit sync my-tresor ~/tresor-local
# List tresors
tresorit list

Common issues: Requires systemd on LPS, run tresorit daemon manually and ensure FUSE module.

Icedrive

Icedrive-CLI supports mounting transfers.

Installation

# Download
wget https://github.com/Icedrive/cli/releases/download/v1.0.1/icedrive-linux-x64.tar.gz
tar -xzvf icedrive-linux-x64.tar.gz
sudo mv icedrive /usr/local/bin/

Usage Examples

# Login
icedrive auth login
# Mount remote
icedrive mount /mnt/icedrive
# Upload
icedrive upload local.txt /
# Download
icedrive download remote.txt ./ 

Common issues: Mount hangs if fuse not loaded run modprobe fuse first.

Backblaze B2

Backblaze B2’s official CLI is b2.

Installation

# Python pip
pip install b2
# Or Debian package
sudo apt-get install b2command
# Authorize
b2 authorize-account YOUR_KEY_ID YOUR_APP_KEY

Usage Examples

# Create bucket
b2 create-bucket mybucket allPublic
# Upload
b2 upload-file mybucket local.txt remote.txt
# Download
b2 download-file-by-name mybucket remote.txt ./local.txt

Common issues: Clock skew—ensure date/time is correct region mismatches.

OneDrive

Open-source OneDrive client by abraunegg.

Installation

# Dependencies
sudo apt-get install libcurl4-openssl-dev libsqlite3-dev
# Clone  build
git clone https://github.com/abraunegg/onedrive.git
cd onedrive
./configure
make
sudo make install
# Initial config
onedrive

Usage Examples

# Sync
onedrive --synchronize
# Monitor changes
onedrive --monitor
# Upload single file
onedrive --upload local.txt --remote-root /

Common issues: Rate limits re-authenticate if token expires.

Which One to Choose?

• Max Security / Zero-Knowledge: Tresorit, Filen, Icedrive, pCloud Crypto.
• Generous Free Tier: MEGA (20 GB), pCloud (10 GB), Icedrive (10 GB).
• Pay-as-you-go / Business: Backblaze B2 or OneDrive (Office integration).
• Ease of CLI: MEGAcmd and pCloudcc are turnkey Proton via rclone is flexible.
• Mounting via FUSE: MEGA, rclone (Proton), Icedrive.

For LPS, where installation must be in RAM, AppImage or static binaries (pcloudcc, MEGAcmd-AppImage, Icedrive) minimize dependencies. If end-to-end encryption is top priority, choose Tresorit, Filen or pCloud Crypto. For simple personal backups with a large free quota, MEGA or Icedrive are excellent.

Conclusion

Integrating cloud storage on LPS via CLI combines portability, security, and automation. Each provider has trade-offs in encryption, pricing, free tier, and complexity. Evaluate your threat model, storage needs, and scripting requirements to select the best fit. Armed with the examples and tips above, you can quickly configure and troubleshoot your CLI client on Linux Trusted End Node Security.