Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Alternative to loop device for encryption?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
DToNAToR
n00b
n00b


Joined: 21 Jun 2004
Posts: 53

PostPosted: Fri Mar 19, 2010 12:59 pm    Post subject: Alternative to loop device for encryption? Reply with quote

I want to be able to store several "homes" separately and encrypted for different users, each in a different, password encrypted filesystem image.
Each user will have such file on an unencrypted partition, containing a filesystem mounted only when he logs in with pam_mount.
So far so good, but from what I understand, this image's filesystem cannot be journaled. What are my alternatives then?
Does this really matter, when the real partition holding my user's images is journaled?
_________________
http://www.dtonator.com
Back to top
View user's profile Send private message
geki
Advocate
Advocate


Joined: 13 May 2004
Posts: 2387
Location: Germania

PostPosted: Fri Mar 19, 2010 4:21 pm    Post subject: Reply with quote

No idea if that is an alternative for you:
http://gentoo-portage.com/sys-fs/ecryptfs-utils

ubuntu uses that to encrypt HOME optionally.
_________________
hear hear
Back to top
View user's profile Send private message
DToNAToR
n00b
n00b


Joined: 21 Jun 2004
Posts: 53

PostPosted: Sat Mar 20, 2010 2:11 pm    Post subject: Reply with quote

Care to point me to a detailed documentation (preferably gentoo oriented) on how to actually use it in my case rather than
mount -t ecryptfs /dir /dir
?
_________________
http://www.dtonator.com
Back to top
View user's profile Send private message
Anarcho
Advocate
Advocate


Joined: 06 Jun 2004
Posts: 2970
Location: Germany

PostPosted: Sat Mar 20, 2010 3:28 pm    Post subject: Reply with quote

Why should there be a problem with journaling in the encrypted containers?

But what I did is using a LVM partition which contains logical volumes for every user. These volumes follow the naming vg_home_$USER and I mount them using pam_mount on login. Works like a charm especially on my Core i7 Laptop with Intels AES-NI on my Intel Postvile SSD. I have AES 256 Bit encryption and can read up to 240 MB/s from the encrypted drive (without AES-NI I have 120 MB/s).
_________________
...it's only Rock'n'Roll, but I like it!
Back to top
View user's profile Send private message
DToNAToR
n00b
n00b


Joined: 21 Jun 2004
Posts: 53

PostPosted: Sun Mar 21, 2010 7:48 am    Post subject: Reply with quote

Thanks! Did not think of using lvm. Will definitely try.
_________________
http://www.dtonator.com
Back to top
View user's profile Send private message
boerKrelis
Apprentice
Apprentice


Joined: 01 Jul 2003
Posts: 241
Location: The Netherlands

PostPosted: Sun Mar 21, 2010 2:51 pm    Post subject: Reply with quote

I can recommend ecryptfs. It seems like a good fit for your situation, scales nicely, and works much better for incremental backups (backing up a gigabyte blob because the user flipped two bits seems.... inefficient).
Back to top
View user's profile Send private message
DToNAToR
n00b
n00b


Joined: 21 Jun 2004
Posts: 53

PostPosted: Sun Mar 21, 2010 7:56 pm    Post subject: Reply with quote

I still can't find worthy documentation for ecryptfs.
The one on their site is very partial ...
_________________
http://www.dtonator.com
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum