View previous topic :: View next topic |
Author |
Message |
DToNAToR n00b

Joined: 21 Jun 2004 Posts: 53
|
Posted: Fri Mar 19, 2010 12:59 pm Post subject: Alternative to loop device for encryption? |
|
|
I want to be able to store several "homes" separately and encrypted for different users, each in a different, password encrypted filesystem image.
Each user will have such file on an unencrypted partition, containing a filesystem mounted only when he logs in with pam_mount.
So far so good, but from what I understand, this image's filesystem cannot be journaled. What are my alternatives then?
Does this really matter, when the real partition holding my user's images is journaled? _________________ http://www.dtonator.com |
|
Back to top |
|
 |
geki Advocate


Joined: 13 May 2004 Posts: 2387 Location: Germania
|
|
Back to top |
|
 |
DToNAToR n00b

Joined: 21 Jun 2004 Posts: 53
|
Posted: Sat Mar 20, 2010 2:11 pm Post subject: |
|
|
Care to point me to a detailed documentation (preferably gentoo oriented) on how to actually use it in my case rather than
mount -t ecryptfs /dir /dir
? _________________ http://www.dtonator.com |
|
Back to top |
|
 |
Anarcho Advocate


Joined: 06 Jun 2004 Posts: 2970 Location: Germany
|
Posted: Sat Mar 20, 2010 3:28 pm Post subject: |
|
|
Why should there be a problem with journaling in the encrypted containers?
But what I did is using a LVM partition which contains logical volumes for every user. These volumes follow the naming vg_home_$USER and I mount them using pam_mount on login. Works like a charm especially on my Core i7 Laptop with Intels AES-NI on my Intel Postvile SSD. I have AES 256 Bit encryption and can read up to 240 MB/s from the encrypted drive (without AES-NI I have 120 MB/s). _________________ ...it's only Rock'n'Roll, but I like it! |
|
Back to top |
|
 |
DToNAToR n00b

Joined: 21 Jun 2004 Posts: 53
|
Posted: Sun Mar 21, 2010 7:48 am Post subject: |
|
|
Thanks! Did not think of using lvm. Will definitely try. _________________ http://www.dtonator.com |
|
Back to top |
|
 |
boerKrelis Apprentice

Joined: 01 Jul 2003 Posts: 241 Location: The Netherlands
|
Posted: Sun Mar 21, 2010 2:51 pm Post subject: |
|
|
I can recommend ecryptfs. It seems like a good fit for your situation, scales nicely, and works much better for incremental backups (backing up a gigabyte blob because the user flipped two bits seems.... inefficient). |
|
Back to top |
|
 |
DToNAToR n00b

Joined: 21 Jun 2004 Posts: 53
|
Posted: Sun Mar 21, 2010 7:56 pm Post subject: |
|
|
I still can't find worthy documentation for ecryptfs.
The one on their site is very partial ... _________________ http://www.dtonator.com |
|
Back to top |
|
 |
|