Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Kernel Ext4 encryption
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Unsupported Software
View previous topic :: View next topic  
Author Message
Buffoon
l33t
l33t


Joined: 17 Jun 2015
Posts: 952
Location: EU or US

PostPosted: Fri Sep 09, 2016 1:31 pm    Post subject: Kernel Ext4 encryption Reply with quote

There has been Ext4 encryption in kernel for some time now, what user space tools I need to use it?
Back to top
View user's profile Send private message
frostschutz
Advocate
Advocate


Joined: 22 Feb 2005
Posts: 2832
Location: Germany

PostPosted: Fri Sep 09, 2016 1:36 pm    Post subject: Reply with quote

e4crypt
Back to top
View user's profile Send private message
Buffoon
l33t
l33t


Joined: 17 Jun 2015
Posts: 952
Location: EU or US

PostPosted: Fri Sep 09, 2016 2:23 pm    Post subject: Reply with quote

Thanks! Why it is not on users path?!
Back to top
View user's profile Send private message
toralf
Advocate
Advocate


Joined: 01 Feb 2004
Posts: 3332
Location: Hamburg

PostPosted: Fri Sep 09, 2016 3:07 pm    Post subject: Reply with quote

Buffoon wrote:
Thanks! Why it is not on users path?!
Code:
tfoerste@mr-fox ~ $ grep e2 /etc/portage/package.accept_keywords/z_misc
~sys-fs/e2fsprogs-1.43.3
~sys-libs/e2fsprogs-libs-1.43.3
Back to top
View user's profile Send private message
Buffoon
l33t
l33t


Joined: 17 Jun 2015
Posts: 952
Location: EU or US

PostPosted: Fri Sep 09, 2016 3:24 pm    Post subject: Reply with quote

I am running ~arch, e4crypt is installed into /usr/sbin/ - yet it is a tool for users.
Back to top
View user's profile Send private message
Myu
Tux's lil' helper
Tux's lil' helper


Joined: 22 Oct 2014
Posts: 98
Location: Belgium

PostPosted: Fri Sep 09, 2016 7:35 pm    Post subject: Reply with quote

It's categorized as a section (8), not (1), maybe that's why, I've got the same behaviour with xfsdump which is (8)
_________________
Gentoo amd64 stable (mostly) / Linux games / vfio-pci gaming // Xfce

I'm learning ebuild writing, feel free to PM me if you would like a simple ebuild and I'll see what I can do :]
Back to top
View user's profile Send private message
depontius
Advocate
Advocate


Joined: 05 May 2004
Posts: 3090

PostPosted: Tue Sep 20, 2016 2:46 pm    Post subject: Reply with quote

I've begun looking into the native ext4 encryption as a means of encrypting a single directory, rather than everything. I've just looked at "e4crypt" and it doesn't look nearly as easy to use as the package from the pentoo overlay, "ext4-crypt". However with the latter I get:
Code:
$ ext4-crypt create vault
Enter passphrase:
Confirm passphrase:
Cannot create inode in directory: Operation not permitted

Does anyone else have this working for anything less than a partition?
_________________
.sigs waste space and bandwidth
Back to top
View user's profile Send private message
frostschutz
Advocate
Advocate


Joined: 22 Feb 2005
Posts: 2832
Location: Germany

PostPosted: Tue Sep 20, 2016 3:14 pm    Post subject: Reply with quote

Is that really supposed to work without root?
Back to top
View user's profile Send private message
depontius
Advocate
Advocate


Joined: 05 May 2004
Posts: 3090

PostPosted: Tue Sep 20, 2016 3:39 pm    Post subject: Reply with quote

frostschutz wrote:
Is that really supposed to work without root?


Yes it is, and the results are the same for root, too.

More information...
I suspect the real problem is that the ebuild is not sufficiently picky. The first time I tried ext4-crypt and failed, it notified me that I didn't have CONFIG_EXT4_ENCRYPTION set, and it told me so at runtime. However it seems to me that the ebuild should have tested that and notified me. Kernel keyring facilities are needed by ext4-crypt and not tested at build-time, either. Somewhere I also saw something about e2fsprogs-1.43+, so I kicked that up too. I don't know what the various requirements are either for libs or kernel. In the case of the one missing kernel option it properly flagged it at runtime, but I don't know what else may not be getting properly flagged.
_________________
.sigs waste space and bandwidth
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Unsupported Software All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum