Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
e4crypt is driving me nuts
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Kernel & Hardware
View previous topic :: View next topic  
Author Message
toralf
Advocate
Advocate


Joined: 01 Feb 2004
Posts: 3330
Location: Hamburg

PostPosted: Tue Sep 20, 2016 9:30 pm    Post subject: e4crypt is driving me nuts Reply with quote

I do have a user "tor" (no login shell) and an already filled directory /var/lib/tor/data. Now I'd like to encrypt that directory an a way, that [1] can be used to decrypt it. By no way I get it till now. I must admit I do not have any experiences in ext4 encryption.

Does anybody has a working way to achieve the goal ?


[1] https://github.com/toralf/torutils/blob/master/unlock_tor.sh
Back to top
View user's profile Send private message
axl
Apprentice
Apprentice


Joined: 11 Oct 2002
Posts: 191
Location: Romania

PostPosted: Tue Sep 20, 2016 9:47 pm    Post subject: Reply with quote

why not use what normal humans use? luks fs / cryptsetup.
Back to top
View user's profile Send private message
Hu
Moderator
Moderator


Joined: 06 Mar 2007
Posts: 9850

PostPosted: Wed Sep 21, 2016 1:52 am    Post subject: Reply with quote

axl: ext4 encryption can be done on a per-directory basis. Toralf presumably has an ext4 filesystem mounted either at /var or at / that has, as one of its subdirectories, the directory he wants to encrypt. If he used a LUKS based design, he would need a separate filesystem just for that directory. He would need to reserve in advance enough space for that directory to grow to the maximum size he wants to allow, and that reservation would not be usable by any other part of /var, even when the encrypted directory is empty.
Back to top
View user's profile Send private message
toralf
Advocate
Advocate


Joined: 01 Feb 2004
Posts: 3330
Location: Hamburg

PostPosted: Wed Sep 21, 2016 7:22 am    Post subject: Reply with quote

Hu wrote:
axl: ext4 encryption can be done on a per-directory basis. Toralf presumably has an ext4 filesystem mounted either at /var or at / that has, as one of its subdirectories, the directory he wants to encrypt. If he used a LUKS based design, he would need a separate filesystem just for that directory. He would need to reserve in advance enough space for that directory to grow to the maximum size he wants to allow, and that reservation would not be usable by any other part of /var, even when the encrypted directory is empty.
Indeed.
Update
Seems that the issue is either due to my lack in knowledge - OTOH the whole encryption changes in 4.8. - will see, if the same commands will work then.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Kernel & Hardware All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum