>> I now need to keep much of the drive contents encrypted.

> pipefs(4) could be used to read / write from an encrypted directory  
> tree.
> from my $home/lib/profile:

>                    (pipefs -c -r 'crypt -d -k keyfile'
>                        -w 'crypt -k keyfile'
>                        /encrypted/dir /n/decrypted)

> keyfile contains the key in plain text and needs protection.

>> It would be very
>> useful if I could keep an entire file system tree in a hosted  
>> file.  Is
>> there such a file server kicking around?

> kfs(4), but i have not attempted an encryption setup using this.

> arvindh

> Encrypting the kfs file would suffice, but for the hassle of
> encrypting/decrypting each session.

>> Pipefs doesn't quite do enough - the names of the themselves files  
>> are
>> sensitive.

>> Encrypting the kfs file would suffice, but for the hassle of
>> encrypting/decrypting each session.

> after creating a kfs(4) file, mounting it in $home/lib/profile  
> works for me.

>                    mount -c {disk/kfs -n secretfs /host/kfs/file}
> /n/encrypted-fs
>                    (pipefs -c -r 'crypt -d -k keyfile'
>                        -w 'crypt -k keyfile'
>                        /n/encrypted-fs /n/decrypted-fs)

> at the end of the profile, the file systems may need to be
> unmounted / synced (disk/kfscmd -n secretfs sync).

> arvindh

> I carry a USB stick with acme-sac on it, and use it as "work  
> anywhere" portable environment; hosted means I get to work on PCs,  
> Macs, whatever I keep emu around of.  Sweet.

> I now need to keep much of the drive contents encrypted.  It would be  
> very useful if I could keep an entire file system tree in a hosted  
> file.  Is there such a file server kicking around?  I'm happy to use  
> cp within Inferno to manage host/stick file transfers.

>  I keep getting the impression I should be able to do something  
> equivalent in 10 lines of shell script, but I'm insufficiently  
> Inferno-savvy to figure it out.