Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

how to encrypt/decrypt remote folder ?

13 views
Skip to first unread message

J. B

unread,
Nov 22, 2012, 4:00:03 AM11/22/12
to
Dear All,

I am interested to know about folder encryption technology available
in Linux for remote backup purpose.

Let me clarify. I do my daily backup through ssh+rsync to a remote server.
It is quite fast because of rsync. On the remote box all the backups are
stored inside a folder. How can I encrypt that folder ? In that case,
I have to first decrypt the folder before doing rsync and then again encrypt.
Can I use any fuse based technology to achieve this ?
encfs+fuse is good but propt for the password, any option to provide password
through file ?

Any clue/suggestion is very much welcome.

Thanks


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/20121122142...@shiva.selfip.org

Ralf Mardorf

unread,
Nov 22, 2012, 4:10:03 AM11/22/12
to

Ralf Mardorf

unread,
Nov 22, 2012, 4:30:02 AM11/22/12
to
"echo password | gpg --batch -q --passphrase-fd 0 --cipher-algo AES256 -c /tmp/file.tgz
echo password | gpg --batch -q -o /tmp/file.tgz --passphrase-fd 0 --decrypt /tmp/file.tgz.gpg"

http://www.linuxscrew.com/2007/08/16/encryption-files-with-gpg-without-user-intervention-batch/


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/1353575848.19877.106.camel@q

J. B

unread,
Nov 22, 2012, 4:30:02 AM11/22/12
to


On Thu, 22 Nov 2012 10:17:28 +0100
Ralf Mardorf <ralf.m...@alice-dsl.net> wrote:

> "echo password | gpg --batch -q --passphrase-fd 0 --cipher-algo AES256 -c /tmp/file.tgz
> echo password | gpg --batch -q -o /tmp/file.tgz --passphrase-fd 0 --decrypt /tmp/file.tgz.gpg"
>

Thanks, but it doesn't fit with my requirement.
I backup on a remote folder through ssh+rsync and need encryption
on that remote folder. encfs+fuse is good but it prevents me as I
have not found to provide the password through a key-file yet.


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/20121122145...@shiva.selfip.org

J. B

unread,
Nov 22, 2012, 4:30:02 AM11/22/12
to
On Thu, 22 Nov 2012 10:07:36 +0100
Ralf Mardorf <ralf.m...@alice-dsl.net> wrote:

> http://www.cyberciti.biz/tips/linux-how-to-encrypt-and-decrypt-files-with-a-password.html
>
>
but it can't encrypt folder


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/20121122145...@shiva.selfip.org

Ralf Mardorf

unread,
Nov 22, 2012, 4:50:01 AM11/22/12
to
Oops, send to "ebian...@lists.debian.org" first:
^^^^^

On Thu, 2012-11-22 at 10:38 +0100, Ralf Mardorf wrote:
> On Thu, 2012-11-22 at 14:51 +0530, J. B wrote:
> > On Thu, 22 Nov 2012 10:07:36 +0100
> > Ralf Mardorf <ralf.m...@alice-dsl.net> wrote:
> >
> > > http://www.cyberciti.biz/tips/linux-how-to-encrypt-and-decrypt-files-with-a-password.html
> > >
> > >
> > but it can't encrypt folder
>
> http://myridia.com/dev_posts/view/71
>
> I would prefer such an indirect way to other ways, such as e.g. Ubuntu
> enables to encrypt/decrypt home folders automatically, because this
> could cause issues, if you have to recover data on a broken drive.
>
> I don't know the way it's done for Ubuntu, perhaps I'm mistaken, you
> might google for "Ubuntu encrypted home".
>
> I didn't read this myself and I don't have knowledge about it:
>
> www.howtogeek.com/116297/how-to-recover-an-encrypted-home-directory-on-ubuntu/
>
> http://en.wikipedia.org/wiki/ECryptfs
>
> http://www.howtoforge.com/how-to-encrypt-directories-partitions-with-ecryptfs-on-debian-squeeze
>
> I had one Ubuntu install where this was used for home automatically and
> it did annoy me.



--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/1353577238.26424.10.camel@q

tv.d...@googlemail.com

unread,
Nov 22, 2012, 4:50:01 AM11/22/12
to
On 22/11/2012 09:56, J. B wrote:
> Dear All,
>
> I am interested to know about folder encryption technology available
> in Linux for remote backup purpose.
>
> Let me clarify. I do my daily backup through ssh+rsync to a remote server.
> It is quite fast because of rsync. On the remote box all the backups are
> stored inside a folder. How can I encrypt that folder ? In that case,
> I have to first decrypt the folder before doing rsync and then again encrypt.
> Can I use any fuse based technology to achieve this ?
> encfs+fuse is good but propt for the password, any option to provide password
> through file ?
>
> Any clue/suggestion is very much welcome.
>
> Thanks
>
>

Did you look into the "KEY MODULE OPTIONS" section in ecryptfs man ?
Seems like there are several options to provide a pass-file.


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/50ADF41D...@googlemail.com

J. B

unread,
Nov 22, 2012, 5:00:02 AM11/22/12
to
On Thu, 22 Nov 2012 10:45:01 +0100
"tv.d...@googlemail.com" <tv.d...@googlemail.com> wrote:

> On 22/11/2012 09:56, J. B wrote:
> > Dear All,
> >
> > I am interested to know about folder encryption technology available
> > in Linux for remote backup purpose.
> >
> > Let me clarify. I do my daily backup through ssh+rsync to a remote server.
> > It is quite fast because of rsync. On the remote box all the backups are
> > stored inside a folder. How can I encrypt that folder ? In that case,
> > I have to first decrypt the folder before doing rsync and then again encrypt.
> > Can I use any fuse based technology to achieve this ?
> > encfs+fuse is good but propt for the password, any option to provide password
> > through file ?
> >
> > Any clue/suggestion is very much welcome.
> >
> > Thanks
> >
> >
>
> Did you look into the "KEY MODULE OPTIONS" section in ecryptfs man ?
> Seems like there are several options to provide a pass-file.
>
>

solved :-)

--extpass="cat $KEYFILE"


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/20121122152...@shiva.selfip.org

Jon Dowland

unread,
Nov 22, 2012, 5:00:02 AM11/22/12
to
On Thu, Nov 22, 2012 at 10:52:44AM +0100, Ralf Mardorf wrote:
> If I type "encfs vs" into Google I get:

Honestly, doing a basic google search and splurging the results
into a mailing list post helps nobody. If you don't have personal
experience of solving the problem, don't post.


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/20121122095806.GB8047@debian

Ralf Mardorf

unread,
Nov 22, 2012, 5:00:02 AM11/22/12
to
On Thu, 2012-11-22 at 14:57 +0530, J. B wrote:
>
> On Thu, 22 Nov 2012 10:17:28 +0100
> Ralf Mardorf <ralf.m...@alice-dsl.net> wrote:
>
> > "echo password | gpg --batch -q --passphrase-fd 0 --cipher-algo AES256 -c /tmp/file.tgz
> > echo password | gpg --batch -q -o /tmp/file.tgz --passphrase-fd 0 --decrypt /tmp/file.tgz.gpg"
> >
>
> Thanks, but it doesn't fit with my requirement.
> I backup on a remote folder through ssh+rsync and need encryption
> on that remote folder. encfs+fuse is good but it prevents me as I
> have not found to provide the password through a key-file yet.

If I type "encfs vs" into Google I get:

encfs vs truecrypt
encfs vs luks

However, does this the trick:

-S, --stdinpass
Read password from standard input.
OR from the file descriptor number in ENCFS_PASSWORD_FD

?

http://www.ict.griffith.edu.au/anthony/info/crypto/encfs.hints




--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/1353577964.26424.14.camel@q

Kushal Kumaran

unread,
Nov 22, 2012, 5:00:02 AM11/22/12
to
"J. B" <baks...@gmail.com> writes:

> On Thu, 22 Nov 2012 10:17:28 +0100
> Ralf Mardorf <ralf.m...@alice-dsl.net> wrote:
>
>> "echo password | gpg --batch -q --passphrase-fd 0 --cipher-algo AES256 -c /tmp/file.tgz
>> echo password | gpg --batch -q -o /tmp/file.tgz --passphrase-fd 0 --decrypt /tmp/file.tgz.gpg"
>>
>
> Thanks, but it doesn't fit with my requirement.
> I backup on a remote folder through ssh+rsync and need encryption
> on that remote folder. encfs+fuse is good but it prevents me as I
> have not found to provide the password through a key-file yet.
>

The --extpass or --stdinpass options for encfs can do this.

For example,

cat password-file | encfs --stdinpass encrypted-dir clear-dir

--
regards,
kushal


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/874nkit...@nitrogen.i-did-not-set--mail-host-address--so-tickle-me

Ralf Mardorf

unread,
Nov 22, 2012, 5:10:01 AM11/22/12
to
On Thu, 2012-11-22 at 09:58 +0000, Jon Dowland wrote:
> On Thu, Nov 22, 2012 at 10:52:44AM +0100, Ralf Mardorf wrote:
> > If I type "encfs vs" into Google I get:
>
> Honestly, doing a basic google search and splurging the results
> into a mailing list post helps nobody. If you don't have personal
> experience of solving the problem, don't post.

But it leaded to --stdinpass, the same result somebody else posted. So
if I post it it's bad and if somebody else does post the same it's ok?

Wow, what a funny list.

Ok now I know making a little harmless joke is forbidden and
brainstorming too.

Anything else forbidden or unwanted that's not written in the policy for
this list?


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/1353578712.26424.19.camel@q

Ralf Mardorf

unread,
Nov 22, 2012, 5:30:01 AM11/22/12
to
On Thu, 2012-11-22 at 11:05 +0100, Ralf Mardorf wrote:
> On Thu, 2012-11-22 at 09:58 +0000, Jon Dowland wrote:
> > On Thu, Nov 22, 2012 at 10:52:44AM +0100, Ralf Mardorf wrote:
> > > If I type "encfs vs" into Google I get:
> >
> > Honestly, doing a basic google search and splurging the results
> > into a mailing list post helps nobody. If you don't have personal
> > experience of solving the problem, don't post.
>
> But it leaded to --stdinpass, the same result somebody else posted. So
> if I post it it's bad and if somebody else does post the same it's ok?
>
> Wow, what a funny list.
>
> Ok now I know making a little harmless joke is forbidden and
> brainstorming too.
>
> Anything else forbidden or unwanted that's not written in the policy for
> this list?

I nearly forgot, if I e.g. have knowledge, e.g. about systemd and the
polkit issue, I shouldn't write about it, if somebody else with outdated
knowledge thinks he knows it better. Same for audio.

This list becomes more and more grotesque.

There's more noise about top posting, HTLM posting, bad hidden email
headers, not to do brainstorming, not to answer if you have more
knowledge, not making a joke etc., than about Debian Linux.

I nearly forgot too,

a newbie shouldn't ask newbie questions, but read what a smart question
is.

Anything else?



--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/1353579701.26424.25.camel@q

Zenaan Harkness

unread,
Nov 22, 2012, 6:20:02 AM11/22/12
to
If enough people consider a problem such, it is easy to route around..
If one person consider another a problem, kill-file is a (partial?)
route around for them.

Perhaps debian-user_speak-yo...@lists.debian.org? :)
Shorter needed, so probably debian-user-uncensored@ldo

Would there be enough subscribers?
Would it dilute the assister pool?
Would _most_ assisters simply subscribe to both?
Would such a list be allowed within the policies etc of Debian? If
not, a non-Debian venue would be required, likely reducing the
visibility of such a list.
Would it be worth the experiment even though these questions can't be
answered definitively without running the experiment?

Regards
Zenaan

PS What is the difference between "Politically Correct", and "respect
for others"? Does an apology demonstrate respect? What about
non-acceptance of apology? Is it ok to be pro-$CONTROVERSIAL if $C..L
is [female|male|white|black|etc]?
Archive: http://lists.debian.org/CAOsGNSQA==_2rFQ+K=zEi9THe3RMA79LG8...@mail.gmail.com

Rob Owens

unread,
Nov 22, 2012, 8:20:01 AM11/22/12
to
On Thu, Nov 22, 2012 at 02:26:59PM +0530, J. B wrote:
> Dear All,
>
> I am interested to know about folder encryption technology available
> in Linux for remote backup purpose.
>
> Let me clarify. I do my daily backup through ssh+rsync to a remote server.
> It is quite fast because of rsync. On the remote box all the backups are
> stored inside a folder. How can I encrypt that folder ? In that case,
> I have to first decrypt the folder before doing rsync and then again encrypt.
> Can I use any fuse based technology to achieve this ?
> encfs+fuse is good but propt for the password, any option to provide password
> through file ?
>
Are the source files encrypted? If so, don't decrypt them and simply
rsync the encrypted files to the remote server.

-Rob


--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: http://lists.debian.org/20121122131...@aurora.owens.net
0 new messages