LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Auto-mounting an ecryptfs partition which is on a usb drive (https://www.linuxquestions.org/questions/linux-newbie-8/auto-mounting-an-ecryptfs-partition-which-is-on-a-usb-drive-811179/)

mike11 05-30-2010 10:38 PM

Auto-mounting an ecryptfs partition which is on a usb drive
 
I have an ecryptfs partition on a usb drive, system runs Debian squeeze.

What I'd like to have is that when I connect the drive it will be auto. mounted and I'll either have to enter the passphrase or it will already be in the keyring (even better).

It seems ecryptfs can auto-mount a directory but I want to auto-mount an entire encrypted partition. Is this possible?.

Also, can I have another encrypted directory, say ~/Private, at the same time or can ecryptfs handle only one at a time?.

Thanks,
Mike.

Simon Bridge 05-30-2010 11:21 PM

You do not mount directories. Directories are files.

eCryptfs has to work as a layer on top of another filesystem.
When you mount eCryptfs over a directory, it decrypts the files in it... allowing plain-text access.
overview of concepts including dicussions of the sorts of security issues that ecryptfs is supposed to solve.

You can get ecryptfs "partitions" to mount at boot easily enough:
https://help.ubuntu.com/9.04/serverg.../ecryptfs.html
... the approach is to mount the partition fs first, then mount ecryptfs over the top of that.

presumably you can do something similar for hotpluggable devices in the udev rules.

Cannot see any reason you cannot have more than one ecryptfs encrypted directory. Easy to check. Try it and see.

mike11 06-01-2010 06:53 AM

Thanks Simon.

I think I've got it working. Two partitions on the USB stick, encrypted and unecrypted.
The encrypted gets mounted auto. via fstab, first with UUID (for example mounting /dev/sdc1 to /media/usb1) and then another entry for ecryptfs. Default ecryptfs mount options in ~/.ecryptfsrc

Cheers.

Simon Bridge 06-01-2010 11:44 AM

Well done. Knew you'd do it.


All times are GMT -5. The time now is 03:25 PM.