Re: LVM, crypto, and backup

14 msg	Persistent revdep-rebuild issues: sun-jdk-1.4.2.16
1 msg	Which CFLAGS for Phenom?
6 msg	x looses ctrl, alt and shift keys
4 msg	Is there a way to get rid of the annoying speec...
33 msg	FS for laptop
3 msg	Qemu tun/tap privledge problem: HOWTO is wrong?
4 msg	portage update problem
10 msg	Booting up without X
7 msg	{OT} Safe to post my MAC address?
1 msg	Postgresql native replication problem
11 msg	How cam I get system to recognize MagicSysReq w...
7 msg	brlcad users here?
1 msg	emerge failed
9 msg	Got myself in a bind unmerging portage
10 msg	Dual USB HDD enclosure shows only a single disk...
5 msg	growisofs: 'media is not recognized as recordab...

LVM, crypto, and backup
\ felix (16 Dec 2007)
. \ Albert Hopkins (16 Dec 2007)
. . \ Jerry McBride (16 Dec 2007)
. . \ Neil Bothwick (16 Dec 2007)
. . . \ felix (17 Dec 2007)
. . . . \ Neil Bothwick (17 Dec 2007)
. . \ felix (16 Dec 2007)

3 msg	scan for network devices by IP and time?
6 msg	trouble with vsftpd
3 msg	dd questions

Subject:	Re: LVM, crypto, and backup
Group:	Gentoo-user
From:	Neil Bothwick
Date:	17 Dec 2007

On Sun, 16 Dec 2007 16:34:42 -0800, felix wrote:

> > Alternatively, you could do the same with the in-kernel ecryptfs.
> > These two solutions work in much the same way, allowing you to mount
> > individual directories with their own passwords, so you could have a
> > single /home with each user's directory having its own password. You
> > back up the encrypted data, so no passwords are needed for this.
>
> ecryptfs-utils apaprently is for ~x86 only. Any idea of when it will
> be ready for ~amd64?

It worked on amd64 when I tried it. You just need to add the utils package
to /etc/portage/package.keywords.

> I do have encfs emrrged on all machines, so I can start there with
> experimentation; it does encrypt file names, but I'd rather have a
> solid encrypted block than bits and pieces. I suppose that might not
> matter a whole lot.

ISTR that ecryptfs doesn't encrypt filenames, but it's been a while since
I used it. In that respect it was inferior to encfs (unless this has
changed) but it was faster.

--
Neil Bothwick

"But, I DO know everything." - Q.