digitalcourage.social

Stephan Lichtenauer | נח סתוAs I understand it, full disk encryption currently does not work with <a href="https://mastodon.africa/tags/PostmarketOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#PostmarketOS</a>, at least with v24.12. (pmbootstrap-installation with FDE does not boot on my PinephonePro...)As a Plan B I tried to set up <a href="https://mastodon.africa/tags/ecryptfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#ecryptfs</a> but the kernel module is missing.Does anybody have a good solution for encrypting at least home on <a href="https://fosstodon.org/@postmarketOS" class="u-url mention" rel="nofollow noopener" target="_blank">@postmarketOS</a>? I am looking into getting my <a href="https://mastodon.africa/tags/PinephonePro" class="mention hashtag" rel="nofollow noopener" target="_blank">#PinephonePro</a> in a state so that it can be used as a daily driver but encryption is mandatory then of course...

nicolaslors de la mise à jour vers ubuntu 24.04 lors que la personne se connecte son /home/utilisateur ne se déchiffre pas la personne se retrouve avec un environnement vide (document, bureau…) les dossiers ecryptfs dans le dossier home reste chiffréecrypt-utils a été installé il n'était plus la mais cela ne change pas le soucis des idées ?merciune capture jointe<a href="https://mastodon.mim-libre.fr/tags/ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#ubuntu</a> <a href="https://mastodon.mim-libre.fr/tags/chiffrement" class="mention hashtag" rel="nofollow noopener" target="_blank">#chiffrement</a> <a href="https://mastodon.mim-libre.fr/tags/ecryptfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#ecryptfs</a>

Jarkko SakkinenWondering if there would be a way to sort <a class="hashtag" href="https://social.kernel.org/tag/ecryptfs" rel="nofollow noopener" target="_blank">#ecryptfs</a> and <a class="hashtag" href="https://social.kernel.org/tag/ssh" rel="nofollow noopener" target="_blank">#ssh</a> <a href="https://stephenreescarter.net/encrypted-home-directories-ssh-key-authentication/" rel="nofollow noopener" target="_blank">conflict</a> with a PAM module for <a class="hashtag" href="https://social.kernel.org/tag/openssh" rel="nofollow noopener" target="_blank">#OpenSSH</a> that would sort of “plug out” the <a class="hashtag" href="https://social.kernel.org/tag/authentication" rel="nofollow noopener" target="_blank">#authentication</a> part. AFAIK this problem comes from “non-standard” authentication path of OpenSSH: it ignores PAM and does its own thing.

Yann Büchau :nixos:Damn, it took me less than five hours to reproduce my :manjaro: <a href="https://fosstodon.org/tags/Manjaro" class="mention hashtag" rel="nofollow noopener" target="_blank">#Manjaro</a> setup in :nixos: <a href="https://fosstodon.org/tags/NixOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NixOS</a> from zero 💪: - getting <a href="https://fosstodon.org/tags/GnuPG" class="mention hashtag" rel="nofollow noopener" target="_blank">#GnuPG</a> working - homedir encryption with <a href="https://fosstodon.org/tags/eCryptfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#eCryptfs</a> - all software I need - even managed to package 3 custom things not in nixpkgs (passrofi, my <a href="https://fosstodon.org/tags/OpenTimeStamps" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenTimeStamps</a> client fork, bemoji)Nix Packaging is indeed 𝘀𝗼 much easier than <a href="https://fosstodon.org/tags/ArchLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArchLinux</a>, <a href="https://fosstodon.org/tags/Debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#Debian</a> or <a href="https://fosstodon.org/tags/RPM" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPM</a> packaging!This is the result: <a href="https://gitlab.com/nobodyinperson/nixconfig" rel="nofollow noopener" target="_blank">https://gitlab.com/nobodyinperson/nixconfig</a>

Yann Büchau :nixos:Currently installing :nixos: <a href="https://fosstodon.org/tags/NixOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NixOS</a> on my work PC (tired of constant little :manjaro: <a href="https://fosstodon.org/tags/Manjaro" class="mention hashtag" rel="nofollow noopener" target="_blank">#Manjaro</a> breakages, I need a stable system with option for latest packages). It's *really* cool to change your OS via a configuration file!In the process I updated the wiki page for encrypting your home directory with <a href="https://fosstodon.org/tags/eCryptfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#eCryptfs</a>. This involves imperative steps, but I guess this can't be automated, really (except in the installer maybe...).Really cool that you can just edit the wiki!<a href="https://nixos.wiki/wiki/ECryptfs" rel="nofollow noopener" target="_blank">https://nixos.wiki/wiki/ECryptfs</a>

Krawall-OssiDon't try <a href="https://chaos.social/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a> <a href="https://chaos.social/tags/rootless" class="mention hashtag" rel="nofollow noopener" target="_blank">#rootless</a> and put your storage on <a href="https://chaos.social/tags/ecryptfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#ecryptfs</a> (default this is your home dir), thinks will went south! <a href="https://chaos.social/tags/yoloOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#yoloOps</a>

jomoAny recommendations for an encrypted filesystem on a network mount?- <a href="https://mstdn.io/tags/ecryptfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#ecryptfs</a> is not recommended on network mounts - <a href="https://mstdn.io/tags/encfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#encfs</a> has security issues - <a href="https://mstdn.io/tags/cryfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#cryfs</a> looks promising, but latency of the base fs gets multiplied by orders of magnitude, which makes it unusable :(Any experience with <a href="https://mstdn.io/tags/gocryptfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#gocryptfs</a> perhaps?

Recent searches

Search options

Administered by:

Server stats:

#ecryptfs