3 ms·

I remember a while ago, Ubuntu used encryptfs for home directories, but it was removed. Weird, because I thought it was a great idea

G3rn0ti 6y ago
I’ve been using fscrypt to encrypt my home directory for over a year now and it seems to work fine: https://wiki.archlinux.org/index.php/Fscrypt https://wiki.archlinux.org/index.php/Fscrypt
- alfiedotwtf 6y ago
  Thanks for that... I’ll check it out
  - G3rn0ti 6y ago
    BTW: The only issue I‘ve come across was that the pulseaudio user daemon couldn’t initialize during login (because it started before fscrypt unlocked home dir). There is an easy workaround for Ubuntu 20: https://github.com/google/fscrypt/issues/270 https://github.com/google/fscrypt/issues/270
- MikeHalcrow 6y ago
  Hi! Author of fs-crypt dropping in from the interwebs. I also created eCryptfs, which was Ubuntu's original home directory encryption technology, with lots of additional distro integration work by Dustin Kirkland. Unfortunately I had to make some compromises when going with the stackable model, and that caused some problems. I took the lessons I learned from that first attempt and created fs-crypt as a sort of atonement. I think I got a lot more right on my second attempt at file-base encryption in Linux. At least, it's good enough to be the technology that now encrypts Android storage. The problem with Linux supporting stuff forever is that some things really need to be retired once a better solution has come along. However so long as there are eCryptfs users out there, I don't think it's going to ever go away at this point.
  - sigmaml 6y ago
    Thanks for all the great work on both 'ecryptfs' and 'fs-crypt'!
michaelt 6y ago
Around 16.04 if you enabled encryption during installation, you got ecryptfs home directories - later (18.04?) they changed to encrypting the entire disk. In some ways, encrypting the entire disk is more secure.
e12e 6y ago
On Ubuntu, you probably want zfs native encryption - either full disk, or per user: https://talldanestale.dk/2020/04/06/zfs-and-homedir-encryption/ https://talldanestale.dk/2020/04/06/zfs-and-homedir-encrypti... Hope general zfs support will improve in the installer, though. As well as automation and tooling around automatic snapshots.

G3rn0ti 6y ago

I’ve been using fscrypt to encrypt my home directory for over a year now and it seems to work fine: https://wiki.archlinux.org/index.php/Fscrypt https://wiki.archlinux.org/index.php/Fscrypt

alfiedotwtf 6y ago
Thanks for that... I’ll check it out
- G3rn0ti 6y ago
  BTW: The only issue I‘ve come across was that the pulseaudio user daemon couldn’t initialize during login (because it started before fscrypt unlocked home dir). There is an easy workaround for Ubuntu 20: https://github.com/google/fscrypt/issues/270 https://github.com/google/fscrypt/issues/270
MikeHalcrow 6y ago
Hi! Author of fs-crypt dropping in from the interwebs. I also created eCryptfs, which was Ubuntu's original home directory encryption technology, with lots of additional distro integration work by Dustin Kirkland. Unfortunately I had to make some compromises when going with the stackable model, and that caused some problems. I took the lessons I learned from that first attempt and created fs-crypt as a sort of atonement. I think I got a lot more right on my second attempt at file-base encryption in Linux. At least, it's good enough to be the technology that now encrypts Android storage. The problem with Linux supporting stuff forever is that some things really need to be retired once a better solution has come along. However so long as there are eCryptfs users out there, I don't think it's going to ever go away at this point.
- sigmaml 6y ago
  Thanks for all the great work on both 'ecryptfs' and 'fs-crypt'!

michaelt 6y ago

Around 16.04 if you enabled encryption during installation, you got ecryptfs home directories - later (18.04?) they changed to encrypting the entire disk. In some ways, encrypting the entire disk is more secure.

e12e 6y ago

On Ubuntu, you probably want zfs native encryption - either full disk, or per user: https://talldanestale.dk/2020/04/06/zfs-and-homedir-encryption/ https://talldanestale.dk/2020/04/06/zfs-and-homedir-encrypti... Hope general zfs support will improve in the installer, though. As well as automation and tooling around automatic snapshots.