3 ms·
Does anybody know if there is something to seamlessly encrypt a git repository in case I don't trust the git server provider (say a VPS)?
by gbrindisi 13y ago
Does anybody know if there is something to seamlessly encrypt a git repository in case I don't trust the git server provider (say a VPS)?
- georgebashi 13y agoThere's a solution with smudge/clean filters here: https://github.com/shadowhand/git-encrypt https://github.com/shadowhand/git-encrypt or a solution which acts as a git remote here: https://github.com/blake2-ppc/git-remote-gcrypt https://github.com/blake2-ppc/git-remote-gcrypt Alternatively, you could just encrypt the directory that you push to remotely (probably /home/git in this tutorial), which seems like a cleaner solution: https://help.ubuntu.com/13.04/serverguide/ecryptfs.html https://help.ubuntu.com/13.04/serverguide/ecryptfs.html
- AaronBBrown 13y agoLUKS/dm-crypt. Super easy to use. https://wiki.archlinux.org/index.php/Dm-crypt_with_LUKS https://wiki.archlinux.org/index.php/Dm-crypt_with_LUKS
- daemon13 13y agoThe walkthrough is rather overwhelming. Was it super easy to understand & set-up?
- AaronBBrown 13y agoYeah, the reality is it's about 3 additional commands to get going (over any other normal volume)...and a very short chef cookbook to automate it. # create a key file dd if=/dev/urandom of=/etc/mykeyfile.key bs=512 count=1 # create the luks container cryptsetup luksFormat /dev/sdf1 /etc/mykeyfile.key # open the luks container cryptsetup luksOpen /dev/sdf1 myluksvolume --key-file /etc/mykeyfile.key # format the volume mkfs.xfs /dev/mapper/myluksvolume # mount the disk mount /dev/mapper/myluksvolume /mnt/mymountpoint