Page MenuHomeSolus

Closed, ResolvedPublic


I would really appreciate to have this package available in Solus:


Event Timeline

seb created this task.Apr 7 2017, 12:16 AM

Maybe it would even be possible to add an option in Budgie to encrypt the home directory of newly created users ?


Wouldn't it be better to have a look at something like ext4 native encryption?

It doesn't make sense to provide it any more, honestly. So we provide full disk encryption right now, and Canonical are invested in ext4
per file encryption as @kyrios123 mentioned. Given their guys are the ecryptfs guys (50%) - i'd honestly say ecryptfs has reached the
end of a useful life.

DataDrake renamed this task from Package Request: ecryptfs-utils to ecryptfs-utils.Apr 10 2017, 3:46 AM
DataDrake added a project: Package Requests.
  • I didn't know about ext4 native encryption, I'll take a look...
  • I'm wondering if there is a use-case were the user has to use a file system that is not ext4, but I haven't found any yet
  • Going with full disk encryption implies that the device can't be shared, or is shared by people who trust the guys with sudo privilege. Using ecrypfs allows to only encrypt the home directory, but full disk encryption protects against malicious corruption of binary files.

Personally I would be ok with full disk encryption.

Just in case you think that you can have multiple users not trusting each others and willing to use the same device, would it make sense to:

  1. during install, create LVM volume "root" with like 20G encrypted ext4 for binaries
  2. create LVM volume "swap", at most 1G or 2G, encrypted with random key on boot
  3. create LVM volumes "home-USER" with user encrypted ext4 partition, for every USER
  4. somehow the passphrase for the "root" partition would be any of the USER passphrases, so that only one passphrase is required at boot
  • I've been using the full disk encryption with Solus for almost 6 months now, and I'm quite happy with it.
  • Feel free to close this issue if you wish as I don't feel the need for ecryptfs anymore
JoshStrobl closed this task as Resolved.Nov 18 2017, 11:27 PM
JoshStrobl claimed this task.
palto42 added a subscriber: palto42.Dec 8 2019, 3:06 PM