Yet again things are happening in regards to the FUSE version of ZFS. That is something you very well might have missed if you, like me, had satisfied yourself with subscribing to the zfs-on-fuse.blogspot.com RSS feed.
Apparently zfs-fuse.net is where all the action takes place nowdays.
Yes I know that Btrfs most likely is the future of Linux filesystems. Yet I can’t completely shake my crush on ZFS.
Seems as if the project ZFS on FUSE is still alive.
I for sure know what I’ll be looking at today.
Inspired by the Ubuntu project Encrypted Private Directory I decided to set something similar up on my Eee PC. Being a regular FUSE user I based my solution on EncFs and pam-encfs.
First of all we create our folders. These commands should be run as your normal user. The password you give EncFs has to be the same as the one you use to login.
$ mkdir /home/U/.private /home/U/private
$ chmod 700 /home/U/.private /home/U/private
$ encfs /home/U/.private /home/U/private
…
$ fusermount -u /home/U/private
(By the way, I’m assuming that the user is part of the fuse group, or has proper permissions to /dev/fuse by some other means.)
With your folders in order it’s time to instruct PAM on how to automaticly mount your private folder at login time. My /etc/pam.d/common-auth and /etc/security/pam_encfs.conf looks like this.
auth sufficient pam_encfs.so
auth required pam_unix.so nullok_secure use_first_pass
U /home/U/.private /home/U/private –public nonempty
Using –public will ensure proper file ownership; no matter if encfs is mounted by root (gdm/X) or by your normal user. You might have to restart gdm, sshd, etc before your new PAM settings take effect.
By now the folder /home/U/private/ will be mounted at login time. Everything you put in there will be encrypted into /home/U/.private/.
I guess I shold mention that my Eee is a DebianEee. I have no idea how well this will work on the default Xandros Eee installation.
