26
Simple and de-facto way to encrypt files and directories in Linux (sopuli.xyz)
submitted 3 weeks ago* (last edited 3 weeks ago) by sapporo@sopuli.xyz to c/programming@programming.dev
13 comments fedilink hide all child comments

Namely, de-facto, or one of, in Linux. Mature. No GUI. Open-source and free.

What is it? GPG or anything else?

For a separate file(s), or directory(ies), and not for the entire disk or partition.

top 13 comments
sorted by: hot top controversial new old
[-] Max_P@lemmy.max-p.me 21 points 3 weeks ago

If you use ext4 or other filesystem that supports fscrypt, you can use fscrypt to encrypt specific directories.

There's also gocryptfs for a fuse-based userspace implementation.

ZFS has built-in encryption: https://klarasystems.com/articles/openzfs-native-encryption/

[-] sapporo@sopuli.xyz 2 points 3 weeks ago

I don't want to encypt them in-place because I'll be uploading them onto a server, copying them on an external drive.

[-] azthec@feddit.nl 2 points 3 weeks ago* (last edited 3 weeks ago)

I've been using gocryptfs now for a few years and it works fine as you describe.

You initiate the encrypted folder, set up automatic backups for it. Then whenever you want to access it you mount it into another folder.

There is a distinction here between the permanently encrypted folder that you can upload backup whatever, and your temporary mount, unencrypted folder.

If you're alright with the rare conflicts to fix yourself something like syncthing works well for this setup even across computers.

[-] arran4@aussie.zone 2 points 3 weeks ago

This.

Thanks to Meta BTRFS is apparently got/getting it to a certain extent too: https://youtu.be/6YIc2fVLVPU?si=ngiHWS0fw2zIHf2M

[-] mox@lemmy.sdf.org 12 points 3 weeks ago* (last edited 3 weeks ago)

If you want per-directory encryption, there are several options. This front-end project lists a bunch of them in its Supported Backends section.

(Full disk encryption does have a single conventional answer: LUKS. Many distros offer to set this up at install time.)

You're posting in a programming community, though, not a linux help community. Are you looking for a library for use in software you're writing?

[-] sapporo@sopuli.xyz -1 points 3 weeks ago

"I don’t want to encypt them in-place because I’ll be uploading them onto a server, copying them on an external drive."

[-] umami_wasbi@lemmy.ml 5 points 3 weeks ago

Describe your use case.

[-] sapporo@sopuli.xyz 1 points 2 weeks ago* (last edited 2 weeks ago)
  1. backups, non-incremental ones
  2. prevent others from viewing information that may be sensitive
  3. encrypted files and directories will then be copied over to external drives and third-party servers
[-] refalo@programming.dev 3 points 3 weeks ago

https://github.com/HACKERALERT/Picocrypt

[-] anzo@programming.dev 1 points 2 weeks ago

Perhaps https://rclone.org/crypt/

this post was submitted on 18 Aug 2024
26 points (93.3% liked)

Programming

16971 readers
243 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev

founded 1 year ago
MODERATORS
snowe@programming.dev
Ategon@programming.dev
MaungaHikoi@lemmy.nz