Programming

17398 readers

106 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Follow the programming.dev instance rules
Keep content related to programming in some way
If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev

founded 1 year ago

MODERATORS

snowe@programming.dev

Ategon@programming.dev

MaungaHikoi@lemmy.nz

Simple and de-facto way to encrypt files and directories in Linux (sopuli.xyz)

submitted 2 months ago* (last edited 2 months ago) by sapporo@sopuli.xyz to c/programming@programming.dev

13 comments fedilink hide all child comments

Namely, de-facto, or one of, in Linux. Mature. No GUI. Open-source and free.

What is it? GPG or anything else?

For a separate file(s), or directory(ies), and not for the entire disk or partition.

you are viewing a single comment's thread
view the rest of the comments

[–] Max_P@lemmy.max-p.me 23 points 2 months ago (2 children)

If you use ext4 or other filesystem that supports fscrypt, you can use fscrypt to encrypt specific directories.

There's also gocryptfs for a fuse-based userspace implementation.

ZFS has built-in encryption: https://klarasystems.com/articles/openzfs-native-encryption/

[–] sapporo@sopuli.xyz 2 points 2 months ago (1 children)

I don't want to encypt them in-place because I'll be uploading them onto a server, copying them on an external drive.

[–] azthec@feddit.nl 3 points 2 months ago* (last edited 2 months ago)

I've been using gocryptfs now for a few years and it works fine as you describe.

You initiate the encrypted folder, set up automatic backups for it. Then whenever you want to access it you mount it into another folder.

There is a distinction here between the permanently encrypted folder that you can upload backup whatever, and your temporary mount, unencrypted folder.

If you're alright with the rare conflicts to fix yourself something like syncthing works well for this setup even across computers.

[–] arran4@aussie.zone 2 points 2 months ago

This.

Thanks to Meta BTRFS is apparently got/getting it to a certain extent too: https://youtu.be/6YIc2fVLVPU?si=ngiHWS0fw2zIHf2M