https://paapereira.xyz/tags/ecryptfs/Recent content in Tags/Ecryptfs on paapereira.xyzHugoen-US<a href='https://creativecommons.org/licenses/by-nc/4.0/' target='_blank' rel='noopener'>©</a> 2008-2026 / <a href='https://gitlab.com/paapereira/paapereira.gitlab.io' target='_blank' rel='noopener'>source code</a>Sun, 27 Nov 2016 21:12:33 +0000https://paapereira.xyz/posts/2016/11/rsyncnet-ecryptfs-backups/Sun, 27 Nov 2016 21:12:33 +0000https://paapereira.xyz/posts/2016/11/rsyncnet-ecryptfs-backups/<p>I use <a href="https://rsync.net">rsync.net</a> for my cloud/offline backups.</p> <p>Here’s how to do encrypted backups using <code>ecryptfs</code>.</p> <ul> <li>Install <code>ecryptfs-utils</code></li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">1</span><span>sudo pacman -S ecryptfs-utils </span></span></code></pre></div><ul> <li>Generate a passphrase</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">1</span><span>ecryptfs-setup-private --nopwcheck --noautomount </span></span></code></pre></div><ul> <li>Mount rsync.net using <code>sshfs</code> and create a backup folder</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">1</span><span>mkdir -p /home/your_user/rsync.net/ </span></span><span style="display:flex;"><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">2</span><span>sshfs 99999@server.rsync.net: /home/your_user/rsync.net/ </span></span><span style="display:flex;"><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">3</span><span>mkdir -p /home/your_user/rsync.net/backups/ </span></span></code></pre></div><ul> <li>Mount the backups folder as an encrypted filesystem and copy some files</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">1</span><span>sudo mount -t ecryptfs ~/.Private /home/your_user/rsync.net/backups -o key<span style="color:#f92672">=</span>passphrase,ecryptfs_cipher<span style="color:#f92672">=</span>aes,ecryptfs_key_bytes<span style="color:#f92672">=</span>24,ecryptfs_passthrough<span style="color:#f92672">=</span>n,ecryptfs_enable_filename_crypto<span style="color:#f92672">=</span>n </span></span></code></pre></div><ul> <li>Unmount rsync.net and the encrypted filesystem mount</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">1</span><span>sudo umount ~/Private </span></span><span style="display:flex;"><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">2</span><span>fusermount -u /home/your_user/rsync.net/ </span></span></code></pre></div>