ECryptfs - Revision history

Nobodyinperson: Add ecryptfs deprecation notice

2026-01-16T12:27:32Z

Add ecryptfs deprecation notice

← Older revision		Revision as of 12:27, 16 January 2026
Line 1:		Line 1:
	~~[http~~://~~ecryptfs~~.~~org~~/ ~~eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs<~~/~~code> add the following to <code>environment.systemPackages<~~/~~code>:~~		{{Note\|ecrpytfs was removed from nixpkgs and won't be available from NixOS 26.05 onwards: https://github.com/NixOS/nixpkgs/pull/479934}}

	<syntaxhighlight lang="nix">{ pkgs, ... }: {		[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:<syntaxhighlight lang="nix">{ pkgs, ... }: {
	environment.systemPackages = with pkgs; [		environment.systemPackages = with pkgs; [
	ecryptfs		ecryptfs

imported>Nobodyinperson: Remove hint on ecryptfs-helper (pulls in insecure Python2 and is not needed for home directory migration) and update home migration instructions

2023-07-31T16:12:21Z

Remove hint on ecryptfs-helper (pulls in insecure Python2 and is not needed for home directory migration) and update home migration instructions

← Older revision		Revision as of 16:12, 31 July 2023
Line 4:		Line 4:
	environment.systemPackages = with pkgs; [		environment.systemPackages = with pkgs; [
	ecryptfs		ecryptfs
	~~ecryptfs-helper~~
	];		];
	}</syntaxhighlight>		}</syntaxhighlight>
	~~<code>ecryptfs-helper</code> contains utilities to facilitate e.g. encrypting your home folder, mounting it as user, and data recovery.~~

	<code>man ecryptfs-~~setup~~-~~private~~</code> describes how to encrypt your home folder.		<code>man ecryptfs-migrate-home</code> describes how to encrypt your home folder. The TL;DR is that you need to: log out, log in as root, <code>modprobe ecryptfs</code> if needed, kill all processes that still access the home folder you want to migrate (check with <code>lsof /home/YOURUSERNAME</code>), wait for it to finish, then run <code>ecryptfs-migrate-home -u YOURUSERNAME</code>, then log in as your migrated user before rebooting.

	To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:		To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:
Line 15:		Line 13:
	<syntaxhighlight lang="nix">{		<syntaxhighlight lang="nix">{
	security.pam.enableEcryptfs = true;		security.pam.enableEcryptfs = true;
			}</syntaxhighlight>

			Don't forget to also load the <code>ecryptfs</code> kernel module on boot as well in this case:

			<syntaxhighlight lang="nix">{
			boot.kernelModules = ["ecryptfs"];
	}</syntaxhighlight>		}</syntaxhighlight>

imported>Minion3665: Add pkgs to the ecryptfs systemPackages expression

2023-03-05T23:57:26Z

Add pkgs to the ecryptfs systemPackages expression

← Older revision		Revision as of 23:57, 5 March 2023
Line 1:		Line 1:
	[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:		[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:

	<syntaxhighlight lang="nix">{		<syntaxhighlight lang="nix">{ pkgs, ... }: {
	environment.systemPackages = [		environment.systemPackages = with pkgs; [
	ecryptfs		ecryptfs
	ecryptfs-helper		ecryptfs-helper

imported>Fadenb: Syntaxhighlight

2017-08-27T09:16:56Z

Syntaxhighlight

← Older revision		Revision as of 09:16, 27 August 2017
Line 1:		Line 1:
	[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:		[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:

	<~~pre class~~="nix">{		<syntaxhighlight lang="nix">{
	environment.systemPackages = [		environment.systemPackages = [
	ecryptfs		ecryptfs
	ecryptfs-helper		ecryptfs-helper
	];		];
	}</~~pre~~>		}</syntaxhighlight>
	<code>ecryptfs-helper</code> contains utilities to facilitate e.g. encrypting your home folder, mounting it as user, and data recovery.		<code>ecryptfs-helper</code> contains utilities to facilitate e.g. encrypting your home folder, mounting it as user, and data recovery.

Line 13:		Line 13:
	To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:		To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:

	<~~pre class~~="nix">{		<syntaxhighlight lang="nix">{
	security.pam.enableEcryptfs = true;		security.pam.enableEcryptfs = true;
	}</~~pre~~>		}</syntaxhighlight>

imported>Makefu: import from nixos-users

2017-08-21T18:13:53Z

import from nixos-users

New page

[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:

<pre class="nix">{
environment.systemPackages = [
ecryptfs
ecryptfs-helper
];
}</pre>
<code>ecryptfs-helper</code> contains utilities to facilitate e.g. encrypting your home folder, mounting it as user, and data recovery.

<code>man ecryptfs-setup-private</code> describes how to encrypt your home folder.

To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:

<pre class="nix">{
security.pam.enableEcryptfs = true;
}</pre>