ECryptfs: Difference between revisions

imported>Makefu
import from nixos-users
 
imported>Fadenb
m Syntaxhighlight
Line 1: Line 1:
[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:
[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:


<pre class="nix">{
<syntaxhighlight lang="nix">{
   environment.systemPackages = [
   environment.systemPackages = [
     ecryptfs
     ecryptfs
     ecryptfs-helper
     ecryptfs-helper
   ];
   ];
}</pre>
}</syntaxhighlight>
<code>ecryptfs-helper</code> contains utilities to facilitate e.g. encrypting your home folder, mounting it as user, and data recovery.
<code>ecryptfs-helper</code> contains utilities to facilitate e.g. encrypting your home folder, mounting it as user, and data recovery.


Line 13: Line 13:
To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:
To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:


<pre class="nix">{
<syntaxhighlight lang="nix">{
   security.pam.enableEcryptfs = true;
   security.pam.enableEcryptfs = true;
}</pre>
}</syntaxhighlight>