Jump to content

ECryptfs: Difference between revisions

46 bytes added ,  27 August 2017
m
Syntaxhighlight
imported>Makefu
(import from nixos-users)
 
imported>Fadenb
m (Syntaxhighlight)
Line 1: Line 1:
[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:
[http://ecryptfs.org/ eCryptfs] is a cryptographic filesystem encrypting each file individually. To install <code>ecryptfs</code> add the following to <code>environment.systemPackages</code>:


<pre class="nix">{
<syntaxhighlight lang="nix">{
   environment.systemPackages = [
   environment.systemPackages = [
     ecryptfs
     ecryptfs
     ecryptfs-helper
     ecryptfs-helper
   ];
   ];
}</pre>
}</syntaxhighlight>
<code>ecryptfs-helper</code> contains utilities to facilitate e.g. encrypting your home folder, mounting it as user, and data recovery.
<code>ecryptfs-helper</code> contains utilities to facilitate e.g. encrypting your home folder, mounting it as user, and data recovery.


Line 13: Line 13:
To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:
To automatically mount your private folder on login with <code>PAM</code>, add this to your <code>config</code>:


<pre class="nix">{
<syntaxhighlight lang="nix">{
   security.pam.enableEcryptfs = true;
   security.pam.enableEcryptfs = true;
}</pre>
}</syntaxhighlight>
Anonymous user