Re: [gentoo-user] Encrypted drive setup at login and locking on logout.

[William Kenworthy <billk@iinet.net.au>]

Hi Dale, I looked at Veracrypt and ran into the fact that it on windows
Veracrypt MUST be installed by an administrator which is a blocker for
using USB keys on computers I don't control (such as transporting files
securely between locations - i.e., where there is potential to lose the
usb key):

see
https://www.veracrypt.fr/en/Using%20VeraCrypt%20Without%20Administrator%20Privileges.html

BillK


On 6/7/20 12:49 pm, Dale wrote:
> Dale wrote:
>> Howdy,
>>
>> As some know, I been playing with encryption recently.  I got doing
>> it on the command line and using veracrypt for USB sticks down.  I
>> use Veracrypt for those that I want to work on windoze as well, I
>> hope anyway.  Now I'm moving on to something else. 
>>
>> Now that I have a spare drive, I want to encrypt it and have a mount
>> point for it, /home/dale/documents for example.  What I'd like to do,
>> when I login in, it asks me for the encryption password and then
>> mounts it.  When I log out, it reverses.  I'm not doing all of /home
>> because I want to separate some info.  I may do it later. 
>>
>> I did some googling but maybe my search terms aren't good enough.  I
>> mostly find for /home as a whole but not separate parts of it.  When
>> I add in Gentoo does some things differently, it may be that this
>> isn't even doable.  Also, my user password and password for the
>> encryption will be different.  I'm using KDE but anything that will
>> work as part of KDE or along with KDE will be fine with me. 
>>
>> Does anyone have a howto they can link to?  Is this even doable? 
>>
>> Thanks.
>>
>> Dale
>>
>> :-)  :-) 
>
>
> Digging around I found these. 
>
> [ebuild  N    ~] sys-fs/ecryptfs-utils-111_p20170609::gentoo  USE="gtk
> nls pam -doc -gpg -openssl -pkcs11 -python -suid -tpm"
> PYTHON_SINGLE_TARGET="python2_7" 1,401 KiB
> [ebuild  N     ] sys-fs/cryptmount-5.3.2::gentoo  USE="gcrypt
> largefile luks nls openssl udev -argv0switch -cswap -fsck -mount
> (-selinux) -systemd" 533 KiB
>
> Looking at the info I've found tho, I don't think it will do what I'm
> looking for.  Has anyone used either of these in the past?  If so,
> does one of these do what I'm looking for?
>
> I'm surprised someone hasn't come up with this before.  Surely I'm not
> the only one who would like a automatic way to decrypt, mount, umount
> and encrypt with some sort of automated process.  Sort of like a USB
> stick only with encryption. 
>
> Dale
>
> :-)  :-)