I am looking for a command similar to ionice and trickle and pv -L and tc - but which puts limits on IO to files. ionice looks at block devices on the local machine. I want this to work for file I/O in general. If it does not work for encfs mounted on NFS it is useless to me. trickle shapes the network I/O - not the file system I/O. So if my program accesses a file on encfs, it will have no clue whether this is mounted on top of NFS or a local dir. tc is similar to trickle: It shapes network I/O - not file system I/O. pv -L only works on pipes. I need it to work on all files that the program opens. Think Firefox: It opens files for read and write in multiple threads. I want this: thecommand --read 5M --write 1M firefox to limit firefox to read files at 5 MB/s and write at 1 MB/s. firefox is just an example: I want it to work for any program that opens different files for both reading and writing. I want the limitation to work no matter if firefox is accessing a local file or a file on NFS/tmpfs/encfs/SSHFS/RandomFS. It is OK if it only works on dynamically linked programs (i.e. it is OK if it does some LD_PRELOAD magic). Does such a beast exist?

I recently used the software encfs in my ubuntu 18.04 laptop. I created a new stash using the same software in my desktop. I would like to list the steps.... * I created a new stash (using green plus) in my desktop with same name (Desktop) and a password. * The newly mounted folder (looked like a drive) hadn't any folder or files. * Later I removed the stash using the option (red minus) in encfs. * I thought it would only remove the newly created empty folder. * Accidentally, I lost my desktop folder (with entire files in it). * Then home folder acts like the desktop. * I searched in home for lost files, but found none. * It didn't affect any files in home folder other than desktop. Kindly please help me to retrieve my lost files. How can I retrieve them? Please help. Thank you.

I'm a user on a public Linux server. We have a public shared folder which all users can use. I want to create a folder that I only want a few users to access. This can be done in the following ways: 1) Create a group of users you want to provide access and then change the folder permission to that group. I can't do this because I don't have root privileges. Even if I ask the admin to create a group for me, I'll have to occasionally add/remove users from the group. This is not feasible 2) Encrypt and zip the folder using "zip re" command. This will zip the folder and every time a user needs to access the contents, he needs to unzip. This becomes infeasible when my folder grow up to be large. 3) creating and mounting an encrypted directory with encfs. Here you have to maintain two folders - an encrypted folder and a mount point folder. Every time you need to access a file/folder, you need to mount it to the mount point. This again requires a lot of copying a moving and is inefficient. What I'm looking for is a simple process: enter the password and you can view the contents of the folder; enter the wrong password and access is denied. All I have to do is to share this password with other users. Is there anything in Linux that does this?

I use a Mac with an encrypted hard drive. I've a lot of videos in a directory "videos", which I backed up using encfs to Google Drive. Since I don't want to encrypt the "videos" directory on my hard drive itself again, I decided to use reverse encryption. This uploaded the encrypted files to Google Drive. encfs --reverse videos/ ~/Google\ Drive/drive/ If I'd sync the contents from Google Drive now to the hard drive of a second computer, would I be able to decrypt it, since the .encfs6.xml file was created in the "videos" directory and this file doesn't get synced to Google Drive.

I followed this tutorial on how to encrypt my home folder. I imported the stash into the gnome-gui tool and without thought clicked on the "mount" checkbox. As expected, encfs now started to encrypt the folder and will unmount when it's finished. I didn't fully realize what I was doing (Yes, there were a few large linux ISOs in there and unmounting home from a running system is stupid) and now the encryption has been running for almost 24 hours and it's still not even halfway done. What's weird is that encfs is barely using any CPU. Now I'm not sure what to do since I'm afraid that I will lose my data if I just kill the process or shutdown my machine. EDIT: Here are the steps I took. 1. With this tool I added a new stash with the options shown in the screenshots. Please note that I chose different paths (aka my home directory as seen in the last screenshot) 2. Clicked on the "mounted" checkbox EDIT2: the /home/.janine directory did not exist before and the encfs-manager was called as a normal user without sudo

I using EncFS, I did the following: 1. I encrypted a folder using encfs ~/.folder ~/folder 2. Afterwards, I changed the password with encfsctl passwd ~/.folder Now, I cannot access my files anymore, because the .encfs6.xml file got encrypted itself. Can I do anything about this? I still have the files, know the password and also saved the encrypted .encfs6.xml file. Any chance I can recover the files/decrypt the .encfs6.xml file?

I use Cryptkeeper to encrypt an folder on Ext4. By repairing the partition by gparted I got the lost+found folder. How do I decrypt those found files? They should be plain (though encrypted) text files.

After I read a paper about Encfs, I figured out there is a Encryption layer in Encfs. So I tried to find exact encryption function. but I couldn't find that because there are many functions. Does anyone have any idea or advice?

Is it possible that a chown or any other rights access (delete, write, read, etc) makes the encryption bugs? Yesterday, I have encrypted a folder with encfs on Linux Mint. Today i tried to open it with the password and it tolds me that the password wasn't correct... I told myself that i maybe wrote the password in a bad way! So i tested with capital letters, i tested with characters and numbers around the ones i used in my password, with no positive results... So, could it be a bug coming from somewhere or the was me having typed my password incorrectly (crazy, because, you have to type it two times...). If it is the second, do somebody knows how to crack the password or take it back? I can give my .encfs6.xml file to this person and give my password, in order for the person to see that i am in the good owner of this file! I was in a hurry, moving personal files to this folder on another hdd... hmmmmm, how could this be? this almost extraordinary! I am for a quadruple check password for this kind of manipulation or for everypasswords... I thank you very much.

I'd like to recover files in encrypted directory by encfs. I put these recovered files in the encrypted directory, but there is no files shown in the mounted and decrypted directory. Is there any way to see the decrypted file? The recovered files is not same path.

When an encrypted directory is mounted using EncFS as a regular user, you cannot execute a script in it with sudo (as root): $ sudo /run/media/yeti/usbdrive/encfs/test.sh sudo: /run/media/yeti/usbdrive/encfs/test.sh: command not found This is a security feature, but how can I still grant root permissions to this mounted directory (without mounting as root)? # More details I am using Arch Linux , and I have an encrypted directory using EncFS : sudo pacman -S encfs usbpath="/run/media/yeti/usbdrive" encfs "$usbpath/.encfs" "$usbpath/encfs" echo 'echo hello world' > "$usbpath/encfs/test.sh" sudo chmod +x "$usbpath/encfs/test.sh" Then this command works just like expected: $ /run/media/yeti/usbdrive/encfs/test.sh hello world But when I use sudo, I get an error: $ sudo /run/media/yeti/usbdrive/encfs/test.sh sudo: /run/media/yeti/usbdrive/encfs/test.sh: command not found Then I realized that this is a security feature of EncFS, which is actually quite good. When I do a directory listing as root (after su), I find the following: $ ls /run/media/yeti/usbdrive/encfs/ ls: cannot access '/run/media/yeti/usbdrive/encfs': Permission denied [...] d?????????? ? ? ? ? ? encfs drwxrwxrwx 1 yeti yeti 0 Sep 30 00:31 .encfs [...] But in my case, I am on a system where I am in fact root, and where sudo could be passwordless. Therefore, this security feature is only getting in the way. However, I do not want to mount the encrypted directory as root either (because then I'd need to run my filemanager and other applications as root too). What I did as a workaround to this problem is to copy the file outside of the encrypted directory (cp "$usbpath/encfs/test.sh" /tmp/test.sh), and then execute it as root (sudo /tmp/test.sh). Next to documenting this question for other people who may experience the same issue, the question I still have left is: Is there a better way to do this?

How and where does encfs store the password for an encrypted directory? I understand that encfs uses encfs6.xml to store the actual decryption key encoded using the password. I also understand that encfs6.xml is the only file required for decryption. I therefore assumed that the password hash should also be stored in the same file. However, I only see encodedKeyData and saltData in the file. What I want to know is how does encfs make sure I have entered the correct password simply with the help of the information present in encfs6.xml

Is there any faster way of checking the password of an encfs folder than echo | encfs -S /root/.folder /root/folder

I use encfs to encrypt some data in my dropbox directory. Everything works well. For simplicity let's assume that i have created the directories ~/encrypted and ~/decrypted. Every time I log in into my linux account ~/decrypted will automatically be mounted. Is there a way to avoid this and force the user (me in my case) to enter the password before ~/decrypted can be mounted? I use Linux Mint 17.3 with Cinnamon. I imagined that my encrypted folder is unmounted all the time except when want to access it. Then a little dialog could appear where I have to enter my password.

I have a udev rule that mounts my encfs encrypted backup disk:

`
ACTION=="add",KERNEL=="sd*1",ENV{ID_SERIAL}=="Seagate_GoFlex_Desk_NA0MEYKM-0:0"
,SYMLINK="ext_hd",RUN+="/root/bin/mount.encfs 'Large Backup Drive' /dev/%k"

` The contents of mount.encfs are: #!/bin/bash set -e export XAUTHORITY=/home/me/.Xauthority export DISPLAY=:0.0 NAME=$1 DEV=$2 ENCRYPTED_MOUNT_POINT=/media/ext_hd.encfs UNENCRYPTED_MOUNT_POINT=/media/ext_hd [ ! -e $ENCRYPTED_MOUNT_POINT ] && mkdir $ENCRYPTED_MOUNT_POINT [ ! -e $UNENCRYPTED_MOUNT_POINT ] && mkdir $UNENCRYPTED_MOUNT_POINT mount -t ext4 $DEV $ENCRYPTED_MOUNT_POINT encfs -o allow_other --extpass="ssh-askpass $NAME" \ $ENCRYPTED_MOUNT_POINT $UNENCRYPTED_MOUNT_POINT When I insert the disk, I get the prompt, but when I try to ls /media/ext_hd, I get the classic FUSE: ls: cannot access '/media/ext_hd': Transport endpoint is not connected If I manually umount then manually run my mount.encfs, it works. The output from mount is the same for the two cases: encfs on /media/ext_hd type fuse.encfs (rw,nosuid,nodev,relatime,user_id=0,group_id=0,default_permissions,allow_other) I'm at a loss as to what could cause this, whose fault it is, or even what the next debug step should be. Any ideas?

I have build myself a nice setup: I have encrypted encfs folders that are mountable with autofs, i.e. when I enter the folders they will be automatically decrypted. I have the encfs password added to my keyring and wrote a custom script that extracts the password (/usr/local/sbin/load-encfs see below). The only drawback is that I have to enter my login password to unlock the keyring on the first visit of any of the automounted folders. Every visit of another folder (or the same after the timeout expired) does not prompt me for my pw. **Question:** Is there any possibility that also the first password prompt can be somehow automated? --- /etc/autofs/auto.master: I just added this line: /- /etc/autofs/auto.encfs --- /etc/autofs/auto.encfs: /home/user/Privat -fstype=fuse :load-encfs\#user\:/home/user/encfs-keys/private.xml\:/home/user/Dropbox/.private /home/user/BTU -fstype=fuse :load-encfs\#user\:/home/user/encfs-keys/btu.xml\:/home/user/Dropbox/.btu /home/user/TUD -fstype=fuse :load-encfs\#user\:/home/user/encfs-keys/tud.xml\:/home/user/Dropbox/.tud --- /usr/local/sbin/load-encfs (fish script): #!/usr/bin/fish function usage echo "need at least two arguments" echo " 1. :[]:" echo " 2. " exit 1 end if test (count $argv) -lt 2 usage end set split (string split ':' $argv) if test $status -ne 0 usage else if test (count $split) -eq 2 set USER_NAME $split set CONFIG_PATH "" set CRYPT_PATH (realpath $split) else set USER_NAME $split set CONFIG_PATH (realpath $split) set CRYPT_PATH (realpath $split) end set MOUNT_PATH (realpath $argv) set PID (ps aux | sed -e '/sed/d;/$USER_NAME.*xinit/!d;s/^.*xserverrc \(:[0-9\.]*\).*/aaa/' | awk '{ print $2 }') if test -n "$PID" set DISPLAY (cat /proc/$PID/environ | tr '\0' '\n' | grep '^DISPLAY=' | sed -r 's/.*=(.*)/\1/') end if test -z "$DISPLAY" set DISPLAY ":0.0" end set PASS (env DISPLAY=$DISPLAY sudo -H -u $USER_NAME secret-tool lookup server $CRYPT_PATH) if test -n $CONFIG_PATH set COMMAND "env ENCFS6_CONFIG=$CONFIG_PATH" end set COMMAND $COMMAND "encfs --public --extpass='echo \'$PASS\'' $CRYPT_PATH $MOUNT_PATH" eval $COMMAND I added the various arguments to be flexible where the config file for encfs is stored.

I tried to encrypt /var/www with encfs. To do so I did following: mv /var/www /var/www.bak mkdir /var/www_enc encfs --public /var/www_enc /var/www cp -a /var/www.bak/* /var/www/ /etc/init.d/apache2 restart I tried it with my local ikiwiki (localhost/myikiwiki). Browsing worked perfectly but when I tried to save an edit I got the following error message: Failed to save your changes. Your changes were not able to be saved to disk. The system gave the error: Your changes are preserved below, and you can try again to save them. However if I revert the changes, everything works perfectly. I don't understand this, since the encrypted /var/www folder should look to the outside world exactly as the old unencrypted version would (especially because I used the --public switch). Any idea what may be wrong and how to fix it? System Info: - Ubuntu 11.04 - Apache2: 2.2.17-1ubuntu1.2 - ikiwiki version 3.20110124ubuntu1

encfs uses FUSE to mount an encrypted directory (a hidden ".directory" by convention) onto another directory specified by the user. I want to share the encrypted ".directory" via NFS where it will be decrypted on the client (on demand). When I try doing that the mount command succeeds and **no errors are reported** (even with "-vvv" parameter). However, **the mount on the client is always empty.** Why? How do I resolve this? My plan is that the client will not have to keep the decrypted directory mounted at all times, thus increasing security (I hope). The other way of sharing it, where it is decrypted on the NFS server means it will have to stay decrypted at all times (afaik). **UPDATE**: I want to clarify that I am not mounting the decrypted directory on the NFS server and then trying to share that. I am trying to share the raw encrypted directory. **NFS server** (192.168.1.1 fileserver) /etc/fstab: /home/.shared /export/home/.shared none bind 0 0 /etc/exports: /export/home/.shared 192.168.1.10(fsid=2,rw,no_root_squash,sync,no_subtree_check,nohide) **NFS client** (192.168.1.10) I haved tried two approaches: first try: fileserver:/export/home/.shared /home/.shared nfs4 noauto,x-systemd.automount,x-systemd.device-timeout=10,timeo=14,rw,relatime,vers=4.0,rsize=1048576,wsize=1048576,namlen=255,intr,timeo=600,retrans=2,sec=sys,clientaddr=192.168.1.10,local_lock=none,addr=192.168.1.1 0 0 I have also tried: fileserver:/export/home/.shared /home/.shared nfs4 noauto,_netdev,relatime,vers=4.0,rsize=1048576,wsize=1048576,namlen=255,intr 0 0

I have a 32GB SSD in my laptop and PCManFM 1.2.0 is showing 14.5GB free at the bottom right corner of the screen in the status bar. However, when I try to install an application such as encfs, I get a message saying, "out of space"... Why is that? I am using Lutuntu 14.04. Here is the output I get when trying to install encfs: oshiro@laptop:~$ sudo aptitude install encfs [sudo] password for oshiro: The following NEW packages will be installed: encfs libboost-serialization1.54.0{a} libboost-system1.54.0{a} librlog5{a} The following partially installed packages will be configured: initramfs-tools linux-image-extra-3.16.0-49-generic 0 packages upgraded, 4 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/38.5 MB of archives. After unpacking 2,662 kB will be used. The following packages have unmet dependencies: linux-image-extra-3.16.0-50-generic : Depends: linux-image-3.16.0-50-generic but it is not going to be installed. The following actions will resolve these dependencies: Remove the following packages: 1) linux-image-extra-3.16.0-50-generic Accept this solution? [Y/n/q/?] Y The following NEW packages will be installed: encfs libboost-serialization1.54.0{a} libboost-system1.54.0{a} librlog5{a} The following packages will be REMOVED: linux-image-extra-3.16.0-50-generic{a} The following partially installed packages will be configured: initramfs-tools linux-image-extra-3.16.0-49-generic 0 packages upgraded, 4 newly installed, 1 to remove and 0 not upgraded. Need to get 0 B/436 kB of archives. After unpacking 114 MB will be freed. Do you want to continue? [Y/n/?] Y (Reading database ... 279919 files and directories currently installed.) Removing linux-image-extra-3.16.0-50-generic (3.16.0-50.67~14.04.1) ... depmod: FATAL: could not load /boot/System.map-3.16.0-50-generic: No such file or directory run-parts: executing /etc/kernel/postinst.d/apt-auto-removal 3.16.0-50-generic /boot/vmlinuz-3.16.0-50-generic run-parts: executing /etc/kernel/postinst.d/initramfs-tools 3.16.0-50-generic /boot/vmlinuz-3.16.0-50-generic update-initramfs: Generating /boot/initrd.img-3.16.0-50-generic grep: /boot/config-3.16.0-50-generic: No such file or directory depmod: WARNING: could not open /tmp/mkinitramfs_eIhOa4/lib/modules/3.16.0-50-generic/modules.order: No such file or directory depmod: WARNING: could not open /tmp/mkinitramfs_eIhOa4/lib/modules/3.16.0-50-generic/modules.builtin: No such file or directory gzip: stdout: No space left on device E: mkinitramfs failure cpio 141 gzip 1 update-initramfs: failed for /boot/initrd.img-3.16.0-50-generic with 1. run-parts: /etc/kernel/postinst.d/initramfs-tools exited with return code 1 dpkg: error processing package linux-image-extra-3.16.0-50-generic (--remove): subprocess installed post-removal script returned error exit status 1 Errors were encountered while processing: linux-image-extra-3.16.0-50-generic E: Sub-process /usr/bin/dpkg returned an error code (1) A package failed to install. Trying to recover: Setting up initramfs-tools (0.103ubuntu4.2) ... update-initramfs: deferring update (trigger activated) Setting up linux-image-extra-3.16.0-49-generic (3.16.0-49.65~14.04.1) ... run-parts: executing /etc/kernel/postinst.d/apt-auto-removal 3.16.0-49-generic /boot/vmlinuz-3.16.0-49-generic run-parts: executing /etc/kernel/postinst.d/initramfs-tools 3.16.0-49-generic /boot/vmlinuz-3.16.0-49-generic update-initramfs: Generating /boot/initrd.img-3.16.0-49-generic gzip: stdout: No space left on device cpio: write error: Broken pipe find: ‘standard output’: Broken pipe find: write error E: mkinitramfs failure find 1 cpio 1 gzip 1 update-initramfs: failed for /boot/initrd.img-3.16.0-49-generic with 1. run-parts: /etc/kernel/postinst.d/initramfs-tools exited with return code 1 dpkg: error processing package linux-image-extra-3.16.0-49-generic (--configure): subprocess installed post-installation script returned error exit status 1 Processing triggers for initramfs-tools (0.103ubuntu4.2) ... update-initramfs: Generating /boot/initrd.img-3.16.0-49-generic gzip: stdout: No space left on device cpio: write error: Broken pipe find: ‘standard output’: Broken pipe find: write error E: mkinitramfs failure find 1 cpio 1 gzip 1 update-initramfs: failed for /boot/initrd.img-3.16.0-49-generic with 1. dpkg: error processing package initramfs-tools (--configure): subprocess installed post-installation script returned error exit status 1 Errors were encountered while processing: linux-image-extra-3.16.0-49-generic initramfs-tools oshiro@laptop:~$

I created 2 test folders: mkdir /home/oshiro/Desktop/encrypted mkdir /home/oshiro/Desktop/decrypted oshiro@debian:~/Desktop$ ls -l total 8 drwxr-xr-x 2 oshiro oshiro 4096 Feb 15 20:34 decrypted drwxr-xr-x 2 oshiro oshiro 4096 Feb 15 20:33 encrypted I installed encfs: sudo aptitude install encfs I then tried using encfs with the 2 folders I created above: oshiro@debian:~/Desktop$ encfs /home/oshiro/Desktop/encrypted /home/oshiro/Desktop/decrypted Creating new encrypted volume. Please choose from one of the following options: enter "x" for expert configuration mode, enter "p" for pre-configured paranoia mode, anything else, or an empty line will select standard mode. ?> p Paranoia configuration selected. Configuration finished. The filesystem to be created has the following properties: Filesystem cypher: "ssl/aes", version 3:0:2 Filename encoding: "nameio/block", version 3:0:1 Key Size: 256 bits Block Size: 1024 bytes, including 8 byte MAC header Each file contains 8 byte header with unique IV data. Filenames encoded using IV chaining mode. File data IV is chained to filename IV. File holes passed through to ciphertext. New Encfs Password: Verify Encfs Password: But then I got this error: fuse: failed to open /dev/fuse: Permission denied fuse failed. Common problems: - fuse kernel module not installed (modprobe fuse) - invalid options -- see usage message oshiro@debian:~/Desktop$ I've configured encfs on Ubuntu 12.04 without any issues, I had an issue on CentOS 6.5 which I corrected by running: sudo chmod +x /usr/bin/fusermount but that was for a slightly different error message . I tried the same command on Debian 7.4, but it made no difference. Anyone know how to get this to work?