Arch Linux

Doge

Member

Registered: 2021-10-07

Posts: 1

Having issues setting up encrypted /home using fscrypt

Hi, i've been trying to encrypt my home directories using fscrypt on ext4 by following the wiki ;
however I've been getting this error: "[ERROR] fscrypt setup: "/" is not a mountpoint"

[ale@archlinux ~]$ sudo fscrypt setup
Replace "/etc/fscrypt.conf"? [y/N] y
Defaulting to policy_version 2 because kernel supports it.
Customizing passphrase hashing difficulty for this system...
Created global config file at "/etc/fscrypt.conf".
[ERROR] fscrypt setup: "/" is not a mountpoint

[ale@archlinux home]$ sudo fscrypt setup /home
Metadata directories created at "/home/.fscrypt".

[ale@archlinux home]$ fscrypt encrypt /home/alenew
The following protector sources are available:
1 - Your login passphrase (pam_passphrase)
2 - A custom passphrase (custom_passphrase)
3 - A raw 256-bit key (raw_key)
Enter the source number for the new protector [2 - custom_passphrase]: 1

IMPORTANT: Before continuing, ensure you have properly set up your system for
           login protectors.  See
           https://github.com/google/fscrypt#setting-up-for-login-protectors

[ERROR] fscrypt encrypt: "/" is not a mountpoint

my /etc/fstab

# Static information about the filesystems.
# See fstab(5) for details.

# <file system> <dir> <type> <options> <dump> <pass>
# /dev/sda1
UUID=030C-6F65          /boot/efi       vfat            rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=ascii,shortname=mixed,utf8,errors=remount-ro       0 2

# /dev/sda2
UUID=cf7c20a9-37c2-4e8a-9c00-18ee454efc64       /boot           ext4            rw,noatime,stripe=4     0 2

# /dev/sda3 LABEL=ArchLinux
UUID=b41f24bf-6698-40de-9de2-f52b6dc49b1f       /               btrfs           rw,noatime,compress-force=zstd:4,ssd,discard=async,space_cache,subvolid=256,subvol=/@       0 0

# /dev/sda3 LABEL=ArchLinux
UUID=b41f24bf-6698-40de-9de2-f52b6dc49b1f       /var            btrfs           rw,noatime,compress-force=zstd:4,ssd,discard=async,space_cache,subvolid=260,subvol=/@var    0 0

# /dev/sda3 LABEL=ArchLinux
UUID=b41f24bf-6698-40de-9de2-f52b6dc49b1f       /srv            btrfs           rw,noatime,compress-force=zstd:4,ssd,discard=async,space_cache,subvolid=259,subvol=/@srv    0 0

# /dev/sda3 LABEL=ArchLinux
UUID=b41f24bf-6698-40de-9de2-f52b6dc49b1f       /root           btrfs           rw,noatime,compress-force=zstd:4,ssd,discard=async,space_cache,subvolid=261,subvol=/@root   0 0

# /dev/sda4 LABEL=ArchHome
UUID=0fa5a598-def6-4da7-ac28-236e78a8e606       /home           ext4            rw,noatime      0 2

i created the ext4 partition on /dev/sda4 using mkfs.ext4 /dev/sda4 -O encrypt, and the encrypt feature is in fact enabled
output of dumpe2fs -h /dev/path/to/disk | grep features:

dumpe2fs 1.46.4 (18-Aug-2021)
Filesystem features:      has_journal ext_attr resize_inode dir_index filetype needs_recovery extent 64bit flex_bg encrypt sparse_super large_file huge_file dir_nlink extra_isize metadata_csum
Journal features:         journal_incompat_revoke journal_64bit journal_checksum_v3

I tried doing some research but I haven't found anyone with the same issue (here a user had the same error but lxc containers were involved).
I really don't know what am I doing wrong, any help would be appreciated