You are not logged in.

#1 2010-04-11 15:22:23

rodrigolautaro
Member
Registered: 2010-04-11
Posts: 3

ecryptfs and mounting enrypted home folder

Before installing Arch i had Ubuntu installed and my home folder was encrypted.  Then before installing Arch I changed the name of the old home folder in order to have the same home folder name in my new Arch installation. Now i desperately need to mount the encrypted home folder to recover almost all of my files.

Hope you can help me, because I tried to mount it by using (obviously I modprobed ecryptfs first)

mount -t ecryptfs /home/rodrigo1/.Private /home/rodrigo/rodrigo

(where rodrigo1 is the encrypted home folder, that used to be "rodrigo", and /home/rodrigo/rodrigo is the folder I created in my actual home to mount the encrypted folder)

and I get the next message

mount: wrong fs type, bad option, bad superblock on /home/.ecryptfs/rodrigo/.Private,
       missing codepage or helper program, or other error
       In some cases useful info is found in syslog - try
       dmesg | tail  or so

Offline

#2 2010-04-12 00:26:28

anrxc
Member
From: Croatia
Registered: 2008-03-22
Posts: 834
Website

Re: ecryptfs and mounting enrypted home folder

Install keyutils, and ecryptfs-utils. Then try again.

If you want more information on eCryptfs, and specifically under Arch Linux read my article eCryptfs and $HOME.


You need to install an RTFM interface.

Offline

#3 2010-04-12 01:22:00

rodrigolautaro
Member
Registered: 2010-04-11
Posts: 3

Re: ecryptfs and mounting enrypted home folder

hello

I've installed the packages and managed to get ecryptfs working.

but when i input
$sudo mount -t ecryptfs /home/rodrigo3/.Private /home/rodrigo/rodrigo -o ecryptfs_cipher=aes,ecryptfs_key_bytes=16,key=passphrase

i get

Passphrase:
Enable plaintext passthrough (y/n) [n]:
Enable filename encryption (y/n) [n]:
Attempting to mount with the following options:
  ecryptfs_unlink_sigs
  ecryptfs_key_bytes=16
  ecryptfs_cipher=aes
  ecryptfs_sig=95e3616848914620
Mounted eCryptfs

the deal is that the mounted folder still have all the filenames and folder names encrypted with numbers and letters...

Offline

#4 2010-04-12 12:36:59

anrxc
Member
From: Croatia
Registered: 2008-03-22
Posts: 834
Website

Re: ecryptfs and mounting enrypted home folder

the deal is that the mounted folder still have all the filenames and folder names encrypted with numbers and letters...

You said no on the filename encryption question. What that would do is insert another key into your keyring (derived from the same passphrase) and that one is used for filenames.

You can also use $ ecryptfs-add-passphrase --fnek to add the file-encryption key and filename-ecryption key to your keyring. If you have the wrapped-passphrase file then use $ ecryptfs-insert-wrapped-passphrase-into-keyring /path/to/wrapped-passphrase and enter your old login password.... or just say yes on the filename ecryption question. Read my article this time.

Last edited by anrxc (2010-04-12 12:37:58)


You need to install an RTFM interface.

Offline

#5 2010-04-13 20:43:43

rodrigolautaro
Member
Registered: 2010-04-11
Posts: 3

Re: ecryptfs and mounting enrypted home folder

hello ... I've trying over and over again and came out with nothing.... I've "installed the RTFM interface" but also nothing. Maybe it's a matter of my English understanding.

I've tried with all kinds of ways and nothing. I was thinking maybe I'm not selecting the appropriate encryption type.

Please help!

Offline

#6 2010-04-14 00:06:09

anrxc
Member
From: Croatia
Registered: 2008-03-22
Posts: 834
Website

Re: ecryptfs and mounting enrypted home folder

I've "installed the RTFM interface" but also nothing.

Sometimes it takes months for these to start running at full capacity.

I was thinking maybe I'm not selecting the appropriate encryption type.

If you used Ubuntu defaults that is AES, with a 16-byte key.

I've trying over and over again and came out with nothing

This is your mantra:
- As long as I have the correct mount passphrase I am fine.
- I can not just think I have the right one, I must be sure.
- During Ubuntu setup this passphrase was randomly generated.
- I was asked to print out this passphrase and store it for safe keeping.

Good? OK, this is what I would do:

# ecryptfs-add-passphrase --fnek
Passphrase: <enter the mount passphrase>

Both FEKEK and FNEK were inserted into the keyring. Check their signatures:

# keyctl list @u

If I have Private.sig or sig-cache.txt in my old eCryptfs directory I compare signatures. Then I proceed to mount:

# mount -t ecryptfs /home/rodrigo3/.Private /mnt/recovery -o ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_sig=fekeksig,ecryptfs_fnek_sig=fneksig


You need to install an RTFM interface.

Offline

Board footer

Powered by FluxBB