Bash2686

Thanks for the insight. Much appreciated. Screenshots below, it actually does not say "xfs-encrypted" in the FS column but shows a green lock next to it. In the file manager it seems to be more consistent as it does show a green lock and also hover text confirming the encryption while on UD mounted disks the file manager seems to be not recognizing the encryption (sadly). So, to be protected against theft of the server/NAS (including the USB drive) it is more secure to use the array password (compared to UD disk password)?

Thanks! I was not aware of the differences between what/how it is showing in the array section and in UD (assumed it would be identical). File manager not displaying encryption also threw me off, as array disks show the green icon just fine. One last question, or 2 actually; If I enter a disk password in UD settings, how is this password stored in the background? Plaintext? Is there any increased risk regarding compromising the password (e.g. stored somewhere on file level)? How can UD - if the same password is used for unassigned disks and main array - "read" the password (from RAM I believe)?

I managed to create the supposedly encrypted partition. I attached screenshots of the log showing encrypted mount, and then what is showing in the GUI, including file manager view. What do you think? Something is wrong here, there is a green lock symbol on the left side in UD, but not on the right side in FS column (usually showing xfs-encrypted). Also in file manager in location column also showing no encryption.

Since I added a disk through UD plugin, and it uses - per default - the array encryption password...I was wondering, how can Unraid re-read the encryption key stored in RAM and assign it to the new disk? Wouldn't this process imply, that the passphrase is stored in an easily accessible format? How is Unraid able to access the passphrase in plain text to assign it to the new disk (comparing hashes would not work here)? If Unraid can just pull the passphrase from RAM, this can be also done by any third party? I guess the same question applies to stopping and starting the array. After initial input of the encryption key after reboot, the array can be unlocked again without re-entering the key.

Yes, but the ntfs action was just to try VeraCrypt some time later. I will post a clean sequence where I just go from creating xfs-encrypted to mount and also post screenshots. It's really strange because the logs say it was created encrypted but after mount nothing in the GUI is indicating encryption (e.g. Disk column says "Not encrypted" and FS column says just "xfs"). P.S. Maybe it's just a visual bug? I am new to Linux so I have currently no easy way to verify the existing encryption besides what GUI and basic logs are showing me.

Already did, sorry. I attached it to the original post. Thanks :)

I have an issue after formatting an external disk (USB enclosure) as xfs encrypted. Everything works (it shows FS "luks" after formatting) but then after mounting it no longer seems to be encrypted. In UD it does not contain the encryption symbol (on the left), and also when I open the disk in file manager there is no indication in the "source" column (Disk, not encrypted). In UD FS column after mounting changes to just plain xfs (without encryption). What could be wrong?

Hi fellow Unraid friends, I am trying to think of the best way to use encryption (ideally full disk) on my cold storage disks. I used Veracrypt in the past, but since it's not really native in Unraid and the docker VeraCrypt-GUI not fully supporting certain things (e.g. FDE) I'd rather use something which works out of the box. I tried encrypted xfs via UD and my USB3 enclosure. Formatting works fine when "xfs (encrypted" is selected, passphrase and formatting goes through. However, when mounting it does not ask for a passphrase and in Unraid the visible Information indicates "not encrypted". Any idea why this is not working? Also when I power off and on, it does not ask for the passphrase in UD section. Open for all other suggestions. It would be a plus to also use them on Windows for fast restore to non-Unraid systems but I don't like going with NTFS, also don't like these wonky drivers for Linux filesystems (especially with encryption/LUKS they seem unreliable). Thanks for your help!