Disk Encryption...GO!

[JimPhreak]

Since I'm sort of in the midst of upgrading my entire home network (new firewall/router, backup server, etc.), I'm wondering how I can better secure my UnRAID server.  I remember reading (back when I first implemented my UnRAID server 2 years ago) something about the ability to encrypt the data.

 

My questions are:

 

1)  How is it done?

 

2)  How secure is it?

 

3)  Is the data secure even when being read over user shares?

 

4) What kind of a speed hit is there on data transfers?

 

 

P.S.  I'm currently running UnRAID version 5.04 with UnMenu installed.

[itimpi]

As far as I know this is a feature that has been talked about and requested - not a standard supported feature.

[BRiT]

Right now it is NOT a built in feature. You have to do it all yourself.

[trurl]

I have not used it recently, but there is a plugin for encFS. Try a search.

 

I find hidden private shares sufficient to keep family members at bay.

 

[JimPhreak]

I have not used it recently, but there is a plugin for encFS. Try a search.

 

I find hidden private shares sufficient to keep family members at bay.

 

I'm more concerned with if my server was stolen.

 

I've tried installing encFS but the download link is no longer available so the download/install process fails.

[trurl]

I have not used it recently, but there is a plugin for encFS. Try a search.

 

I find hidden private shares sufficient to keep family members at bay.

 

I'm more concerned with if my server was stolen.

 

I've tried installing encFS but the download link is no longer available so the download/install process fails.

You might try searching for the files the plg downloads. If you can find them it is fairly easy to edit the plg file.

[JimPhreak]

This is the output I get when trying to install the encFS package.

 

encfs-1.7.2-i486-1.tgz installation:

Verifying package rlog-1.4-i486-1kc.tgz.

Installing package rlog-1.4-i486-1kc.tgz:

PACKAGE DESCRIPTION:

# rlog (a C++ logging library)

#

# RLog provides a flexible message logging facility for C++ programs

# and libraries. It is highly optimized for the case where no log

# messages are output, so that it can be left in production code and

# enabled on-demand.

#

Executing install script for rlog-1.4-i486-1kc.tgz.

Package rlog-1.4-i486-1kc.tgz installed.

 

Verifying package boost-1.39.0-i686-1as.tgz.

Installing package boost-1.39.0-i686-1as.tgz:

PACKAGE DESCRIPTION:

# Boost (Portable C++ libraries)

#

# We emphasize libraries that work well with the C++ Standard Library

# Boost libraries are intended to be widely useful, and usable across

# a broad spectrum of applications. The Boost license encourages both

# commercial and non-commercial use.

#

Executing install script for boost-1.39.0-i686-1as.tgz.

Package boost-1.39.0-i686-1as.tgz installed.

 

Verifying package encfs-1.7.2-i486-1.tgz.

 

gzip: stdin: unexpected end of file

Installing package encfs-1.7.2-i486-1.tgz:

PACKAGE DESCRIPTION:

WARNING:  Package has not been created with 'makepkg'

Package encfs-1.7.2-i486-1.tgz installed.

 

encfs-1.7.2-i486-1.tgz apparently did not install properly, /usr/local/bin/encfs does not exist.

[trurl]

This is the output I get when trying to install the encFS package.

 

encfs-1.7.2-i486-1.tgz installation:

Verifying package rlog-1.4-i486-1kc.tgz.

Installing package rlog-1.4-i486-1kc.tgz:

PACKAGE DESCRIPTION:

# rlog (a C++ logging library)

#

# RLog provides a flexible message logging facility for C++ programs

# and libraries. It is highly optimized for the case where no log

# messages are output, so that it can be left in production code and

# enabled on-demand.

#

Executing install script for rlog-1.4-i486-1kc.tgz.

Package rlog-1.4-i486-1kc.tgz installed.

 

Verifying package boost-1.39.0-i686-1as.tgz.

Installing package boost-1.39.0-i686-1as.tgz:

PACKAGE DESCRIPTION:

# Boost (Portable C++ libraries)

#

# We emphasize libraries that work well with the C++ Standard Library

# Boost libraries are intended to be widely useful, and usable across

# a broad spectrum of applications. The Boost license encourages both

# commercial and non-commercial use.

#

Executing install script for boost-1.39.0-i686-1as.tgz.

Package boost-1.39.0-i686-1as.tgz installed.

 

Verifying package encfs-1.7.2-i486-1.tgz.

 

gzip: stdin: unexpected end of file

Installing package encfs-1.7.2-i486-1.tgz:

PACKAGE DESCRIPTION:

WARNING:  Package has not been created with 'makepkg'

Package encfs-1.7.2-i486-1.tgz installed.

 

encfs-1.7.2-i486-1.tgz apparently did not install properly, /usr/local/bin/encfs does not exist.

Maybe a bad download.

 

Try changing the link in the plg to this

http://slackware.org.uk/slacky/slackware-14.0/system/encfs/1.7.4/encfs-1.7.4-i486-5sl.txz

[JimPhreak]

This is the output I get when trying to install the encFS package.

 

encfs-1.7.2-i486-1.tgz installation:

Verifying package rlog-1.4-i486-1kc.tgz.

Installing package rlog-1.4-i486-1kc.tgz:

PACKAGE DESCRIPTION:

# rlog (a C++ logging library)

#

# RLog provides a flexible message logging facility for C++ programs

# and libraries. It is highly optimized for the case where no log

# messages are output, so that it can be left in production code and

# enabled on-demand.

#

Executing install script for rlog-1.4-i486-1kc.tgz.

Package rlog-1.4-i486-1kc.tgz installed.

 

Verifying package boost-1.39.0-i686-1as.tgz.

Installing package boost-1.39.0-i686-1as.tgz:

PACKAGE DESCRIPTION:

# Boost (Portable C++ libraries)

#

# We emphasize libraries that work well with the C++ Standard Library

# Boost libraries are intended to be widely useful, and usable across

# a broad spectrum of applications. The Boost license encourages both

# commercial and non-commercial use.

#

Executing install script for boost-1.39.0-i686-1as.tgz.

Package boost-1.39.0-i686-1as.tgz installed.

 

Verifying package encfs-1.7.2-i486-1.tgz.

 

gzip: stdin: unexpected end of file

Installing package encfs-1.7.2-i486-1.tgz:

PACKAGE DESCRIPTION:

WARNING:  Package has not been created with 'makepkg'

Package encfs-1.7.2-i486-1.tgz installed.

 

encfs-1.7.2-i486-1.tgz apparently did not install properly, /usr/local/bin/encfs does not exist.

Maybe a bad download.

 

Try changing the link in the plg to this

http://slackware.org.uk/slacky/slackware-14.0/system/encfs/1.7.4/encfs-1.7.4-i486-5sl.txz

 

Pardon my misunderstanding but when you're referring to plg you're referring to what and where exactly?

[trurl]

The plugin file has extension .plg

 

Plugins are text files. They can be opened in a text editor. You should use a linux compatible text editor like notepad++ and save the file in linux format after you edit it.

 

If you look in the file, you will see a section near the top with the files it downloads. Just replace the encfs link with the one I gave and see if that helps anything.

 

If it works, you are the plugins new maintainer! Please post it.

 

[JimPhreak]

The plugin file has extension .plg

 

Plugins are text files. They can be opened in a text editor. You should use a linux compatible text editor like notepad++ and save the file in linux format after you edit it.

 

If you look in the file, you will see a section near the top with the files it downloads. Just replace the encfs link with the one I gave and see if that helps anything.

 

If it works, you are the plugins new maintainer! Please post it.

 

Ahhh gotcha.  Unfortunately it looks like the .plg file I have in my flash drive is the webGui-latest.plg.

[itimpi]

Ahhh gotcha.  Unfortunately it looks like the .plg file I have in my flash drive is the webGui-latest.plg.

There can be multiple .plg files - one for each plugin that is installed.  They should all be in the /boot/config/plugins area.

[JimPhreak]

Ahhh gotcha.  Unfortunately it looks like the .plg file I have in my flash drive is the webGui-latest.plg.

There can be multiple .plg files - one for each plugin that is installed.  They should all be in the /boot/config/plugins area.

 

This is all I see in my flash drive.  I don't see a boot directory.

 

[itimpi]

This is all I see in my flash drive.  I don't see a boot directory.

It depends how you view the flash drive!  If viewed from a console/telnet session it will show up as /boot.  If viewed across the network it will show up as the 'flash' share.

[JimPhreak]

This is all I see in my flash drive.  I don't see a boot directory.

It depends how you view the flash drive!  If viewed from a console/telnet session it will show up as /boot.  If viewed across the network it will show up as the 'flash' share.

 

Ahhh gotcha.  Well the only thing I have in my config folder is a powerdown folder with nothing in it.  No plugins.

[trurl]

Sounds like your search for encFS must have resulted in you trying to use some approach other than a plugin. I assumed you were working with the plugin. See here.

[JimPhreak]

Sounds like your search for encFS must have resulted in you trying to use some approach other than a plugin. I assumed you were working with the plugin. See here.

 

I did try to use the plugin from UnMenu but remember it wouldn't install properly.  I thought that's what I was trying to fix this whole time haha.

[trurl]

Sounds like your search for encFS must have resulted in you trying to use some approach other than a plugin. I assumed you were working with the plugin. See here.

 

I did try to use the plugin from UnMenu but remember it wouldn't install properly.  I thought that's what I was trying to fix this whole time haha.

I usually think of addons from unMenu as PKGs, since you use PKG manager and they install with installpkg where plugins install with installplg. Try the plg. Maybe it will still work as is.

[JimPhreak]

Sounds like your search for encFS must have resulted in you trying to use some approach other than a plugin. I assumed you were working with the plugin. See here.

 

I did try to use the plugin from UnMenu but remember it wouldn't install properly.  I thought that's what I was trying to fix this whole time haha.

I usually think of addons from unMenu as PKGs, since you use PKG manager and they install with installpkg where plugins install with installplg. Try the plg. Maybe it will still work as is.

 

Where do you go to install plugins with installplg?

[trurl]

Sounds like your search for encFS must have resulted in you trying to use some approach other than a plugin. I assumed you were working with the plugin. See here.

 

I did try to use the plugin from UnMenu but remember it wouldn't install properly.  I thought that's what I was trying to fix this whole time haha.

I usually think of addons from unMenu as PKGs, since you use PKG manager and they install with installpkg where plugins install with installplg. Try the plg. Maybe it will still work as is.

 

Where do you go to install plugins with installplg?

Since you posted in the v5 area I assume you are on v5. Plugin installation on v5 has not changed since it was introduced. There are a few ways you could do it but they all amount to the same thing.

 

You could just follow the instructions in the post I linked.

[nick5429]

Sounds like your search for encFS must have resulted in you trying to use some approach other than a plugin. I assumed you were working with the plugin. See here.

 

Hi!  I wrote that plugin   I stumbled across this thread while trying to see if anyone had made a v6 encryption plugin.

 

I'm still actively using the v5 plugin linked above, and it Works For Me .  I'd be very interested to hear from anyone else who uses/used/tried to use it, the plugin thread is just an echo chamber of me talking to myself!