tech stuff.

ecryptfs mount options

leave a comment »

I was having trouble tracking down the ecryptfs mount options that can be used to stop the mount.ecryptfs helper utility from prompting quite so much.  I tested this on Ubuntu 10.10.  ecryptfs_verbosity claims to be the option that I really want to change, but I couldn’t get this one working.

You can add these options to your /etc/fstab.  Their values are partially documented here: http://ecryptfs.sourceforge.net/README

Here’s what I added to my /etc/fstab to stop mount.ecryptfs from prompting for anything besides the password on Ubuntu 10.10:

/root/.crypto /root/crypto ecryptfs noauto,ecryptfs_cipher=aes,ecryptfs_key_bytes=32,ecryptfs_passthrough=n,ecryptfs_enable_filename_crypto=n 0 0

Full option listing (and how I finally found them all…):

% strings mount.ecryptfs | grep ecryptfs_
ecryptfs_process_decision_graph
ecryptfs_get_version
ecryptfs_check_sig
ecryptfs_mount
ecryptfs_append_sig
ecryptfs_validate_keyring
ecryptfs_verbosity
ecryptfs_enable_filename_crypto
ecryptfs_unlink_sigs
ecryptfs_sig=
ecryptfs_passthrough
ecryptfs_hmac
ecryptfs_xattr
ecryptfs_encrypted_view
ecryptfs_key_bytes=

Advertisements

Written by Lee Verberne

2010/11/05 at 14:56

Posted in Linux

Tagged with

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: