Home Explore Help
Register Sign In
fphammerle
/
docker-reverse-encfs
mirror of https://github.com/fphammerle/docker-reverse-encfs
1
0
Fork 0
Files Issues 0 Wiki

No Description

Tree: 17c2652315
Branches Tags
docker-reverse-...
ZIP TAR.GZ
Fabian Peter Hammerle 17c2652315 compose examples: added explanation why not using named volumes 5 years ago
examples 17c2652315 compose examples: added explanation why not using named volumes 5 years ago
Dockerfile da84af088e create mount point /encrypted/encfs during runtime to be able to mount /encrypted 5 years ago
README.md 89abb15557 added compose example: rsync ssh server serving encfs-encrypted data & gpg-encrypted encfs-password 5 years ago
docker-compose.yml ad8ee62754 docker-compose: move rsync-sshd to new examples/rsync-sshd/docker-compose.yml 5 years ago
mount.sh 1ea9a3b13b unmount & terminate on SIGTERM 5 years ago

README.md

Reverse EncFS 🐳

Provides an EncFS-enciphered view /encrypted of volumes mounted in /plain

docker run --rm --device /dev/fuse \
    -v plain-data1:/plain/foo:ro \
    -v plain-data2:/plain/bar:ro \
    -v encfs-password:/secret \
    --cap-add SYS_ADMIN --security-opt apparmor:unconfined \
    fphammerle/reverse-encfs

Optionally add --network none

Docker Compose 🐙

  1. Adapt paths in docker-compose.yml
  2. docker-compose up

Password

A random password will be generated and stored in /secret/password.

Set the env var $ENCFS_PASSWORD_LENGTH to change its length.

Access encrypted data

Add -v /somewhere:/encrypted:shared to mount the encrypted view of /plain/* into the host filesystem.

You may need to disable user namespace remapping for containers (dockerd option --userns-remap) due to https://github.com/moby/moby/issues/36472 .

Serve encrypted data via rsync ssh server

See examples/rsync-sshd

Grant rsync access to a gpg-encrypted view of the encfs password: examples/rsync-sshd-incl-gpg-enc-pwd