Am 14.03.2022 um 17:02 schrieb Bryan Smith:
On Sun, Mar 13, 2022 at 4:33 PM Markus Schade via lpi-examdev
<[email protected] <mailto:[email protected]>> wrote:
I am kind of missing any encryption. Whether it be fscript (ext4),
ecryptfs, gocryptfs or cryfs.
Right now, in Objective 203.3, it's limited to creating/configuring the
kernel DeviceMapper (DM) facilities, such as Linux Unified Key Setup
(LUKS). *[201-203]*
Definitely interested in knowing more about where LUKS is too limited in
scope, whether other solutions volume/file system-based (possibly same
section), or file/virtual-volume (possibly another section).
My view is limited and just as biased as yours. What I see is that
storage is often just a public/cloud service. Such services often
file/object based. Whether it be S3, WebDav, (s)FTP, or one of the
proprietary services like Onedrive, GDrive, etc.
So to encrypt the backups there are tools like borg, duply/duplicity and
restic
And the other use case is when files need to be access directly and/or
randomly. Here you see the likes of rclone or ecryptfs,gocryptfs,etc.
over fuse mounts.
LUKS is not really the usable for those cases.
Markus
_______________________________________________
lpi-examdev mailing list
[email protected]
https://list.lpi.org/mailman/listinfo/lpi-examdev