On 2/28/20 2:40 PM, Johannes Graumann wrote:
On 2020-02-27 20:32, David Hobach wrote:

On 2/26/20 10:23 PM, Johannes Graumann wrote:
Hi,
I'm experimenting with creating a sys-dropbox vm that syncs with my
dropbox account. I would love to be able to then mount defined
subdirectories of the synced path to other vms (losetop/qvm-block-
style, which only works for files).
Is this possible? Where to find pointers?

qcrypt can do that: https://github.com/3hhh/qcrypt

Nice solution, but overkill in my case - I use tresorit's E2EE solution
(let's not get started on the closed source/snake oil discussion, I have
to consider noob-co-usage ...) and want to sync that storage to a
sys-tresorit, from where I want to grant access to certain subsections
of it to individual vms - without additional encryption.

I disagree with the idea that only pros deserve real security.

I'd recommend automating stuff so much that it can be used by "noobs". Only that automation programming might require some "pro" knowledge, but it needs to be done only once.

Any pointers on where to start exploring the above mentioned sshfs via
qubes-rpc solution?

Check the qubes-rpc doc on the Qubes website. I'm not sure whether someone already implemented that.

However wrt your apparently low profile threat model I don't see too much of a security benefit over doing it over battle-hardened TCP anyway. So you might just want to check the Qubes doc on opening ports to other VMs.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8bc714cd-03b3-8f7d-d84b-168f3a02ea45%40hackingthe.net.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to