Re: fusefs-cryptofs vs fusefs-cryptofs

2010-07-01 Thread Tim Gustafson
I use file backed GELI fs in this manner. Of course you can script it yourself, but I find the ez-jail handles my requirements perfectly. Thanks, I'll look into using GELI. I think if I do that, I'll have to mount the file system in the host environment at boot time so that it can prompt for

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-07-01 Thread Adam Vande More
On Thu, Jul 1, 2010 at 11:14 AM, Tim Gustafson t...@soe.ucsc.edu wrote: I use file backed GELI fs in this manner. Of course you can script it yourself, but I find the ez-jail handles my requirements perfectly. Thanks, I'll look into using GELI. I think if I do that, I'll have to mount

fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Tim Gustafson
Hi, all. I was wondering if anyone could offer any personal experience with using either fusefs-cryptofs or fusefs-cryptofs. I'm going to be bringing a FreeBSD OpenLDAP server online soon and I need to have the contents of the OpenLDAP database encrypted in the event of a physical security

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/06/2010 17:11:22, Tim Gustafson wrote: I was wondering if anyone could offer any personal experience with using either fusefs-cryptofs or fusefs-cryptofs. I'm going to be bringing a FreeBSD OpenLDAP server online soon and I need to have

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Tim Gustafson
On FreeBSD, this is spelled GELI (or GBDE, but I think geli is slightly better). Native filesystem level encryption -- rather more efficient than something like fuse, needs no extra software installed, very secure. Sorry, I should have been more specific: This is in the context of a jailed

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/06/2010 18:02:25, Tim Gustafson wrote: On FreeBSD, this is spelled GELI (or GBDE, but I think geli is slightly better). Native filesystem level encryption -- rather more efficient than something like fuse, needs no extra software installed,

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Adam Vande More
On Wed, Jun 30, 2010 at 12:02 PM, Tim Gustafson t...@soe.ucsc.edu wrote: On FreeBSD, this is spelled GELI (or GBDE, but I think geli is slightly better). Native filesystem level encryption -- rather more efficient than something like fuse, needs no extra software installed, very secure.