← Back to team overview

ecryptfs-users team mailing list archive

Re: Have my home encrypted, and within it, one non-encrypted for i.e. large files?

 

On Thu, Sep 10, 2009 at 6:25 PM, Christian Obst <christian_obst@xxxxxx> wrote:
> Hi,
>
> I originally sent this to ecryptfs-users@xxxxxxxxxxxxxxxxxxxxx, as
> suggested here[1]. However, this list does not seem to exist anymore
> (although I could register there...).
>
> Christian
>
> [1]: http://ecryptfs.sourceforge.net/ecryptfs-faq.html#nothere

Hi there!

Yeah, all of that stuff is out of date, and has been moved to Launchpad.

Also, my apologies for the really, really, really long over due
response.  A bunch of mails (yours included) got caught up in a mail
filter, and I just released them recently.

> Hi,
>
> I am thinking about encrypting my home dir, but occacsionally, I move
> large files around (i.e. movies), and I am worrying about performance.
> Is it possible to have something like a reverse ~/Private
> configuration, i.e. my home is generally encrypted, but I can designate
> one directory that automatically stores non-encrypted data? Something
> like ~/Insecure?
>
> Another example would be game files, because I imagine having them
> decrypted on-the-fly while playing could significantly slow it down.

Great question!

Actually, it's as simple as dropping a symlink into place.

For instance, I encrypt my entire home directory.  I also do quite a
bit with virtual machines in KVM, which have really big backing disk
images which require quite a bit of file I/O.  For this, I just setup
a little symlink out of my home directory to some non-encrypted space.
 For instance:
  ln -s /srv/virt-images $HOME/virt-images

And voila -- I can do all the work I want in $HOME/virt-images and not
pay the encryption penalty.

Hope that helps!

-- 
:-Dustin

Dustin Kirkland
Ubuntu Core Developer



Follow ups

References