SSHFS using Realcrypt as a container.

The idea behind this approach is to create a volume container on the server (bud) and access it from a remote system via sshfs/fuse. This will allow remote file level access while encrypting the data on the server. The keys and decryption algos will only be know by the client user. If this works correctly, Truecrypt can be used on the client to access a realcrypt volume remotely.

Set up on bud.

1. Install Realcrypt for Suse. (See Log)
2. Add user to Realcrypt group moduser
3. Configure an empty container: see http://altoptions.wordpress.com/2008/01/16/realcrypt-howto-part-1/
4. Attempted to mount container, recieved an error: Error: fuse: device not found, try 'modprobe fuse' first
5. Googling indicates a reboot may be needed. Will check with the Sysadmin list first.
6. Mounted via sshsf to my home machine.
7. Mounted with truecrypt on windows. Worked!
8. Formatted as NTFS - worked!
9. Transferred a couple of files.
10. This appears to work.

Install Logs

Set repository:

root@bud:~ # zypper ar http://packman.inode.at/suse/12.3 12.3 Adding repository '12.3' [done] Repository '12.3' successfully added Enabled: Yes Autorefresh: No GPG check: Yes URI: http://packman.inode.at/suse/12.3 # zypper install realcrypt Building repository '12.3' cache [done] Loading repository data… Warning: Repository 'Updates for openSUSE 12.1 12.1-1.4' appears to outdated. Consider using a different mirror or server. Reading installed packages… Resolving package dependencies…

The following NEW packages are going to be installed:

libwx_baseu-2_8-0-compat-lib-stl libwx_baseu-2_8-0-stl
libwx_baseu-2_8-0-wxcontainer libwx_gtk2u_adv-2_8-0-compat-lib-stl
libwx_gtk2u_adv-2_8-0-stl libwx_gtk2u_adv-2_8-0-wxcontainer
libwx_gtk2u_core-2_8-0-compat-lib-stl libwx_gtk2u_core-2_8-0-stl
libwx_gtk2u_core-2_8-0-wxcontainer realcrypt wxWidgets-ansi-compat-lib-config
wxWidgets-lang

The following recommended package was automatically selected:

wxWidgets-lang

12 new packages to install. Overall download size: 4.3 MiB. After the operation, additional 15.4 MiB will be used. Continue? [y/n/?] (y): y Retrieving package realcrypt-7.0a-3.41.i586 (1/12), 716.0 KiB (2.5 MiB unpacked) Retrieving: realcrypt-7.0a-3.41.i586.rpm [done] Installing: libwx_baseu-2_8-0-stl-2.8.12-6.1.2 [done] Installing: libwx_baseu-2_8-0-wxcontainer-2.8.12-6.1.2 [done] Installing: wxWidgets-ansi-compat-lib-config-2.8.12-6.1.2 [done] Installing: wxWidgets-lang-2.8.12-6.1.2 [done] Installing: libwx_baseu-2_8-0-compat-lib-stl-2.8.12-6.1.2 [done] Installing: libwx_gtk2u_core-2_8-0-wxcontainer-2.8.12-6.1.2 [done] Installing: libwx_gtk2u_core-2_8-0-stl-2.8.12-6.1.2 [done] Installing: libwx_gtk2u_core-2_8-0-compat-lib-stl-2.8.12-6.1.2 [done] Installing: libwx_gtk2u_adv-2_8-0-wxcontainer-2.8.12-6.1.2 [done] Installing: libwx_gtk2u_adv-2_8-0-stl-2.8.12-6.1.2 [done] Installing: libwx_gtk2u_adv-2_8-0-compat-lib-stl-2.8.12-6.1.2 [done] Installing: realcrypt-7.0a-3.41 [done] Additional rpm output: Setting up group realcrypt ….. Checking /etc/sudoers for realcrypt Configuring /etc/sudoers …. If you want to use realcrypt without having to enter the root password when mounting/umounting a device, add the respective user(s) to the group "realcrypt" …..