Thread: Ecryptfs remount after reinstallation

hello,

wanted post question here encrypted home folder in ubuntu. installed ubuntu 10.10 system 2 years ago , chose place home folder on (hardware) raid 5 partition (just options suggested ubuntu installer). because upgrade 11.10 didn't work out correctly, had reformat whole system again. , want mount raid 5 partition again home folder, because still contains data. after looking around on internet found solutions 'ecryptfs-recover-private' (which work perfectly), wondering if 'reuse' same partition in new installation without having copy , paste out of tmp directory created 'ecryptfs-recover-private'. can edit fstab or automatically reuse partition? tried lot nothing seems work.

i'm wondering if has link or overview on different passwords/passphrases used encrypted folder/partition? know used login password somewhere, , got long key ubuntu had note. tools ask 'passphrase' , i'm wondering 1 they're asking.

sorry noob question!

time , help!

best regards

hans

hans, possible mount it, have not found satisfactory explanation of how works.

when install new version of ubuntu, take full backup of disk, reformat, restore data onto newly-encrypted disk.

here summary of found -- please beware not of every aspect of documentation!

how data stored

fnek: file name encryption key (to encrypt file names).
fekek: file encryption key, encryption key (the encrypted encryption key encrypt file contents)

/home/.ecryptfs/foo/.ecryptfs/ holds encryption information. contains following files:

• auto-mount: empty file instructing pam automatically mount ecryptfs directory.
• auto-umount: empty file instructing pam automatically unmount ecryptfs directory.
• private.mnt: file containing mount point in single line, i.e. "/home/foo".
• private.sig: fekek , fnek signatures without key.
• wrapped-passphrase: required key, encrypted user's password.

also:

• /home/.ecryptfs/foo/.private/ - encrypted home directory.
• ~/.ecryptfs/ - symbolic link /home/.ecryptfs/foo/.ecryptfs/
• ~/readme.txt - symbolic link /usr/share/ecryptfs-utils/ecryptfs-mount-private.txt

ecryptfs encrypts contents of files. optionally, encrypts names of files. ubuntu both; when decrypt, need decrypt both contents and file names.

file wrapped-passphrase, can use commands:

• ecryptfs-wrap-passphrase
• ecryptfs-rewrap-passphrase
• ecryptfs-unwrap-passphrase

when logged in, can use following find passphrase:
ecryptfs-unwrap-passphrase ~/.ecryptfs/wrapped-passphrase
when prompts "passphrase", enter login password.

mounting home directory when logging in

ubuntu decrypts home directory automatically when log in. depends on passphrase being correctly wrapped login password.

suspect need use either ecryptfs-wrap-passphrase ecryptfs-rewrap-passphrase, not know how this. maybe previous comments combined ecryptfs-wrap-passphrase , ecryptfs-rewrap-passphrase manuals let find out.

presumably need recreate /home/.ecryptfs/foo/.ecryptfs/wrapped-passphrase.

can see, find easier before installation, , restore afterwards!

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [SOLVED] Ecryptfs remount after reinstallation

Ubuntu