Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I asked this question on the ecryptfs launchpad, but it expired there without answer. https://answers.launchpad.net/ubuntu/+source/ecryptfs-utils/+question/235226

It might be trivial, but I really don't want to get it wrong for obvious reasons. On the other hand, the answers that I find are all related to the Ubuntu home directory encryption where a wrapped passphrase is used and they're confusing me.

Question: I am mounting a directory as ecryptfs

sudo mount -t ecryptfs -o  ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough=no,ecryptfs_enable_filename_crypto=yes /srv_backend /srv_use

Now I want to backup the encrypted folder /srv_backend. What do I need to backup apart from the obvious data there and my password.

The command line reply mentions a "Filename Encryption Key (FNEK) Signature [3c2034c2f35aab36]". What is this used for? Do I need to back it up / remember it?

share|improve this question
add comment

1 Answer

What do I need to backup apart from the obvious data there and my password.

I don't know exactly how ecryptfs works, but I'd say that should be it, yes.

There is an easy way to find out though: just copy your backup to another computer and try to mount it. If everything works as expected, then you're fine. If you're missing something, you'll notice it then.

Make sure though that you have documented that exact mount command somewhere in a file that's backed up too, so that you or whoever needs to restore that backup someday doesn't need to guess all those options to get it running again.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.