1

I want to access my user-partition from a client, so that it can encrypt the saved data without the server knowing the key, therefore the client doesn't have to trust it. Diagram:

Layer5: Filesystem |   btrfs   |              Client
Layer4: Encryption |   LUKS    |              Client
Layer3: Transport        ?
Layer2: Partitions | user-part |server-part|  Server
Layer1: RAID       |   mdadm RAID5 6TB     |  Server
Layer0: HW:        |  3TB  |  3TB  |  3TB  |  Server

But I don't know how to access the partition. I tried NBD, but any documentation of it is outdated, so I can't get it working. Are there alternatives to NBD?

  • Perhaps you should post a question with your nbd problems, as it is usually well supported. – meuh Jan 14 '18 at 11:11
1

One alternative is iSCSI, which implements block-level access by transporting SCSI command over the network. In your diagram it would "fake" layer 0. All encryption/decryption will happen on the client.

See e.g. this for a Debian tutorial, or google for whatever distro you use.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.