How to: remote encrypted filesystem in file? Announcing the arrival of Valued Associate #679:...

How do I find out the mythology and history of my Fortress?

Why does it sometimes sound good to play a grace note as a lead in to a note in a melody?

Why do we bend a book to keep it straight?

How would a mousetrap for use in space work?

ArcGIS Pro Python arcpy.CreatePersonalGDB_management

Is CEO the "profession" with the most psychopaths?

Illegal assignment from sObject to Id

Does the Weapon Master feat grant you a fighting style?

Chebyshev inequality in terms of RMS

Denied boarding although I have proper visa and documentation. To whom should I make a complaint?

How could we fake a moon landing now?

What is the topology associated with the algebras for the ultrafilter monad?

How to react to hostile behavior from a senior developer?

Do I really need to have a message in a novel to appeal to readers?

Should I follow up with an employee I believe overracted to a mistake I made?

Why wasn't DOSKEY integrated with COMMAND.COM?

What initially awakened the Balrog?

SF book about people trapped in a series of worlds they imagine

How does light 'choose' between wave and particle behaviour?

Why is my ESD wriststrap failing with nitrile gloves on?

Selecting user stories during sprint planning

Disembodied hand growing fangs

Can a new player join a group only when a new campaign starts?

Project Euler #1 in C++



How to: remote encrypted filesystem in file?



Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 23, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!Recover files from LUKS-encrypted partitionnetwork-mapped file system drops to read-only mid-stream, buffer I/O error with device mapperhow to mount a luks-encrypted file?Automounting encrypted filesystem (using random key), residing in regular file under CentOS 6.*Mount a SFTP remote filesystem that doesn't give shell accessSnapshot of BTRFS Device on top of luks VolumeHow to open unmounted luks volume which believes it is openStoring backups on a remote filesystemDual primary DRBD with LUKS encryptionFilesystem Performance for LUKS Encrypted Volumes?





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I want to create 200MB encrypted filesystem inside a regular file to keep it on my VDS, but be able to mount it locally: all decryption must be done by my local host.



This is my current sulution:




  1. Make random 200MB file: dd if=/dev/zero bs=1M count=200 of=~/zzz

  2. Initialize it with LIKS: cryptsetup luksFormat ~/zzz

  3. Open LUKS device: sudo cryptsetup luksOpen ~/zzz sss

  4. Make filesystem on it: sudo mkfs.ext4 /dev/mapper/sss


Now I can close LUKS device and:




  1. Put it to my VDS.

  2. Mount directory containint it on local folder using sshfs

  3. Open LUKS device from that local folder

  4. Mount LUKS device to another folder /mnt/sss and use this path to access to my data.


But this seems overcomplicated. I don't need SSH to encrypt my data: LUKS already did that and I can transmit parts of file zzz without any encryption. So I want some special network protocol that consider my remote file zzz as block device and transfer blocks of that device to my local PC. The ext4 will take care of network failures: connection lost will be considered by ext4 as ordinary power failure.









share







New contributor




pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.



























    0















    I want to create 200MB encrypted filesystem inside a regular file to keep it on my VDS, but be able to mount it locally: all decryption must be done by my local host.



    This is my current sulution:




    1. Make random 200MB file: dd if=/dev/zero bs=1M count=200 of=~/zzz

    2. Initialize it with LIKS: cryptsetup luksFormat ~/zzz

    3. Open LUKS device: sudo cryptsetup luksOpen ~/zzz sss

    4. Make filesystem on it: sudo mkfs.ext4 /dev/mapper/sss


    Now I can close LUKS device and:




    1. Put it to my VDS.

    2. Mount directory containint it on local folder using sshfs

    3. Open LUKS device from that local folder

    4. Mount LUKS device to another folder /mnt/sss and use this path to access to my data.


    But this seems overcomplicated. I don't need SSH to encrypt my data: LUKS already did that and I can transmit parts of file zzz without any encryption. So I want some special network protocol that consider my remote file zzz as block device and transfer blocks of that device to my local PC. The ext4 will take care of network failures: connection lost will be considered by ext4 as ordinary power failure.









    share







    New contributor




    pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.























      0












      0








      0








      I want to create 200MB encrypted filesystem inside a regular file to keep it on my VDS, but be able to mount it locally: all decryption must be done by my local host.



      This is my current sulution:




      1. Make random 200MB file: dd if=/dev/zero bs=1M count=200 of=~/zzz

      2. Initialize it with LIKS: cryptsetup luksFormat ~/zzz

      3. Open LUKS device: sudo cryptsetup luksOpen ~/zzz sss

      4. Make filesystem on it: sudo mkfs.ext4 /dev/mapper/sss


      Now I can close LUKS device and:




      1. Put it to my VDS.

      2. Mount directory containint it on local folder using sshfs

      3. Open LUKS device from that local folder

      4. Mount LUKS device to another folder /mnt/sss and use this path to access to my data.


      But this seems overcomplicated. I don't need SSH to encrypt my data: LUKS already did that and I can transmit parts of file zzz without any encryption. So I want some special network protocol that consider my remote file zzz as block device and transfer blocks of that device to my local PC. The ext4 will take care of network failures: connection lost will be considered by ext4 as ordinary power failure.









      share







      New contributor




      pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.












      I want to create 200MB encrypted filesystem inside a regular file to keep it on my VDS, but be able to mount it locally: all decryption must be done by my local host.



      This is my current sulution:




      1. Make random 200MB file: dd if=/dev/zero bs=1M count=200 of=~/zzz

      2. Initialize it with LIKS: cryptsetup luksFormat ~/zzz

      3. Open LUKS device: sudo cryptsetup luksOpen ~/zzz sss

      4. Make filesystem on it: sudo mkfs.ext4 /dev/mapper/sss


      Now I can close LUKS device and:




      1. Put it to my VDS.

      2. Mount directory containint it on local folder using sshfs

      3. Open LUKS device from that local folder

      4. Mount LUKS device to another folder /mnt/sss and use this path to access to my data.


      But this seems overcomplicated. I don't need SSH to encrypt my data: LUKS already did that and I can transmit parts of file zzz without any encryption. So I want some special network protocol that consider my remote file zzz as block device and transfer blocks of that device to my local PC. The ext4 will take care of network failures: connection lost will be considered by ext4 as ordinary power failure.







      iscsi sshfs luks





      share







      New contributor




      pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.










      share







      New contributor




      pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.








      share



      share






      New contributor




      pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      asked 2 mins ago









      pavelkolodinpavelkolodin

      1011




      1011




      New contributor




      pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





      New contributor





      pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






      pavelkolodin is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






















          0






          active

          oldest

          votes












          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "2"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });






          pavelkolodin is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963753%2fhow-to-remote-encrypted-filesystem-in-file%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          pavelkolodin is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          pavelkolodin is a new contributor. Be nice, and check out our Code of Conduct.













          pavelkolodin is a new contributor. Be nice, and check out our Code of Conduct.












          pavelkolodin is a new contributor. Be nice, and check out our Code of Conduct.
















          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963753%2fhow-to-remote-encrypted-filesystem-in-file%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          117736 Шеррод Примітки | Див. також | Посилання | Навігаційне...

          As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

          Маріан Котлеба Зміст Життєпис | Політичні погляди |...