How to encrypt a btrfs subvolume?
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions.
I have found this article on archlinux wiki, and find this method is just the same as the previous encryption way I used (some time ago), except for the fact that they are using btrfs subvolumes instead of LVM.
For me, I don't want / need a full-partition encryption as the home subvolume(s) is(are) the only place where I'd like to encrypt. (Actually there are more subvolumes under home, but that's another question.)
However, through my search, I don't find any information about how to encrypt a btrfs subvolume only. The only most relevant thing I find is this mail from the btrfs mailing list, which is an experimental patch which provides transparent(?) encryption of btrfs (subvolume).
I also couldn't think out of my mind what method can be used to encrypt a subvolume only.
So, my main question is:
Is it possible to encrypt a btrfs subvolume only (no need to be "transparent encryption")? If yes, how?
Side note: Creating an encrypted block (file) and mount it on the "subvolume" is not an acceptable method since it is not a "subvolume" at all.
encryption btrfs disk-encryption
asked Feb 9 at 13:05
renyuneyun
359
add a comment |Â
up vote
0
down vote
favorite
I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions.
I have found this article on archlinux wiki, and find this method is just the same as the previous encryption way I used (some time ago), except for the fact that they are using btrfs subvolumes instead of LVM.
For me, I don't want / need a full-partition encryption as the home subvolume(s) is(are) the only place where I'd like to encrypt. (Actually there are more subvolumes under home, but that's another question.)
However, through my search, I don't find any information about how to encrypt a btrfs subvolume only. The only most relevant thing I find is this mail from the btrfs mailing list, which is an experimental patch which provides transparent(?) encryption of btrfs (subvolume).
I also couldn't think out of my mind what method can be used to encrypt a subvolume only.
So, my main question is:
Is it possible to encrypt a btrfs subvolume only (no need to be "transparent encryption")? If yes, how?
Side note: Creating an encrypted block (file) and mount it on the "subvolume" is not an acceptable method since it is not a "subvolume" at all.
encryption btrfs disk-encryption
asked Feb 9 at 13:05
renyuneyun
359
1
AFAIK, btrfs doesn't support subvolume encryption..at least it didn't last time I looked closely at btrfs a few years ago. zfsonlinux added it last year ("datasets" are the ZFS equivalent to "subvolumes").
– cas
Feb 9 at 13:48
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions.
I have found this article on archlinux wiki, and find this method is just the same as the previous encryption way I used (some time ago), except for the fact that they are using btrfs subvolumes instead of LVM.
For me, I don't want / need a full-partition encryption as the home subvolume(s) is(are) the only place where I'd like to encrypt. (Actually there are more subvolumes under home, but that's another question.)
However, through my search, I don't find any information about how to encrypt a btrfs subvolume only. The only most relevant thing I find is this mail from the btrfs mailing list, which is an experimental patch which provides transparent(?) encryption of btrfs (subvolume).
I also couldn't think out of my mind what method can be used to encrypt a subvolume only.
So, my main question is:
Is it possible to encrypt a btrfs subvolume only (no need to be "transparent encryption")? If yes, how?
Side note: Creating an encrypted block (file) and mount it on the "subvolume" is not an acceptable method since it is not a "subvolume" at all.
encryption btrfs disk-encryption
asked Feb 9 at 13:05
renyuneyun
359
I'm looking for information about encryption with btrfs. I have experience with full-disk (LVM actually) encryption, so this time I only need to look at some btrfs specific questions.
I have found this article on archlinux wiki, and find this method is just the same as the previous encryption way I used (some time ago), except for the fact that they are using btrfs subvolumes instead of LVM.
For me, I don't want / need a full-partition encryption as the home subvolume(s) is(are) the only place where I'd like to encrypt. (Actually there are more subvolumes under home, but that's another question.)
However, through my search, I don't find any information about how to encrypt a btrfs subvolume only. The only most relevant thing I find is this mail from the btrfs mailing list, which is an experimental patch which provides transparent(?) encryption of btrfs (subvolume).
I also couldn't think out of my mind what method can be used to encrypt a subvolume only.
So, my main question is:
Is it possible to encrypt a btrfs subvolume only (no need to be "transparent encryption")? If yes, how?
Side note: Creating an encrypted block (file) and mount it on the "subvolume" is not an acceptable method since it is not a "subvolume" at all.
encryption btrfs disk-encryption
asked Feb 9 at 13:05
renyuneyun
359
edited Feb 9 at 13:18
asked Feb 9 at 13:05
renyuneyun
359
asked Feb 9 at 13:05
renyuneyun
359
asked Feb 9 at 13:05
renyuneyun
359
359
1
AFAIK, btrfs doesn't support subvolume encryption..at least it didn't last time I looked closely at btrfs a few years ago. zfsonlinux added it last year ("datasets" are the ZFS equivalent to "subvolumes").
– cas
Feb 9 at 13:48
add a comment |Â
1
AFAIK, btrfs doesn't support subvolume encryption..at least it didn't last time I looked closely at btrfs a few years ago. zfsonlinux added it last year ("datasets" are the ZFS equivalent to "subvolumes").
– cas
Feb 9 at 13:48
1
1
AFAIK, btrfs doesn't support subvolume encryption..at least it didn't last time I looked closely at btrfs a few years ago. zfsonlinux added it last year ("datasets" are the ZFS equivalent to "subvolumes").
– cas
Feb 9 at 13:48
AFAIK, btrfs doesn't support subvolume encryption..at least it didn't last time I looked closely at btrfs a few years ago. zfsonlinux added it last year ("datasets" are the ZFS equivalent to "subvolumes").
– cas
Feb 9 at 13:48
add a comment |Â
1 Answer
1
active
oldest
votes
up vote
0
down vote
Is it possible to encrypt a btrfs subvolume only (no need to be
"transparent encryption")?
No, BTRFS does not currently have built-in support for encryption. Today, to encrypt a filesystem (not just a sub-volume) you'd need DM-Crypt/LUKS. See https://btrfs.wiki.kernel.org/index.php/FAQ#Does_btrfs_support_encryption.3F
answered Feb 9 at 21:45
Emmanuel Rosa
2,2101410
Were I correct, BTRFS's (supposed) encryption support is for transparent encryption. Is there no way to perform manual encryption on subvolumes?
– renyuneyun
Feb 13 at 15:14
The encryption support you mentioned is experimental and as far as I know is not included in mainline. I don't know how well maintained those patches are. Today, encryption for BTRFS is done at the block device level using DM-Crypt/LUKS, which encompasses the entire filesystem; hence there's no sub-volume encryption.
– Emmanuel Rosa
Feb 13 at 17:07
Having said that, eCryptFS effectively creates an encrypted layer on top of any filesystem. See ecryptfs.org
– Emmanuel Rosa
Feb 13 at 17:09
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
0
down vote
Is it possible to encrypt a btrfs subvolume only (no need to be
"transparent encryption")?
No, BTRFS does not currently have built-in support for encryption. Today, to encrypt a filesystem (not just a sub-volume) you'd need DM-Crypt/LUKS. See https://btrfs.wiki.kernel.org/index.php/FAQ#Does_btrfs_support_encryption.3F
answered Feb 9 at 21:45
Emmanuel Rosa
2,2101410
Were I correct, BTRFS's (supposed) encryption support is for transparent encryption. Is there no way to perform manual encryption on subvolumes?
– renyuneyun
Feb 13 at 15:14
The encryption support you mentioned is experimental and as far as I know is not included in mainline. I don't know how well maintained those patches are. Today, encryption for BTRFS is done at the block device level using DM-Crypt/LUKS, which encompasses the entire filesystem; hence there's no sub-volume encryption.
– Emmanuel Rosa
Feb 13 at 17:07
Having said that, eCryptFS effectively creates an encrypted layer on top of any filesystem. See ecryptfs.org
– Emmanuel Rosa
Feb 13 at 17:09
add a comment |Â
up vote
0
down vote
Is it possible to encrypt a btrfs subvolume only (no need to be
"transparent encryption")?
No, BTRFS does not currently have built-in support for encryption. Today, to encrypt a filesystem (not just a sub-volume) you'd need DM-Crypt/LUKS. See https://btrfs.wiki.kernel.org/index.php/FAQ#Does_btrfs_support_encryption.3F
answered Feb 9 at 21:45
Emmanuel Rosa
2,2101410
Were I correct, BTRFS's (supposed) encryption support is for transparent encryption. Is there no way to perform manual encryption on subvolumes?
– renyuneyun
Feb 13 at 15:14
The encryption support you mentioned is experimental and as far as I know is not included in mainline. I don't know how well maintained those patches are. Today, encryption for BTRFS is done at the block device level using DM-Crypt/LUKS, which encompasses the entire filesystem; hence there's no sub-volume encryption.
– Emmanuel Rosa
Feb 13 at 17:07
Having said that, eCryptFS effectively creates an encrypted layer on top of any filesystem. See ecryptfs.org
– Emmanuel Rosa
Feb 13 at 17:09
add a comment |Â
up vote
0
down vote
up vote
0
down vote
Is it possible to encrypt a btrfs subvolume only (no need to be
"transparent encryption")?
No, BTRFS does not currently have built-in support for encryption. Today, to encrypt a filesystem (not just a sub-volume) you'd need DM-Crypt/LUKS. See https://btrfs.wiki.kernel.org/index.php/FAQ#Does_btrfs_support_encryption.3F
answered Feb 9 at 21:45
Emmanuel Rosa
2,2101410
Is it possible to encrypt a btrfs subvolume only (no need to be
"transparent encryption")?
No, BTRFS does not currently have built-in support for encryption. Today, to encrypt a filesystem (not just a sub-volume) you'd need DM-Crypt/LUKS. See https://btrfs.wiki.kernel.org/index.php/FAQ#Does_btrfs_support_encryption.3F
answered Feb 9 at 21:45
Emmanuel Rosa
2,2101410
answered Feb 9 at 21:45
Emmanuel Rosa
2,2101410
answered Feb 9 at 21:45
Emmanuel Rosa
2,2101410
answered Feb 9 at 21:45
Emmanuel Rosa
2,2101410
2,2101410
Were I correct, BTRFS's (supposed) encryption support is for transparent encryption. Is there no way to perform manual encryption on subvolumes?
– renyuneyun
Feb 13 at 15:14
The encryption support you mentioned is experimental and as far as I know is not included in mainline. I don't know how well maintained those patches are. Today, encryption for BTRFS is done at the block device level using DM-Crypt/LUKS, which encompasses the entire filesystem; hence there's no sub-volume encryption.
– Emmanuel Rosa
Feb 13 at 17:07
Having said that, eCryptFS effectively creates an encrypted layer on top of any filesystem. See ecryptfs.org
– Emmanuel Rosa
Feb 13 at 17:09
add a comment |Â
Were I correct, BTRFS's (supposed) encryption support is for transparent encryption. Is there no way to perform manual encryption on subvolumes?
– renyuneyun
Feb 13 at 15:14
The encryption support you mentioned is experimental and as far as I know is not included in mainline. I don't know how well maintained those patches are. Today, encryption for BTRFS is done at the block device level using DM-Crypt/LUKS, which encompasses the entire filesystem; hence there's no sub-volume encryption.
– Emmanuel Rosa
Feb 13 at 17:07
Having said that, eCryptFS effectively creates an encrypted layer on top of any filesystem. See ecryptfs.org
– Emmanuel Rosa
Feb 13 at 17:09
Were I correct, BTRFS's (supposed) encryption support is for transparent encryption. Is there no way to perform manual encryption on subvolumes?
– renyuneyun
Feb 13 at 15:14
Were I correct, BTRFS's (supposed) encryption support is for transparent encryption. Is there no way to perform manual encryption on subvolumes?
– renyuneyun
Feb 13 at 15:14
The encryption support you mentioned is experimental and as far as I know is not included in mainline. I don't know how well maintained those patches are. Today, encryption for BTRFS is done at the block device level using DM-Crypt/LUKS, which encompasses the entire filesystem; hence there's no sub-volume encryption.
– Emmanuel Rosa
Feb 13 at 17:07
The encryption support you mentioned is experimental and as far as I know is not included in mainline. I don't know how well maintained those patches are. Today, encryption for BTRFS is done at the block device level using DM-Crypt/LUKS, which encompasses the entire filesystem; hence there's no sub-volume encryption.
– Emmanuel Rosa
Feb 13 at 17:07
Having said that, eCryptFS effectively creates an encrypted layer on top of any filesystem. See ecryptfs.org
– Emmanuel Rosa
Feb 13 at 17:09
Having said that, eCryptFS effectively creates an encrypted layer on top of any filesystem. See ecryptfs.org
– Emmanuel Rosa
Feb 13 at 17:09
add a comment |Â
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f423041%2fhow-to-encrypt-a-btrfs-subvolume%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
1
AFAIK, btrfs doesn't support subvolume encryption..at least it didn't last time I looked closely at btrfs a few years ago. zfsonlinux added it last year ("datasets" are the ZFS equivalent to "subvolumes").
– cas
Feb 9 at 13:48