summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatthias2019-12-31 11:22:07 +0100
committerMatthias2019-12-31 11:22:07 +0100
commitcd8df6d4426d639c0c2ffc2a4a7b3cad0f2a006a (patch)
tree9c5be3964ad10afbc4134fc01209c97a237c4f29
parent0446020d0cc5a4c33e9f7fcc2270ca85721d9296 (diff)
added wiki as per comments in #442
-rw-r--r--Auto-mount-using-Gnome-keyring.md17
1 files changed, 17 insertions, 0 deletions
diff --git a/Auto-mount-using-Gnome-keyring.md b/Auto-mount-using-Gnome-keyring.md
new file mode 100644
index 0000000..2a5c376
--- /dev/null
+++ b/Auto-mount-using-Gnome-keyring.md
@@ -0,0 +1,17 @@
+To automatically mount an encrypted folder at user login, the gnome keyring service can be used on many Linux distributions (tested on Solus Linux).
+
+First step is to store the password in the keyring. The label assigned is only used to easily identify the different passwords stored in the keyring. One or more attribute/value pairs can be stored with the password and are used later for the lookup. Below example suggests to use the path of the encrypted folder for the lookup and call the attribute "cipher".
+
+```
+secret-tool store --label="MyLabel" cipher /path/to/encyrpted/folder
+```
+
+Now the stored password can be used by gocryptfs with the `--extpass` option
+
+```
+gocryptfs --extpass="secret-tool lookup cipher /path/to/encyrpted/folder" /path/to/encyrpted/folder /path/to/plain/folder
+```
+
+This command can be directly added to the auto-start commands to mount the encrypted folder at user login since the user keyring is usually automatically unlocked at user login.
+
+**Note:** Avoid to use any space characters in the attribute or value strings. This will cause issues with gocryptfs `--extpass`option. \ No newline at end of file