Sunday, May 5, 2024
 Popular · Latest · Hot · Upcoming
29
rated 0 times [  29] [ 0]  / answers: 1 / hits: 16229  / 2 Years ago, sat, december 4, 2021, 3:54:43

I somehow managed to break auto-mounting for my encrypted home directory.



Every time I login via SSH, I see this:



valorin@joshua:~$ ls -la
total 44
dr-x------ 3 valorin valorin 4096 2012-03-17 17:10 .
drwxr-xr-x 7 root root 4096 2012-03-17 11:45 ..
lrwxrwxrwx 1 valorin valorin 56 2012-03-08 20:37 Access-Your-Private-Data.desktop -> /usr/share/ecryptfs-utils/ecryptfs-mount-private.desktop
-rw------- 1 valorin valorin 917 2012-03-17 19:24 .bash_history
drwx------ 3 valorin valorin 4096 2012-03-16 17:58 .cache
lrwxrwxrwx 1 valorin valorin 33 2012-03-08 20:37 .ecryptfs -> /home/.ecryptfs/valorin/.ecryptfs
-rw-r--r-- 1 root root 21954 2012-03-08 20:35 .face
lrwxrwxrwx 1 valorin valorin 32 2012-03-08 20:37 .Private -> /home/.ecryptfs/valorin/.Private
lrwxrwxrwx 1 valorin valorin 52 2012-03-08 20:37 README.txt -> /usr/share/ecryptfs-utils/ecryptfs-mount-private.txt
-rw------- 1 root root 703 2012-03-17 17:10 .viminfo


Any ideas what I've done, and how I can fix it?



UPDATE:



I have set up the SSH key authentication using the method here, which in hindsight is the reason for the non-working encrypted home directory.



So, my new question, how do I get it to automatically prompt for the password after I have logged in with the SSH auth key?


More From » ecryptfs

 Answers
6

Okay, so while it's possible to use SSH Public Key authentication to log into your system without entering a password (even if your home directory is encrypted), it's not possible to automatically mount your encrypted home directory.



To solve this, you'll need to add a line to the end of your unmounted $HOME/.profile:



ecryptfs-mount-private


This will ensure that after you've logged in using SSH Public Key authentication, you'll be prompted for your password and will mount your encrypted data. If it's already mounted, then this command should just silently succeed.



Enjoy!



Full disclosure: I'm one of the authors and maintainers of eCryptfs.


[#39702] Monday, December 6, 2021, 2 Years  [reply] [flag answer]
Only authorized users can answer the question. Please sign in first, or register a free account.
itteast

Total Points: 291
Total Questions: 123
Total Answers: 104

Location: Tuvalu
Member since Wed, Mar 29, 2023
1 Year ago
itteast questions
;