Comment 3 for bug 906550

Revision history for this message
Dustin Kirkland  (kirkland) wrote :

Taking a few notes for myself...

I was able to get ecryptfs mounting manually using the following:

# cat /root/.ecryptfsrc
key=passphrase
passphrase_passwd=8fab560fcb7f693f6e1411427c4d11d9
ecryptfs_unlink_sigs
ecryptfs_sig=3d7c87fdd9dd0964
ecryptfs_fnek_sig=e94bb6f9dad673b0
ecryptfs_xattr
ecryptfs_key_bytes=16
ecryptfs_cipher=aes
ecryptfs_passthrough=n

# cat /root/.ecryptfs/sig-cache.txt
3d7c87fdd9dd0964

# ecryptfs-add-passphrase --fnek
Passphrase: 8fab560fcb7f693f6e1411427c4d11d9
Inserted auth tok with sig [3d7c87fdd9dd0964] into the user session keyring
Inserted auth tok with sig [e94bb6f9dad673b0] into the user session keyring

# mount -t ecryptfs /home/.ecryptfs/ubuntu/.Private /mnt
Attempting to mount with the following options:
  ecryptfs_unlink_sigs
  ecryptfs_fnek_sig=e94bb6f9dad673b0
  ecryptfs_xattr_metadata
  ecryptfs_key_bytes=16
  ecryptfs_cipher=aes
  ecryptfs_sig=3d7c87fdd9dd0964
Mounted eCryptfs

And the data can be read/written just fine.

Note that the ecryptfs-add-passphrase --fnek is unfortunately necessary to get the fnek loaded. I suppose we could/should add that logic somewhere.