-
Notifications
You must be signed in to change notification settings - Fork 103
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
rage-mount-dir: OverlayFS that transparently decrypts age-encrypted files #233
base: main
Are you sure you want to change the base?
Conversation
Codecov Report
@@ Coverage Diff @@
## main #233 +/- ##
==========================================
- Coverage 33.79% 31.59% -2.20%
==========================================
Files 34 38 +4
Lines 3063 3307 +244
==========================================
+ Hits 1035 1045 +10
- Misses 2028 2262 +234
Continue to review full report at Codecov.
|
This creates a read-only view over the source directory.
This exposes `Send + Sync` (which is always present for `Identity` types that we parse, including `age::encrypted::Identity` after this commit) to users that require it, without adding bounds to `Identity` itself. Users who do not require these bounds can map the output of `read_identities` to drop them.
I think this looks awesome. What are your blockers? It looks like this is mainly stubs. Was it just lack of interest that stopped you from pursuing this change? Also, I'm not sure why you have fuser and fuse_mt as deps; shouldn't one be sufficient? |
If I recall correctly (and I probably don't), I ran into UX issues that I didn't have time to figure out a solution for at the time. And as this was not motivated by any personal use case (someone else suggested the idea, and I wanted to see what it would look like in practice), I ended up putting it aside as I worked on other things. As of the time of this PR, |
Usage:
rage-mount-dir -i IDENTITY [-i IDENTITY ..] DIRECTORY MOUNT_POINT
*.age
files inside the directory's subtree are checked for decryptability (by the given identities) on first interaction (when the directory containing the file is read)..age
suffix, and with a filesize equivalent to the decrypted file.Part of #188.