Hey everyone! I've set up a CachyOS server with four hard drives in RAID 6, which my friends and I are using for a shared storage setup. We're super careful about security since we all have access, and we want to ensure that we can't see each other's files.
I'm thinking that per-file encryption could make things easier compared to using Veracrypt containers, which I imagine would be a hassle for file transfers. For example, if someone wanted to add new files to a 500GB file container, they'd have to download the entire thing, unencrypt it, add the files, re-encrypt it, and then upload it again. Yikes!
It seems like having everyone encrypt their own files individually would allow them to upload and download tiny files freely without that mess. Can anyone recommend a good free, open-source, cross-platform solution for per-file encryption, especially since most of my friends will be using Windows?
5 Answers
Remember, all encryption should be done client-side! Otherwise, the admin (you) can access the decryption keys. There are tools out there to help users encrypt their files before they reach your server. It's all about the right workflow.
If your friends are using separate user accounts and there's no root access, you might not need complex encryption. Simple file permissions can protect their files well enough. But if you're worried about having access to everything (which you should be), it makes sense to look for a per-file encryption solution. You could explore options like Ecryptfs or Cryfs for transparent file encryption.
Yeah, for user-file separation chrooting could be effective—just be careful!
You can also create a custom solution with Python using the cryptography library. It involves more setup, but you can build it to suit your needs. Just remember, the admin shouldn’t have access to the keys for this to truly work securely.
Honestly, I'd suggest encrypting your files individually before uploading them. Tools like OpenSSL or PGP can help with that. Each user can choose which files to encrypt depending on their sensitivity and trust levels.
Same here! We need something that doesn’t overcomplicate the upload process.
Exactly! But I'm curious about good encryption software that's easy to use on Windows. Recommendations?
You might want to consider using something tailored for this, like Borg backup for encrypted backups. It does a great job at encryption before sending data. Also, check out gocryptfs for a layered encrypted filesystem that's user-friendly.
Definitely! They have cross-platform support which could work perfectly.
Sounds interesting! Is it adaptable for a mixed OS environment?
True, but if you have root access, it could be risky. Each user might want to take extra precautions with important files.