I'd suggest using gocryptfs.I will have to rebuild my Raspberry Pi 4B setup for PiHole, PiVPN and data backup and I am thinking this may be an opportunity to encrypt my personal data as a matter of principle, say, to prevent a burglar stealing the device and accessing the files.
The setup will only have an SSD, no SD card. It will have to boot unattended, so the system can't be fully encrypted. How do you do that? And what is the performance hit like? Generally, before I waste hours and days trying to make it work only to regret it, why wouldn't it be a good idea to encrypt? From what I have read so far, it may not be worth the trouble, complexity and impact on reliability and performance, particularly when the device getting stolen is unlikely.
https://nuetzlich.net/gocryptfs/
Create an encrypted subdirectory in your home directory and put the confidential stuff there.
Since the storage is not cloud based you could also use encfs, which is Fido's favourite.
https://en.m.wikipedia.org/wiki/EncFS
One difficulty with encrypting your entire home directory is all the confidential data is available every time you are logged in. If the confidential data is kept separate, then most of the time you can keep it locked up while logged in.
In my case passwords and account numbers are the only thing in the confidential directory and I only need to access them while paying bills.
Important stuff like family photographs are kept unencrypted since it's already difficult enough to preserve that kind of data without encryption.
Statistics: Posted by ejolson — Tue Oct 15, 2024 6:06 pm