I have been using Truecrypt with a 32gb filesystem to keep important, personal, private files in. The idea is a stranger getting into my system cannot see any of those files, including Chrome cache, passwords, etc.
Working well, but I have discovered ecryptfs and am considering using it becuz it doesn't require a fixed size file or filesystem.
The way I use Truecrypt is when Gnome starts I get a prompt (/etc/gdm3/*Session files) along with a script to mount my Truecrypt filesystem.
I would like to do similar for ecryptfs. Installed it, created my ~/.Private and ~/Private filesystems with ecryptfs-setup-private and it works.
Unfortunately, it mounts automatically at login - bad. So, I researched some and see that removing ~/.ecryptfs/wrapped-passphrase disables that capability.
But now ecryptfs-mount-private says "ERROR: Encrypted private directory is not setup properly" - bad.
Also doing "sudo mount -t ecryptfs ~/.Private ~.Private" makes me answer all the same questions as ecryptfs-setup-private - I even created a file ~/.ecryptfsrc with appropriate stuff in it - no workee.
What I would like is for, at Gnome startup, for it to ask me for my (or root) password and my passphrase similar to what Truecrypt does now for me.
But, still have to figure out how to get a simple mount or ecryptfs-mount-private to work without hassle before getting there.
Any similar thoughts or issues?