I'm on Ubuntu 16.06 LTS server and I've encrypted my home with ecryptfs following this procedure. So far so good.

What I like with ecryptfs is that it's possible to remotely reboot the machine and files are unencrypted on user login (not possible with Cryptsetup/LUKS and whole disk encryption).

Nevertheless, is it possible to have the user's home directory not being re-encrypted when he logs out? So that you just can't read things if the machine is stolen but it's possible to have cron tasks read and write from user's home.

  • No it is not possible. Just make a data directory somewhere to store scripts or other things your user does not need to encrypt. – Panther Oct 13 '16 at 17:20
  • I use this machine as a backup machine, so it's not much the backing scipts but the backed up data that must be encrypted… – Buzut Oct 13 '16 at 17:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.