Hacker News Reader

Comment by Arnavion | Hacker News Reader

This is another case for only pushing encrypted files to storage hosts, unless it's against Google Drive's TOS or something. Has anyone tried it? Did Google complain?

View on HN

If you don’t know about this feature of rclone, you’re in for a treat! Combined with unionfs or mergerfs, or the builtin union function, you can have cached local decrypted mounts of locally encrypted remote mounted directories on gdrive, mirrored to a local folder.

https://rclone.org/crypt/

https://rclone.org/union/

Edit: there is also the (sorta abandoned, or finished/complete depending on your pov) plexdrive project, which does a bit of Plex server specific opinionated stuff and mounts gdrive read only, but which may help with reducing API quota usage according to some reports. I’ve never had any issues with the quotas that I’m aware of, but I did have to tune my settings a fair bit to get it dialed in on a somewhat memory constrained vps.

https://github.com/plexdrive/plexdrive

Tarsnap is entirely encrypted and the service provider can't see the keys. They run it on EC2 and S3: https://www.tarsnap.com/infrastructure.html

I have an Enterprise Gsuite account with 50 TB of encrypted data for around 5 years (this was of course prior to the rebranding). I've had no complaints from Google so far.

You use rclone, or another stack? I’m always trying new tools in this space.

Syncdocs is also an easy end-to-end encryption/sync app for Google Drive

https://syncdocs.com

Problem is it makes the apps / integrations useless. I use google drive primarily from my ipad and encrypted files would mean I can't just "save to files" and have it drop in to google drive.

yes

openssl enc -e -aes-128-cbc -in ${1} -out ${1}.cr -iter +123456 -k <password>

Reply on news.ycombinator.com