Hacker News Reader

Comment by gbrindisi | Hacker News Reader

Does anybody know if there is something to seamlessly encrypt a git repository in case I don't trust the git server provider (say a VPS)?

View on HN

There's a solution with smudge/clean filters here: https://github.com/shadowhand/git-encrypt or a solution which acts as a git remote here: https://github.com/blake2-ppc/git-remote-gcrypt

Alternatively, you could just encrypt the directory that you push to remotely (probably /home/git in this tutorial), which seems like a cleaner solution: https://help.ubuntu.com/13.04/serverguide/ecryptfs.html

LUKS/dm-crypt. Super easy to use. https://wiki.archlinux.org/index.php/Dm-crypt_with_LUKS

The walkthrough is rather overwhelming.

Was it super easy to understand & set-up?

Yeah, the reality is it's about 3 additional commands to get going (over any other normal volume)...and a very short chef cookbook to automate it.

    # create a key file
    dd if=/dev/urandom of=/etc/mykeyfile.key bs=512 count=1
    # create the luks container
    cryptsetup luksFormat /dev/sdf1 /etc/mykeyfile.key
    # open the luks container
    cryptsetup luksOpen /dev/sdf1 myluksvolume --key-file /etc/mykeyfile.key
    # format the volume
    mkfs.xfs /dev/mapper/myluksvolume
    # mount the disk
    mount /dev/mapper/myluksvolume /mnt/mymountpoint

Reply on news.ycombinator.com