Search Members Help

» Welcome Guest
[ Log In :: Register ]

Mini-ITX Boards Sale, Fanless BareBones Mini-ITX, Bootable 1G DSL USBs, 533MHz Fanless PC <-- SALE $200 each!
Get The Official Damn Small Linux Book. DSL Market , Great VPS hosting provided by Tektonic
 

[ Track this topic :: Email this topic :: Print this topic ]

reply to topic new topic new poll
Topic: crypto filesystem< Next Oldest | Next Newest >
kairos@dsl Offline





Group: Members
Posts: 3
Joined: Jan. 2006
Posted: Jan. 28 2006,11:29 QUOTE

Hi,

is it possible to create and use a crypto filesystem (e.g. /home, /tmp, /var) with dsl? How to do it? Experiences with Performance?
I use the search for this forum and google, but i can't find a topic for dsl... Thanks for help!

Kairos
Back to top
Profile PM 
kairos@dsl Offline





Group: Members
Posts: 3
Joined: Jan. 2006
Posted: Feb. 01 2006,12:34 QUOTE

no ideas for solution?
Back to top
Profile PM 
clacker Offline





Group: Members
Posts: 570
Joined: June 2004
Posted: Feb. 01 2006,13:13 QUOTE

loop-aes is included with dsl.

Here is a link to encrypted backups.

The system section of the repository holds PGP from GNU.
Back to top
Profile PM 
clacker Offline





Group: Members
Posts: 570
Joined: June 2004
Posted: Feb. 01 2006,18:33 QUOTE

As far as perfomance, not so bad.  I ran the following experiment to create a mounted loop and a mounted encrypted loop and compared the performance:

Code Sample
# create two 20M files to use as an ecrypted and unencrypted loop
dd if=/dev/zero of=secret.img bs=20M count=1
dd if=/dev/zero of=unsecret.img bs=20M count=1

# change to root and setup the two loops for use
sudo su
losetup -e aes256 -S "damnsmalllinux" /dev/loop1 secret.img
## used password=onetwothreeonetwothree
## not really secure, but this is just for timing
mke2fs -j /dev/loop1
mke2fs unsecret.img
## said y to prompt, it's OK
mkdir /mnt/efs
mkdir /mnt/uefs
mount /dev/loop1 /mnt/efs
mount unsecret.img /mnt/efs -o loop

# create a test directory and script to copy, move and delete files
mkdir test
dd if=/dev/random of=test/1Mtest bs=1M count=1
mkdir test/temp
# create the test.sh script below and make it executable
vi test/test.sh
chmod 777 test/test.sh
cp -r /home/dsl/test /mnt/efs
cp -r /home/dsl/test /mnt/uefs

# run the tests
cd test
time ./test.sh
cd /mnt/uefs/test
time ./test.sh
cd /mnt/efs/test
time ./test.sh


and this is test.sh:

Code Sample
#!/bin/bash
#test.sh
#
# copies, moves, and deletes to check loop performance

i=0

while [ $i -lt 6000 ]
do
  i=`expr $i + 1`
  cp -f 1Mtest temp/1Mtest1
  cp -f 1Mtest temp/1Mtest2
  cp -f 1Mtest temp/1Mtest3
  cp -f 1Mtest temp/1Mtest4
  mv -f temp/1Mtest1 temp/1Mtest1a
  mv -f temp/1Mtest2 temp/1Mtest2a
  mv -f temp/1Mtest3 temp/1Mtest3a
  mv -f temp/1Mtest4 temp/1Mtest4a
  rm -f temp/1Mtest1a
  rm -f temp/1Mtest2a
  rm -f temp/1Mtest3a
  rm -f temp/1Mtest4a
done


my results were:

test in /home/dsl:
real    0m49.192s
user    0m20.260s
sys     0m28.900s

test in loop mounted file:
real    0m49.802s
user    0m20.380s
sys     0m29.000s

test in encrypted loop file:
real    0m50.128s
user    0m20.260s
sys     0m29.660s

So it looks like the encrypted file system takes a very minor hit in terms of speed, maybe 2% slower.
Back to top
Profile PM 
kairos@dsl Offline





Group: Members
Posts: 3
Joined: Jan. 2006
Posted: Feb. 01 2006,21:29 QUOTE

Thank you very mutch! This is exactly, what i mean! :)
Back to top
Profile PM 
4 replies since Jan. 28 2006,11:29 < Next Oldest | Next Newest >

[ Track this topic :: Email this topic :: Print this topic ]

 
reply to topic new topic new poll
Quick Reply: crypto filesystem

Do you wish to enable your signature for this post?
Do you wish to enable emoticons for this post?
Track this topic
View All Emoticons
View iB Code