chef/site-cookbooks/kosmos_encfs/templates/mount_encfs.erb

#!/bin/sh

systemd-ask-password --echo "encfs password:" | encfs <%= @encrypted_directory %> <%= @mount_directory %> --public --stdinpass
/bin/chmod go+rx <%= @mount_directory %>
echo "Encrypted data directory mounted as <%= @mount_directory %>" > /tmp/data-dir-mounted.txt
Create an initial encfs cookbook Usage: Add the kosmos_encfs::default recipe to the run list of a node. Creating the encrypted directory will keep it mounted. After a reboot, start the encfs service and enter the password: ``` $ systemctl start encfs encfs password: ``` For now postgresql@12-main is a hardcoded dependency of the encfs Systemd unit that is automatically started once the user inputs the correct password. This list of dependency will need to be different for every server, based on the services it is running 2020-06-04 17:50:20 +00:00			`#!/bin/sh`

Use human-readable flag for encfs mount script In case someone wants to see what it does without reading a manual in the future. 2020-06-06 10:24:08 +00:00			`systemd-ask-password --echo "encfs password:" \| encfs <%= @encrypted_directory %> <%= @mount_directory %> --public --stdinpass`
Finish initial encfs cookbook and postgres adaptations 2020-06-08 15:01:24 +00:00			`/bin/chmod go+rx <%= @mount_directory %>`
Improve encfs cookbook Fix some things, and prepare for path-based activation. Also, comment the buggy initial dir creation and explain manual provisioning in README for now. 2020-06-07 10:45:33 +00:00			`echo "Encrypted data directory mounted as <%= @mount_directory %>" > /tmp/data-dir-mounted.txt`