Improve encfs cookbook

Fix some things, and prepare for path-based activation. Also, comment
the buggy initial dir creation and explain manual provisioning in README
for now.
This commit is contained in:
2020-06-07 12:45:33 +02:00
parent 8918452fc5
commit 353f2c13f1
6 changed files with 50 additions and 17 deletions

View File

@@ -1,3 +1,15 @@
# kosmos_encfs
Install encfs and set up encryption for a data directory
Install encfs and set up encryption for a data directory.
## Provisioning a new machine
Add encfs to the run list and run chef before adding other cookbooks that
depends on the encfs mount.
Log into the system and create the data directory like so:
encfs /usr/local/lib/encrypted_data /mnt/data --public
When asked for config options, choose nothing (i.e. "standard"). Do NOT choose
paranoia mode, as it breaks some software, like e.g. PostgreSQL.