Después de meses de funcionamiento adecuado ecryptfs se ha corrompido y renderizado /home/ inaccesible. Cuando se ejecuta (tanto a través de una cuenta de invitado como desde un CD en vivo):
[email protected]:/media/backup/home/me# ecryptfs-mount-private
ERROR: Encrypted private directory is not setup properly`
Luego probé:
[email protected]:/media/backup/home/me# ecryptfs-recover-private
INFO: Searching for encrypted private directories (this might take a while)...
INFO: Found [/media/backup/home/.ecryptfs/me/.Private].
Try to recover this directory? [Y/n]: Y
INFO: Found your wrapped-passphrase
Do you know your LOGIN passphrase? [Y/n] n
INFO: To recover this directory, you MUST have your original MOUNT passphrase.
INFO: When you first setup your encrypted private directory, you were told to record
INFO: your MOUNT passphrase.
INFO: It should be 32 characters long, consisting of [0-9] and [a-f].
Enter your MOUNT passphrase:
INFO: Success! Private data mounted read-only at [/tmp/ecryptfs.uDWfDMCO].
[email protected]:/media/backup/home/me# ls /tmp/ecryptfs.uDWfDMCO/ECRYPTFS_FNEK_ENCRYPTED.F
Display all 124 possibilities? (y or n)'
Esto creó 124 carpetas encriptadas que aparentemente contienen mi /home/ datos. Simplemente no sé cómo acceder a estos datos. Además, mirando /var/log/syslog/ hay muchos de los siguientes errores:
Dec 3 11:19:22 ubuntu kernel: [ 1627.918209]
ecryptfs_parse_tag_70_packet: Error attempting to find auth tok for fnek sig [1b62c525049b45e0]; rc = [-2]
Dec 3 11:19:22 ubuntu kernel: [ 1627.918214]
ecryptfs_decode_and_decrypt_filename: Could not parse tag 70 packet from filename; copying through filename as-is`
Realmente me gustaría obtener ecryptfs funcionando de nuevo correctamente o al menos recuperar mis datos.
Respuesta aceptada:
Cada vez que trato de usar la frase de contraseña MOUNT, también recibo estos errores (mi carpeta de inicio cifrada no estaba dañada):
[ 2977.052719] ecryptfs_parse_tag_70_packet: Error attempting to find auth tok for fnek sig [2e1f1a0ca6f5f8f3]; rc = [-2]
[ 2977.052721] ecryptfs_decode_and_decrypt_filename: Could not parse tag 70 packet from filename; copying through filename as-is
[ 2977.052726] Could not find key with description: [2e1f1a0ca6f5f8f3]
[ 2977.052728] process_request_key_err: No key
Me las arreglé para montar con éxito mi antigua carpeta de inicio simplemente usando la frase de contraseña de INICIO DE SESIÓN, que es la contraseña original que usó cuando creó por primera vez su carpeta de inicio de ecryptfs.
host:/mnt/mountpoint/home/.ecryptfs/user> ecryptfs-recover-private .Private
INFO: Found [.Private].
Try to recover this directory? [Y/n]:
INFO: Found your wrapped-passphrase
Do you know your LOGIN passphrase? [Y/n]
INFO: Enter your LOGIN passphrase...
Passphrase:
Inserted auth tok with sig [XXXXXXXXXXXXXXXXXX] into the user session keyring
INFO: Success! Private data mounted read-only at [/tmp/ecryptfs.8dXogIbs].