rage-mount-dir: OverlayFS that transparently decrypts age-encrypted files #233
Conversation
Codecov Report
@@ Coverage Diff @@
## main #233 +/- ##
==========================================
- Coverage 33.79% 31.59% -2.20%
==========================================
Files 34 38 +4
Lines 3063 3307 +244
==========================================
+ Hits 1035 1045 +10
- Misses 2028 2262 +234
Continue to review full report at Codecov.
|
This creates a read-only view over the source directory.
This exposes `Send + Sync` (which is always present for `Identity` types that we parse, including `age::encrypted::Identity` after this commit) to users that require it, without adding bounds to `Identity` itself. Users who do not require these bounds can map the output of `read_identities` to drop them.
|
I think this looks awesome. What are your blockers? It looks like this is mainly stubs. Was it just lack of interest that stopped you from pursuing this change? Also, I'm not sure why you have fuser and fuse_mt as deps; shouldn't one be sufficient? |
|
If I recall correctly (and I probably don't), I ran into UX issues that I didn't have time to figure out a solution for at the time. And as this was not motivated by any personal use case (someone else suggested the idea, and I wanted to see what it would look like in practice), I ended up putting it aside as I worked on other things. As of the time of this PR, |
Usage:
rage-mount-dir -i IDENTITY [-i IDENTITY ..] DIRECTORY MOUNT_POINT*.agefiles inside the directory's subtree are checked for decryptability (by the given identities) on first interaction (when the directory containing the file is read)..agesuffix, and with a filesize equivalent to the decrypted file.Part of #188.