how to use go-fuse about go-fuse HOT 10 CLOSED

from go-fuse.

I think you need to go to the kernel space to achieve this - I do not think it is recommended. I have 0 experience with this programming space. Maybe you can find some insight in a forum dedicated to linux kernel programming.

from go-fuse.

from go-fuse.

To answer in short: you can get inspiration from this project that uses go-fuse and encrypts/decrypts the original files when you write/ read them: https://github.com/rfjakob/gocryptfs/

The long answer: Building a filesystem is hard - you first need to understand how filesystems work, after you need to implement the interfaces from this docs page: https://pkg.go.dev/github.com/hanwen/go-fuse/[email protected]/fs
That get called on each system call on your mounted folder.

You can structure your code in terms of two data structures: Directories and Files

Both of them need to implement Getattr

Your root node that gets mounted can be modeled as just a Directory.

For directories you need the: Statfs, Lookup (makes your filesystem discoverable), Readdir, Mkdir, Create (creates files), Unlink (removes files), Rmdir, Rename (to perform renames, and moves)

For files you need the: Open, Release, Write, Read, Flush, Fsync

Depending on your platform you can read on how they should behave by accessing the man page - as they are system calls on your mounted folder.

About the encryption/ decryption part. I suggest you start with the passthrough example, then you can venture into using a stream cipher in your Write method to perform the encryption and the same stream cipher in the Read method to perform the decryption.

If you want to take it a step further and use authenticated encryption you will need to work with data blocks when writing to the underlying folder and in your Getattr method for the file, you need to convert the total file size from the cipher text (stored on disk) to the plain text that is readable.

I hope this helps, and good luck!

from go-fuse.

hey, marius-enlock!
thank you for your reply.
as i know, libfuse only support decrypt/encrypt files in original dir when read/write the files in mountpoint dir.
On the contrary， I just want to decrypt/encrypt the files in original dir when i directly read/write them. i don't want to operate the files in mountpoint dir anyway.

from go-fuse.

from go-fuse.

I just want to decrypt/encrypt the files in original dir when i directly read/write them.

Silly question, how are you going to access them?

If you access them from only your program that reads/writes data to them, then you can do the encryption/ decryption on your application. You do not need go-fuse.

If you want them to be accesible by any generic application, you can achieve this using FUSE and having a virtual mountpoint.

from go-fuse.

from go-fuse.

@rfjakob @marius-enlock
You are right, fuse may not meet my needs.
I want to implement transparent encryption and decryption for file read/write on Linux, which automatically decrypts/encrypts files when I read/write them. Is there any other good solution？

from go-fuse.

not a go-fuse question.

from go-fuse.