EncFS inside LXC with password prompt

[oliwel]

Hi All,

I am running PVE 5.4 with a remote storage system, LXC containers are provisioned using LVM based disks.

For a new project I want to add a "file based encryption" such as enfcs to one mountpoint inside the container. As it looks like adding fuse inside the container is not a good idea (https://forum.proxmox.com/threads/enable-fuse-in-lxc-container.27278/) I am looking for a solution to mount the encrypted volume on container start on the active node while providing the password on the shell.

I am aware that this will require an admin to log into the node via CLI but this is accepted.

Is there any possibility to either add encfs to the containers mountpoints or have some "callback script" on startup that adds the mountpoint after starting the container?

best regards

Oliver

 

[Stefan_R]

If logging in to the node via SSH is accepted anyway, why not just create a bindmount to a directory from your LXC and then, before starting, execute the encfs mount commands to that directory? Then LXC doesn't need FUSE at all.