[Gluster-users] encfs over glusterfs

[Andrew McGill]

I am considering running encfs over glusterfs so that I can include insecure 
boxes in the storage backend for our backups running rdiff-backup.  Actually, 
I would prefer the crypto to be done in glusterfs, but I understand that's a 
little way off.

Does anyone use this arrangement -- and are there any gotchas?  


In case you don't know, here's how the encrypted part of encfs looks:

~/.crypt$ ls -la

total 216
drwx------+  8 andrewm andrewm  4096 2009-01-13 20:47 .
drwxr-x---+ 84 andrewm andrewm 12288 2009-01-30 16:08 ..
drwx------+  7 andrewm andrewm  4096 2009-01-30 16:22 0IBZ4H3k84Id,b5SLxcUth7P
drwxr-x---+ 43 andrewm andrewm  4096 2009-01-22 13:14 8K8DI0H50LY8sA-k0M4m8au1
-rw-r-----+  1 andrewm andrewm 71923 2009-01-30 13:00 CuTVvivzRtVXW--9aIZNTUGP
drwxr-x---+ 28 andrewm andrewm  4096 2009-01-30 16:08 EgCyclxjGnsa0EYf,rpxKpAg
-rw-r-----+  1 andrewm andrewm   239 2008-06-24 22:34 .encfs5
drwx------+  4 andrewm andrewm  4096 2008-12-14 17:49 ldubuvg2gMnrI8hDUiL1QC,m
drwxr-x---+  9 andrewm andrewm 53248 2009-01-08 11:26 lM,Bh2CjGF1qp-ubU98Boqyr
drwx------+  9 andrewm andrewm  4096 2009-01-01 12:23 nuUVB4uIqfyNF8BQwEOmB4gt
lrwxrwxrwx+  1 andrewm andrewm    49 2008-09-08 08:57 
Zclx5CVF6z20FqkURS7zMhyT -> EgCyclxjGnsa0EYf,rpxKpAg/QkAtJiPaFEsGPxqwo9WAFfji


And the plaintext part of a encfs filesystem:

~/crypt$ ls -la

total 208
drwx------+  8 andrewm andrewm  4096 2009-01-13 20:47 .
drwxr-x---+ 84 andrewm andrewm 12288 2009-01-30 16:08 ..
drwxr-x---+ 43 andrewm andrewm  4096 2009-01-22 13:14 work
drwx------+  7 andrewm andrewm  4096 2009-01-30 16:22 stuff
drwx------+  9 andrewm andrewm  4096 2009-01-01 12:23 friends
lrwxrwxrwx+  1 andrewm andrewm    49 2008-09-08 08:57 me -> foo/baz
drwxr-x---+  9 andrewm andrewm 53248 2009-01-08 11:26 junk
drwx------+  4 andrewm andrewm  4096 2008-12-14 17:49 .Trash-1000
drwxr-x---+ 28 andrewm andrewm  4096 2009-01-30 16:08 morejunk
-rw-r-----+  1 andrewm andrewm 70787 2009-01-30 13:00 whatever