Frequently Asked Questions

DJCrashdummy edited this page Jun 3, 2017 · 22 revisions

How to for using zuluCrypt-cli is here: https://github.com/mhogomchungu/zuluCrypt/wiki/zuluCryt-cli-howto

How to for using zuluMount-cli is here: https://github.com/mhogomchungu/zuluCrypt/wiki/zuluMount-cli-howto

1. What is a system volume?

A "system volume" is defined as a volume that is either known to the system or resides in a hard drive that is located inside the computer. A volumes is defined to be known to the system if it has an entry in "/etc/fstab", "/etc/crypttab", "/etc/zuluCrypt/system_volumes.list" or if udev identifies it as system if udev is enabled.

2. What is a non system volume?

A "non system volume" is a volume that is either unknown to the system, resides in a hard drive that is located outside the computer (ie an external hard drive) or has an entry in "/etc/zuluCrypt/nonsystem_volumes.list".

3. How can i make a volume identified as "system" to be "non system"?

Add it to "/etc/zuluCrypt/nonsystem_volumes.list". The addition above can be done with a GUI by starting zuluCrypt-gui from root's account and then clicking the menu->options->manage system volumes.

4. How can i make a volume identified as "non system" to be "system"?

Add it to "/etc/zuluCrypt/system_volumes.list" The addition can be done with a GUI by starting zuluCryp-gui from root's account and then clicking the menu->options->manage non system volumes.

5. I can not seem to be able to create a new encrypted volume in my hard drive, what gives?

For security reasons, in "system volumes", actions like creating new volumes, adding keys to volumes or removing keys from volumes are restricted to root user or to normal users who are members of group "zulucrypt".

6. I can not seem to be able to mount an unencrypted volume in zuluMount, whats going on?

For security reasons, mounting unencrypted "system volumes" in zuluMount is restricted to root user or normal users who are a member of group "zulumount".To work around this limitation, set up the volume to have an entry in "/etc/fstab" and with "user" option set or add the following to "/etc/zuluCrypt/nonsystem_volumes.list".

7. Why is my external hard drive that is clearly "non system" identified as "system".

You must have udev enabled. This is a problem with udev and please consult its documentation to see how you can work around the problem from their end. You can set zuluCrypt/zuluMount to see the volume as non system by following instructions in entry number 3 of this FAQ. The following link gives more insight of udev's problem: http://lamarque-lvs.blogspot.com/2011/07/e-sata-solid-and-udisks-part-2.html

8. I can not seem to be able to unlock encfs volume, what is going on?

Make sure you have "encfs" program installed and its located at "/usr/bin/".

9. How do i make a debian package for zuluCrypt?

Instructions for doing so are here[1].

[1] https://raw.githubusercontent.com/mhogomchungu/zuluCrypt/master/debian_package_info/BUILD_INSTRUCTIONS

10. zuluCrypt volumes do not show up in nautilus left panel, whose bug is it?

zuluCrypt by default creates its mount points at "/run/media/private/$USER" and nautilus doesn't seem to like this path and decides to not show them.

The problem is on nautilus and i think the solution is for nautilus to display all mount points a user has access to instead of cherry picking "blessed paths" where mount point must reside for them to be displayed.

11. How do i unlock a VeraCrypt volume that uses a PIM value?

FAQ for both zuluCrypt-cli and zuluMount-cli has info on how to do it from the CLI. From GUI, this functionality is exposed only in zuluMount-gui and the prompt to enter the PIM value is in the menu that can be activated by clicking "options" button on the dialog that asks for a password to unlock a volume.

12. How do i create a VeraCrypt volume that uses a PIM value?

VeraCrypt volumes that use a PIM value can currently be created only from the terminal. An example that shows how to create a VeraCrypt volume in "/dev/sdX" that uses a PIM value of "15" and using default crypto properties is: zuluCrypt-cli -ck -d /dev/sdX -t vcrypt -g /dev/urandom.aes.xts-plain64.256.sha512.15

13. How do i mount a file system with different file system options?

The ability to mount a file system with user specified file system options is exposed only in zuluMount. In zuluMount-cli, file system options can be set using "-Y" switch. Example on how to mount a vfat file system hosted in "/dev/sdc1" with "utf8" options is: zuluMount-cli -m -d /dev/sdc1 -Y utf8 Options are separated by a comma.

It is possible to set the file system mount option in zuluMount-gui by clicking the "Options" button at the mount dialog followed by selecting "Set File System Options".

Persistent file system options can also be set through two configuration files.

/etc/zuluCrypt/fs_options configuration file hosts options that are set per volume. An example that shows two entries in the above config file that direct what volume should be mounted with what file system options is below:

 UUID="368D-0BFB" utf8
 UUID="553Q-7CA0" iocharset=iso8859-1

blkid tool can be used to find out file system's UUID.

/etc/zuluCrypt/generic_fs_options configuration file hosts options that are set per file system. An example that shows two entries in the above config file that direct what volume should be mounted with what options is below:

 vfat utf8
 ext4 data=ordered

14. Can i have a secured conversation with you?

Yes, you can send me an email at mhogomchungu@gmail.com encrypted with the following public key

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
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=VDxL
-----END PGP PUBLIC KEY BLOCK-----