TrueCrypt 7.1 [UPDATE]

[recliq]

Is this the only drive connected? If yes try connecting a second (unencrypted) drive.

It may be the same issue as with xmounts, you only see them in OSD when dmaosd found and mounted a "normal" drive.

[Borne]

I have a small USB Drive connected with the truecrypt.app.bin on it.
Therefore all ports are busy.

Isn't there any other chance to get them working?
I finally want to run two crypted drives.
So I have to remove the small drive with truecrypt on it. Sometimes it works that Truecrypt is still running.

Does your FakeUSB-Addon work with that?

[recliq]

I finally want to run two crypted drives.
So I have to remove the small drive with truecrypt on it. Sometimes it works that Truecrypt is still running.

You should never do that!

You can use fakeUSB loaded from network with NETAPP but only on basefirmware versions before 1.05.04. fakeUSB doesn't work with 1.05.04 kernel.

I'm not sure why the truecrypt drive doesn't appear in OSD... I stated before that I don't use truecrypt on the WDTV myself.
I guess dmaosd finds the truecrypt drive, can't mount it and decides to ignore it.
You can try to mount with truecrypt in /tmp/mnt and then use xmount with unionfs or aufs to create a propper mount under /tmp/media/usb.
Also try with media library enabled/disabled.

[sp00n]

Hm, so how is this supposed to work?
You encrypt your drive and then have to mount it via telnet/SSH or use a script on boot up to auto mount (with said script including the password in plain text)? I'm not sure where the actual benefit would be in that, as the first solution is just too cumbersome and the second defeats the whole purpose of an encryption.

I guess the optiomal solution would be to work this similar to how it is handled on a PC when encrypting the boot partition with Truecryp, i.e. it asks you for the password before loading the OS. I'm not sure if this is possible at all, since you would need to actually enter the password somehow through some sort of interface.
I'd really like encryption on my WDTV Live, but it seems too impractical at the time being (and I'm afraid I'm not familiar enough with Linux to think of another solution).


Not trying to diminish the work you've done here, I just don't see how I can get this to actually work.

[recliq]

I think you're missing the point with TrueCrypt (or any other encryption tool) here.
If you want high security there's no way around typing the password by hand each time you want to mount the TrueCrypt volume.
As soon as you try to automate this with a script you'd either have to give the password in cleartext or use a keyfile which has to be on the system. Either way you lose a lot of security.

In my opinion you can't have both, security and automount.

[sp00n]

No, I think you misunderstood.
I was actually trying to point out that having to use such a script would be a massive security risk, which would render the whole encryption process pointless.
Thus I was asking if this (or mounting via telnet/SSH) was the only way to use the encryption, or if there's another way where you can manually enter the password each time the WDTV powers up, i.e. it was not in stand by. Very much alike how it is done for a PC. I'm not sure if you're familiar with it, but Truecrypt adds a decdicated boot partition for its boot loader, which requires you to enter the password before the actual OS boot loader is executed.

The problem would be how to enter the password if you're having a similar mechanic for the WDTV, as the input possibilities are limited at best. So you would either need a GUI to enter the password or maybe have the option to attach a keyboard to the device to enter the password.
Either way, I was looking for a way to NOT have to use telnet/SSH or a script which includes the password in plain text.

[recliq]

So your asking for an OSD interface for entering the password (and mount the truecrypt volume)?
Theoretically it's possible to do this on 1.02.21 firmware with WDTVExt butit would be a pain to programm, You'd have to design and programm an on-screen keyboard for user input. I think MediaNavigation plugin implements such complex functions but I never did.

Next comfortable thing I can think of right now would be to create a simple webinterface for this (as an app.bin).

[sp00n]

Actually my original question was how it is supposed to work right now.
I haven't received an answer for my original question yet, so I was just brainstorming what might be an alternative way, and the OSD was just an idea in case you do have to use telnet/SSH right now to mount the volume.

Maybe again the original question, rephrased: how do you mount the encrypted volume in your WDTV, once you actually have encrypted the partition(s) on it?

[recliq]

As I stated I'm not using this myself on WDTV but I'd say you mount it in shell, this is via telnet or ssh.

[mxxxx]

I tried truecrypt. It works without problems.

Is it possible to add a truecrypt mounted directory to the samba shares of the WDLXTV Live ?