Any solution for encrypted git on cloud drives?
 

Hi there,

maybe someone has already a great solution for the following:

What is a good way to store git repositories on cloud drives encrypted?


I am currently trying"Cryptomator", that is working OK but sometimes had some problems, but there might come some improvements in future (i.e. WinFsp).

But maybe there is something better out there?

Thanks!

I've had an alright experience with:
https://nuetzlich.net/gocryptfs/

And a third party windows implementation:
https://github.com/bailey27/cppcryptfs

They have a simple comparison of "file encryption" software:
https://nuetzlich.net/gocryptfs/comparison/

The one problem with gocryptfs, is that it leaks exact file lengths and directory structure.

Unfortunately there is a lack of any project that does a simple directory flattening and file size obfuscation.

Cryfs does everything right, except that its file size obfuscation is not dynamic, and results in a gigantic number of files or large amount of wasted space, which cannot be controlled for when storing both large and small files in a single cryfs volume.

You can see a bit of a discussion about the file size obfuscation problem here:
https://github.com/rfjakob/gocryptfs/issues/57

Unfortunately it seems no current project is really addressing these types of issues in what I think is a reasonable way.

Thank you very much for the quick and detailed answer!
Will check this.

So I am not alone with this problem.

if you are a linux user, you could also use encfs. however, my favoured solution is blackbox:

https://github.com/StackExchange/blackbox

it integrates gnupg into the whole git workflow in a transparent manner that also works within groups

Thanks for the hint to blackbox, looks interesting, good for automation I think.
For me switching from Linux to Windows it is a bit too much trouble.

I was looking at using git-crypt.

https://www.agwa.name/projects/git-crypt/

Since it's specific to git I can protect my repository if I need to store it on a Cloud drive that doesn't support encryption.

Thanks, yes I found about git-crypt, but it is only meant to be used for small amount of sensitive data, not for whole repositories and doesn't encrypt filenames etc.

"git-crypt does not encrypt file names, commit messages, symlink targets, gitlinks, or other metadata."

I use boxcryptor for storing sensitive files on OneDrive