Any solution for encrypted git on cloud drives?

[phono]

Hi there,

maybe someone has already a great solution for the following:

What is a good way to store git repositories on cloud drives encrypted?


I am currently trying"Cryptomator", that is working OK but sometimes had some problems, but there might come some improvements in future (i.e. WinFsp).

But maybe there is something better out there?

Thanks!

[surferxyz]

I've had an alright experience with:
https://nuetzlich.net/gocryptfs/

And a third party windows implementation:
https://github.com/bailey27/cppcryptfs

They have a simple comparison of "file encryption" software:
https://nuetzlich.net/gocryptfs/comparison/

The one problem with gocryptfs, is that it leaks exact file lengths and directory structure.

Unfortunately there is a lack of any project that does a simple directory flattening and file size obfuscation.

Cryfs does everything right, except that its file size obfuscation is not dynamic, and results in a gigantic number of files or large amount of wasted space, which cannot be controlled for when storing both large and small files in a single cryfs volume.

You can see a bit of a discussion about the file size obfuscation problem here:
https://github.com/rfjakob/gocryptfs/issues/57

Unfortunately it seems no current project is really addressing these types of issues in what I think is a reasonable way.

[phono]

Thank you very much for the quick and detailed answer!
Will check this.

So I am not alone with this problem.

[t3xc0d3]

if you are a linux user, you could also use encfs. however, my favoured solution is blackbox:

https://github.com/StackExchange/blackbox

it integrates gnupg into the whole git workflow in a transparent manner that also works within groups

[phono]

Thanks for the hint to blackbox, looks interesting, good for automation I think.
For me switching from Linux to Windows it is a bit too much trouble.

[schrodyn]

I was looking at using git-crypt.

https://www.agwa.name/projects/git-crypt/

Since it's specific to git I can protect my repository if I need to store it on a Cloud drive that doesn't support encryption.

[phono]

Thanks, yes I found about git-crypt, but it is only meant to be used for small amount of sensitive data, not for whole repositories and doesn't encrypt filenames etc.

"git-crypt does not encrypt file names, commit messages, symlink targets, gitlinks, or other metadata."

[psgama]

I use boxcryptor for storing sensitive files on OneDrive