30
12
Situation
Hi, I would like to save data with git, encrypted (on some platform like bitbucket or github). Therefore the question:
Question
I am looking for different hassle-free ways on:
How to set up an encrypted repository on bitbucket(/github)?
Now, I am new to git, thus an instruction with all necessary steps or step by step would be much appreciated!
"Research"
git-crypt
I found git-crypt, but on the site it is mentioned that it's intended for single file encryption. If one wanted to encrypt the whole repository they forward to git-remote-gcrypt.
git-remote-gcrypt
In their README.rst they put it as simple as
Quickstart
git remote add cryptremote gcrypt::rsync://example.com:repo
git push cryptremote master
> gcrypt: Setting up new repository
> gcrypt: Remote ID is :id:7VigUnLVYVtZx8oir34R
> [ more lines .. ]
> To gcrypt::[...]
> * [new branch] master -> master
or under
Examples
# notice that the target git repo must already exist and its
# `next` branch will be overwritten!
git remote add gitcrypt gcrypt::git@example.com:repo#next
git push gitcrypt master
Tries
I prefer full repository encryption, hence I tried git-remote-gcrypt
with variations of the Quickstart and Example.
So far I tried pushing an existing repository by following their instructions. Which yields this: (note: I have purposely changed the username to user
)
-> with ssh
as in the provided example
[...]/git_test$ git remote add origin gcrypt::git@bitbucket.org:user/test.git
[...]/git_test$ git push -u origin --allgcrypt: Development version -- Repository format MAY CHANGE
gcrypt: Repository not found: git@bitbucket.org:user/test.git
gcrypt: Setting up new repository
gcrypt: Remote ID is :id: ...
Zähle Objekte: 10, Fertig.
Komprimiere Objekte: 100% (6/6), Fertig.
Total 10 (delta 0), reused 0 (delta 0)
gcrypt: Encrypting to: --throw-keyids --default-recipient-self
gcrypt: Requesting manifest signature
Permission denied (publickey).
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
error: Fehler beim Versenden einiger Referenzen nach 'gcrypt::git@bitbucket.org:user/test.git'
or with https
(which worked)
[...]/git_test$ git remote add gitcrypt gcrypt::https://user@bitbucket.org/user/test.git
[...]/git_test$ git push -u gitcrypt --allgcrypt: Development version -- Repository format MAY CHANGE
Password for 'https://user@bitbucket.org':
gcrypt: Repository not found: https://user@bitbucket.org/user/test.git
gcrypt: Setting up new repository
Password for 'https://user@bitbucket.org':
gcrypt: Remote ID is :id: ...
Zähle Objekte: 10, Fertig.
Komprimiere Objekte: 100% (6/6), Fertig.
Total 10 (delta 0), reused 0 (delta 0)
gcrypt: Encrypting to: --throw-keyids --default-recipient-self
gcrypt: Requesting manifest signature
Password for 'https://user@bitbucket.org':
To gcrypt::https://user@bitbucket.org/user/test.git
* [new branch] master -> master
Branch master konfiguriert zum Folgen von Remote-Branch master von gitcrypt.
Nevertheless, I don't understand how to add users or even just pull my backup onto another machine (since my gpg key was generated locally) !?
Feel free to just answer on usage of git-remote-gcrypt
.
These might be related: - http://superuser.com/questions/676497/encrypt-files-before-sending-them-to-cloud The [filter][3]s link provided led me to believe that this is tricky usage of a git functionality that changes code(/content) upon push/pull. And the en-/de-cryption is done by the provided scripts. If that is the case, then I'd rather prefer a way that is easier to setup without the hassle of those scripts - programs like git-remote-gcrypt. Moreover this would reveal the contents of the repository, right?
– gr4nt3d – 2017-01-03T14:27:11.407>
1
Have a look at https://gist.github.com/shadowhand/873637
– Nifle – 2017-01-03T15:22:12.043@Nifle seems to be the filter method as in my first comment, right? Does this encrypt the whole repo or just file-contents? – gr4nt3d – 2017-01-03T16:10:07.970
As I added there http://superuser.com/a/1162909/626063 : simply copying the key (and secret-key) does not suffice to clone the repo to another machine.
– gr4nt3d – 2017-01-03T16:46:12.0571
Have you looked at git-remote-gcrypt or Keybase ?
– harrymc – 2017-11-10T07:43:41.807@harrymc, I have had a look at both just now. Sadly I am too busy to test these solutions, but Keybase looks like a easy all in one tool (probably hassle free, if a whole team uses it; though, I did not see compatibility with git only) and the steps at the git annex page seem to show a few steps that I had not done; so definitively a good hint. Thank you! – gr4nt3d – 2017-11-13T14:54:53.397