Encryption remains active during removal of Veracrypt-protected external hard drive when accessed via NFS.

F5F Stay Refreshed Software Operating Systems Encryption remains active during removal of Veracrypt-protected external hard drive when accessed via NFS.

Encryption remains active during removal of Veracrypt-protected external hard drive when accessed via NFS.

Encryption remains active during removal of Veracrypt-protected external hard drive when accessed via NFS.

D

Desyni
Junior Member

48

08-22-2023, 02:40 PM

#1

Is there a setting in `/etc/exports` that you should activate for that drive to be removable? Right now it looks like this: /media/veracrypt1 192.168.122.0/24(rw,sync,no_root_squash,subtree_check,crossmnt). When I attempt to unmount manually using: $ sudo umount -l /media/veracrypt1 This results in the following: $ sudo cryptsetup --debug luksClose veracrypt1 # cryptsetup 2.6.1 processing "cryptsetup --debug close veracrypt1" ... The process continues. Installing SIGINT/SIGTERM handler. Unblocking interruption on signal. Allocating crypt device context by device veracrypt1. Initialising device-mapper backend library. dm version [ opencount flush ] [16384] (*1) ... Detected dm-ioctl version 4.47.0. Detected dm-crypt version 1.24.0. Device-mapper backend running with UDEV support enabled. dm status veracrypt1 [ opencount noflush ] [16384] (*1) Releasing device-mapper backend. ... After stopping `nfs-server` and `nfs-kernel-server`: $ sudo cryptsetup --debug close veracrypt1 # ... Command succeeded. Is there a way to automatically unmount this via Veracrypt software without going through all this?

D

Desyni

08-22-2023, 02:40 PM #1

Is there a setting in `/etc/exports` that you should activate for that drive to be removable? Right now it looks like this: /media/veracrypt1 192.168.122.0/24(rw,sync,no_root_squash,subtree_check,crossmnt). When I attempt to unmount manually using: $ sudo umount -l /media/veracrypt1 This results in the following: $ sudo cryptsetup --debug luksClose veracrypt1 # cryptsetup 2.6.1 processing "cryptsetup --debug close veracrypt1" ... The process continues. Installing SIGINT/SIGTERM handler. Unblocking interruption on signal. Allocating crypt device context by device veracrypt1. Initialising device-mapper backend library. dm version [ opencount flush ] [16384] (*1) ... Detected dm-ioctl version 4.47.0. Detected dm-crypt version 1.24.0. Device-mapper backend running with UDEV support enabled. dm status veracrypt1 [ opencount noflush ] [16384] (*1) Releasing device-mapper backend. ... After stopping `nfs-server` and `nfs-kernel-server`: $ sudo cryptsetup --debug close veracrypt1 # ... Command succeeded. Is there a way to automatically unmount this via Veracrypt software without going through all this?