I've found a question with an answer here on Security StackExchange or on Unix StackExchange, but I can't find it anymore apparently :( If you find this answer already, help would be appreciated, I already searched both places extensively.
What I want to achieve is to have two different cloud providers and have the encryption key locally on my machine and have the file system of the other server mounted ENCRYPTED and for it to be secure. I know there's been an answer for this somewhere but I can't find it anymore. It contained something with mounting with
cryfs or similar. The only requirements are for it to be secure and that the other server gets mounted with an encryption layer (encrypted on transit & encrypted at rest).
What would be the most secure method for this?
As an alternative: what would be the most secure method if one of the cloud servers is trusted and the other one is just used for encrypted-only storage? By that I mean only encrypted data goes in and comes out of the storage server.
I found a good
sshfs guide here: https://unix.stackexchange.com/a/62682
But I need to somehow to combine it with
encfs or similar (the best option)
cryfsbe a good solution? also I don't need
s3fsI guess, since I'm not using S3, what should I use instead? sshfs + cryfs?