Add a news item about data encrypted with sys-fs/encfs being unsafe. I will also mask the package for removal when the news item gets published, but with a longer time period (at least 3 months).
Bug: https://bugs.gentoo.org/960358 Signed-off-by: Viorel Munteanu <[email protected]> --- .../2025-09-12-encfs-is-unmaintained.en.txt | 25 +++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 2025-09-12-encfs-is-unmaintained/2025-09-12-encfs-is-unmaintained.en.txt diff --git a/2025-09-12-encfs-is-unmaintained/2025-09-12-encfs-is-unmaintained.en.txt b/2025-09-12-encfs-is-unmaintained/2025-09-12-encfs-is-unmaintained.en.txt new file mode 100644 index 0000000..03096e4 --- /dev/null +++ b/2025-09-12-encfs-is-unmaintained/2025-09-12-encfs-is-unmaintained.en.txt @@ -0,0 +1,25 @@ +Title: encfs is unmaintained +Author: Viorel Munteanu <[email protected]> +Posted: 2025-08-31 +Revision: 2 +News-Item-Format: 2.0 +Display-If-Installed: sys-fs/encfs + +sys-fs/encfs is effectively unmaintained upstream. Old archives are already +hard to read without it crashing [1], and no new bugfixes are expected. +Chances are data will become unreadable sooner than later. + +Upstream recommends migrating to newer alternatives, like +app-crypt/gocryptfs [2]. + +Since migrating large quantities of data can take time, please consider +migrating everything while it's still possible. + +Note: app-crypt/gocryptfs is better than encfs when used with local +storage, but it may be extremly slow over sshfs or CIFS [3]. A faster +alternative in such a case would be gocryptfs over rclone mount, or +using rclone crypt directly. + +[1] https://github.com/vgough/encfs/issues/651 +[2] https://github.com/vgough/encfs/?tab=readme-ov-file#status +[3] https://github.com/rfjakob/gocryptfs/issues/764 -- 2.49.1
