[Pkg-owncloud-maintainers] Bug#785052: Encryption

[David Prévot]

On Mon, Nov 09, 2015 at 10:18:56PM -0700, Soren Stoutner wrote:

> […] My ownCloud installation has over 80 GB of 
> encrypted files.  Decrypting and reencrypting them sounds like a lot of down time.

The migration process will anyway need to decrypt and encrypt
everything, whether that’s done during the package upgrade process, or
by the admin later (meaning that the encrypted data will be unavailable
until then, and that might even get worse if some data get uploaded in
the mean time).

A previous proposition was to decrypt the data in preinst (i.e., using
owncloud 7), then to enable it back in postinst, or later via admin
action (but that could expose data to third party). At least that might
workaround upstream migration issues, but the decryption part might not
be possible anyway (e.g., an admin probably need to have set a recovery
key, every user must have accepted this recovery method, and the
recovery key password must be handy during the package upgrade).

Regards

David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-owncloud-maintainers/attachments/20151110/d7648add/attachment.sig>