marius-enlock
commented
3 weeks ago To answer in short: you can get inspiration from this project that uses go-fuse and encrypts/decrypts the original files when you write/ read them: https://github.com/rfjakob/gocryptfs/
The long answer: Building a filesystem is hard - you first need to understand how filesystems work, after you need to implement the interfaces from this docs page: https://pkg.go.dev/github.com/hanwen/go-fuse/v2@v2.5.1/fs That get called on each system call on your mounted folder.
You can structure your code in terms of two data structures: Directories and Files
Both of them need to implement Getattr
Your root node that gets mounted can be modeled as just a Directory.
For directories you need the: Statfs, Lookup (makes your filesystem discoverable), Readdir, Mkdir, Create (creates files), Unlink (removes files), Rmdir, Rename (to perform renames, and moves)
For files you need the: Open, Release, Write, Read, Flush, Fsync
Depending on your platform you can read on how they should behave by accessing the man page - as they are system calls on your mounted folder.
About the encryption/ decryption part. I suggest you start with the passthrough example, then you can venture into using a stream cipher in your Write method to perform the encryption and the same stream cipher in the Read method to perform the decryption.
If you want to take it a step further and use authenticated encryption you will need to work with data blocks when writing to the underlying folder and in your Getattr method for the file, you need to convert the total file size from the cipher text (stored on disk) to the plain text that is readable.
I hope this helps, and good luck!
kingfly629
rfjakob
usually ,libfuse monitor the modification of files in the mount-point dir, and then encrypt the original files。 I want to directly encrypt/decrypt the original files when I write/read the original files, what should i I do with fuse???