Feature request to add support for git-remote-gcrypt

[hgkamath]

Is your feature request related to a problem? Please describe. I'm in a investigation phase. I'm looking for ways to keep notes synchronized between phone and laptop, possibly using cloud storage. The notes are plaintext-markdown files created by some note-management system, and can be version controlled. Cloud storage involves privacy and security issues.

Describe the solution you'd like To use a version control repository on cloud storage, that is completely encrypted. There seems to be something called git-remote-gcrypt which creates encrypted remote git-repositories.

Describe alternatives you've considered Alternatives that seem like not a good idea:

• encrypted block storage with cloud-sync. An opensource android-app like veracrypt does not exist, but even if one were available, syncing a single large >1Gib file, may be dangerous, it could get irrecoverably corrupted during cloud-sync.
• secure block cloud storage is not free.
• android nonsuperuser user space programs cannot do fuse-based enfs/cryfs,
• cyptomator GPLv3 open-source but pre-built android-app is paid-proprietary

Alternatives that seem possible:

• direct syncing using syncthing-app, and doing version control only on laptop.
• syncthing to cloud using syncthing-app using untrusted intermediate device encryption and doing version control on locally on laptop
• rclone/rcx with encrypted remote
• use vpn and sync via nextcloud.

Other alternatives:

• I'm open to alternative ideas/suggestions.

Additional context

[root@sirius gana]# rpm -qil git-remote-gcrypt
Name        : git-remote-gcrypt
Version     : 1.4
Release     : 1.fc35
Architecture: noarch
Install Date: Sat 06 Nov 2021 09:46:21 PM IST
Group       : Unspecified
Size        : 74758
License     : GPLv3
Signature   : RSA/SHA256, Tue 14 Sep 2021 11:44:31 PM IST, Key ID db4639719867c58f
Source RPM  : git-remote-gcrypt-1.4-1.fc35.src.rpm
Build Date  : Tue 14 Sep 2021 11:41:19 PM IST
Build Host  : buildhw-x86-12.iad2.fedoraproject.org
Packager    : Fedora Project
Vendor      : Fedora Project
URL         : https://git.spwhitton.name/git-remote-gcrypt
Bug URL     : https://bugz.fedoraproject.org/git-remote-gcrypt
Summary     : GNU Privacy Guard-encrypted git remote
Description :
This lets git store git repositories in encrypted form.
It supports storing repositories on rsync or sftp servers.
It can also store the encrypted git repository inside a remote git
repository. All the regular git commands like git push and git pull
can be used to operate on such an encrypted repository.

The aim is to provide confidential, authenticated git storage and
collaboration using typical untrusted file hosts or services.
/usr/bin/git-remote-gcrypt
/usr/share/doc/git-remote-gcrypt
/usr/share/doc/git-remote-gcrypt/CHANGELOG
/usr/share/doc/git-remote-gcrypt/CONTRIBUTING.rst
/usr/share/doc/git-remote-gcrypt/README.rst
/usr/share/licenses/git-remote-gcrypt
/usr/share/licenses/git-remote-gcrypt/COPYING
/usr/share/man/man1/git-remote-gcrypt.1.gz

[root@sirius gana]# head -1  /usr/bin/git-remote-gcrypt
#!/usr/bin/sh

misc

• cloud services including google-drive/android profit by data mining user-data so unlikely to make unmine-able/unreadable syncing easy.

links

• https://git-annex.branchable.com/tips/fully_encrypted_git_repositories_with_gcrypt/
• https://github.com/spwhitton/git-remote-gcrypt/blob/master/README.rst
• https://docs.syncthing.net/branch/untrusted/html/users/untrusted.html
• https://rclone.org/docs/ , https://x0b.github.io/docs/

[dcode]

An alternative that might be easier to implement is git-crypt. This encrypts files at the path you indicate, transparently and locally. It then pushes using the standard git protocols. The upside, is it's still a standard git repo, but files are individually encrypted. The README of git-crypt admittedly states that encrypting an entire repo, git-remote-gcrypt is better suited due to performance and encryption of filenames, but git-crypt might be easier to implement.