feat(storage): encrypted areas layer (home, system, data/<id>) over any FS; locked until key; plaintext refused; tamper/truncation detected; tests on memory + real ext4

2026-10-27 23:55:35 +01:00
parent eb9e3efaac
commit e8191be160
8 changed files with 581 additions and 0 deletions
--- a/crates/servers/storage-server/Cargo.toml
+++ b/crates/servers/storage-server/Cargo.toml
@@ -7,6 +7,7 @@ edition = "2024"
 types = { workspace = true }

 server-framework = { workspace = true }
+filecrypt = { workspace = true }
 port-block-device = { workspace = true }
 driver-block-virtio = { workspace = true }
 libkos = { workspace = true }