Other Veracrypt and ntfs-3g

jcw · Oct 26, 2020

I am having a little trouble with Veracrypt and ntfs-3g.

Before I talk about that, I have confirmed the ability to use Veracrypt with msdosfs. Veracrypt seems to do the right thing when a reboot happens. Changes to the encrypted volume are synced properly.
msdosfs is a device that is in the kernel. ntfs-3g is userland if I understand things correctly.

I can mount and read an ntfs-3g volume with veracrypt. I can change the mounted volume, for example, by deleting a file. I can confirm the file is deleted via 'ls -la'. I cannot get that change to persist. I cannot unmount the volume using 'veracrypt -d'. A reboot of the system with a mounted ntfs-3g volume does not result in changes to the volume being synced. sync(8) seems to have no effect. When the volume is remounted after reboot, the previously deleted file is still there.

I took a loot at ps -ax. I observed:

Code:

1396  -  I     0:00.00 veracrypt --filesystem=ntfs-3g --fs-options mountprog=/usr/local/bin/ntfs-3g /dev/da0p1 /home/jcw/test-ntfs
1399  -  Is    0:00.06 veracrypt --filesystem=ntfs-3g --fs-options mountprog=/usr/local/bin/ntfs-3g /dev/da0p1 /home/jcw/test-ntfs
1401  -  DL    0:00.00 [md0]
1406  -  Is    0:00.00 /usr/local/bin/ntfs-3g /dev/md0 /usr/home/jcw/test-ntfs

The [md0] process is waiting for disk activity. Also, it is odd that there are two veracrypt processes.

I am new to using fuse so there is probably something I am missing here.

Does anyone have any ideas on how I can get my mounted veracrypt ntfs volumes to sync their changes to disk?

Regards,
Jason C. Wells

Nyakov · Aug 29, 2021

Any updates?
Does Veracrypt work at all on FreeBSD?

Cath O'Deray · Aug 29, 2021

Nyakov said:
Does Veracrypt work at all on FreeBSD?

I assume so. Have you tried it?

security/veracrypt – ~~no reported bugs,~~ and:

mark_j said:
Veracrypt has been rock solid for me on all platforms (except Linux).

Cath O'Deray · Aug 29, 2021

jcw said:
… probably something I am missing …

People sometimes overlook package messages.

In this case the message <https://www.freshports.org/security/veracrypt/#message> is wrong. FreeBSD bug 258147 – security/veracrypt incorrect direction to load fuse

Nyakov · Aug 29, 2021

grahamperrin said:
I assume so. Have you tried it?

I manage to make it work with UFS filesystem.

But, I cannot create other fs in volume (exFAT)
And cannot mount volume created in linux with exFAT

Code:

#veracrypt --text --fs-options "rw,mountprog=/usr/local/sbin/mount.exfat" /dev/da0 /tmp/vera

I get:

Code:

Error: WARN: volume was not unmounted cleanly.
ERROR: ublio fsync failed.
ERROR: failed to close ublio.

fuse module is loaded.
exfat-utils-1.3.0 and fusefs-exfat packages are installed.

I can mount it read only -m ro !!!

Code:

#veracrypt --text -m ro --fs-options "rw,mountprog=/usr/local/sbin/mount.exfat" /dev/da0 /tmp/vera

But cannot unmout with #veracrypt -d

Code:

Error: umount: unmount of /tmp/.veracrypt_aux_mnt1 failed: Device busy

T-Daemon · Aug 29, 2021

Might be helpful, have a look at

security/truecrypt is broken. Need advice about Veracrypt

Was able to open/use in Ubuntu but not in FreeBSD with "mount: /dev/md0: No such file or directory" Create it. It does not exist and never has, because that was your job in the first place. I have always mounted my USB drives with this command: mount -v -t msdosfs /dev/da0s1 /media/da0s1...

forums.freebsd.org

Cath O'Deray · Aug 29, 2021

Nyakov said:
… I cannot create other fs in volume (exFAT) …

Which version of FreeBSD?

Without attempting command-line usage of VeraCrypt, the application seems fine.

I created an ms-basic-data partition on a hard disk drive, created an exFAT file system in the partition, used mount.exfat-fuse(8) to mount the file system, used VeraCrypt to create a multiplatform file at the mount point then mount the encrypted volume, wrote to the volume.

FreeBSD 14.0-CURRENT.

Nyakov · Aug 29, 2021

grahamperrin said:
Which version of FreeBSD?

FreeBSD 12.2-RELEASE-p7 GENERIC amd64

grahamperrin said:
I created an ms-basic-data partition on a hard disk drive, created an exFAT file system in the partition, used mount.exfat-fuse(8) to mount the file system, used VeraCrypt to create a multiplatform file at the mount point then mount the encrypted volume, wrote to the volume.

I am trying to create (or mount) VeraCrypt on raw usb hard drive /dev/da0
With exFAT as internal file system of the VeraCrypt volume

Perhaps I am doing something really wrong?

Did you specify filesystem on creation of volume as a file?

Cath O'Deray · Aug 30, 2021

Nyakov said:
… exFAT as internal file system of the VeraCrypt volume …

This appears to be impossible.

I see two choices – FAT (the default) and UFS:

If UFS is chosen with the intention of use on other platforms, there's a suitable warning:

Cath O'Deray · Aug 30, 2021

jcw said:
… get my mounted veracrypt ntfs volumes to sync their changes to disk …

With only two types of file system available for creation – neither of which is NTFS (see above):

maybe VeraCrypt on FreeBSD lacks write support for NTFS-3G.

I have not yet tested None (no file system) as a basis for NTFS.

Nyakov said:
… /dev/da0 …

Better encrypt a partition, not an entire device. See for example <https://forums.FreeBSD.org/threads/81899/post-529398>

tunik · Oct 26, 2022

Nyakov said:
But cannot unmout with #veracrypt -d

Code:

Error: umount: unmount of /tmp/.veracrypt_aux_mnt1 failed: Device busy

FreeBSD 13.1-RELEASE GENERIC amd64, veracrypt-1.25.9.

If use just "veracrypt -d" i see too "/tmp/.veracrypt_aux_mnt1 failed: Device busy".

Good dismounts this.

Code:

umount -f  /tmp/vera && veracrypt -d

I use for mount NTFS this.

Code:

sudo veracrypt --text --pim 0 --fs-options "rw,mountprog=/usr/local/bin/ntfs-3g" --keyfiles "/home/fileKey" --protect-hidden no --slot 1 --verbose /media/file.hc /tmp/vera

If ntfs-3g mount always only in "ro" ignoring options "rw". First need fix ntfs in container (Example Win), disable hibernation, indexing ..."