Looking for Encryption Solution

[JaredDM]

So here's my situation. I need to install some tiny single board computer systems in client locations for diagnostics, which won't be on all the time but only turned on when they are needed. On these systems, I'll have some proprietary software that I need to protect and prevent any possibility of copying. These systems will be operated strictly via remote desktop and SSH. The video ports will actually be removed/blocked during the install. These will be running some Debian variant or another, which is why I'm posting this here.

I know there are several programs that can encrypt entire partitions, but these all require the user to input a password on boot which I can't do remotely. Can anyone recommend a good solution where I can have the programs (or at least certain programs) installed in a way that they are encrypted (without needing to enter a password on boot), and input the password after remote access is gained? I'm probably just being paranoid, as the memory will be EMMC soldered right onto the board of the mini computers, but I can't risk the possibility of someone copying the software.

I'd prefer that all the program files are encrypted, that way I can add/update software without jumping through any major hoops later as well.

[cronoik]

I would recommend you ecryptfs [1]. Just put all the software you want to protect in one folder and encrypt this with ecryptfs.

[1] https://www.howtoforge.com/tutorial/how ... on-debian/

[dasein]

Lemme see if I have this straight...

In your very first post here, you are asking a bunch of FOSS wonks for gratis help copy-protecting your proprietary for-profit app.

Maybe invest the time to develop the necessary expertise yourself, or consider hiring a paid consultant.

And whaddya know, by sheer coincidence you take the time to create not one but two links to your business website in your profile, in what some would see as a blatant attempt at commercial advertisement.

Let's see what the mods think.

[GarryRicketson]

To explain, I have moved the original post with the signature, and spam link,
the link in the signature to a commercial website made it spam.
I am pretty sure when I first saw the post, there was no signature, with link,
but that was about 1:30 pm .
When I checked in now, I see the replies, and the report,..it appears the OP came back later and added the signature ,etc to their profile.
Or perhaps I just had not noticed it,..but usually that is the first thing I look at
on posts,...especially from new members.
The OP should have read this, before posting and before deciding to
add the spam link to their signature:
Forum guidelines. Please read before first post!

8.As a rule we do not accept commercial content. If you'd like to offer your Debian related services for money or you are offering a paid job please e-mail team@forums.debian.net first and it will be considered on a case by case basis.

The following might get your post REMOVED
- Advertising/ Spamming
- Obviously racist/ sexist/ hateful content
- Obviously political/ religious content
- Obvious pornographic content

And a amazing coincidence , today is their birthday as well, this is a practice
common with what are know as "profile spammers",... they make the birth date,
current, so that their name shows in the birthdays today list,..hoping people
will click it and look at the profile,..
In any event, here is a copy of the original post: (but with out the signature)

So here's my situation. I need to install some tiny single board computer systems in client locations for diagnostics, which won't be on all the time but only turned on when they are needed. On these systems, I'll have some proprietary software that I need to protect and prevent any possibility of copying. These systems will be operated strictly via remote desktop and SSH. The video ports will actually be removed/blocked during the install. These will be running some Debian variant or another, which is why I'm posting this here.

I know there are several programs that can encrypt entire partitions, but these all require the user to input a password on boot which I can't do remotely. Can anyone recommend a good solution where I can have the programs (or at least certain programs) installed in a way that they are encrypted (without needing to enter a password on boot), and input the password after remote access is gained? I'm probably just being paranoid, as the memory will be EMMC soldered right onto the board of the mini computers, but I can't risk the possibility of someone copying the software.

I'd prefer that all the program files are encrypted, that way I can add/update software without jumping through any major hoops later as well.

Since there had been replies to the post, I was not sure the best way to deal with
this,... it is easier when people do not reply to the spammer,... but maybe no one noticed at first, so that is why they replied.

[JaredDM]

OK, I'm the OP, and not looking to SPAM anything. I guess I just got lazy and didn't bother to read the rules about profile links. As someone who runs a forum myself I guess I just assumed that if you are leaving links open in the profile they are allowed. Regardless, I've removed the links from my profile.

And yes, yesterday actually was my birthday.

It's not software we developed ourselves, as we're not a programming firm. Rather it's software we have an agreement allowing us to use, and protecting it is a part of that agreement with the developer.

Was just looking for a software recommendation, nothing more.

[JaredDM]

I would recommend you ecryptfs [1]. Just put all the software you want to protect in one folder and encrypt this with ecryptfs.

[1] https://www.howtoforge.com/tutorial/how ... on-debian/

Thank you very much! That looks like just the sort of program I need.

[GarryRicketson]

And Thank you, for editing your profile.