Add davemhammer/gocryptfs (#324)
Mount, unmount, init, and auto-mount gocryptfs volumes from Noctalia. Passwords use secret-tool (desktop keyring) plus keyctl session cache.
This commit is contained in:
Dave Hammer
@@ -0,0 +1,105 @@
|
|||||||
|
# Gocryptfs
|
||||||
|
|
||||||
|
Mount, unmount, initialize, and auto-mount [gocryptfs](https://github.com/rfjakob/gocryptfs) encrypted volumes from Noctalia — bar status, manager panel, and optional auto-mount after login.
|
||||||
|
|
||||||
|
## Plugin
|
||||||
|
|
||||||
|
| Field | Value |
|
||||||
|
| --- | --- |
|
||||||
|
| ID | `davemhammer/gocryptfs` |
|
||||||
|
| Entries | Bar widget: `status`; panel: `manager`; service: `service` |
|
||||||
|
|
||||||
|
## Requirements
|
||||||
|
|
||||||
|
Install these on `PATH` (declared in `plugin.toml` `dependencies`):
|
||||||
|
|
||||||
|
- `gocryptfs` — mount and `gocryptfs -init`
|
||||||
|
- `fusermount3` or `fusermount` — FUSE unmount (first found wins)
|
||||||
|
- `keyctl` — kernel user-keyring session cache for remembered passwords (package `keyutils`)
|
||||||
|
- `secret-tool` — Freedesktop Secret Service client for reboot-persistent passwords (package `libsecret` / `libsecret-tools`)
|
||||||
|
- `chmod` — mode bits on short-lived temp password files
|
||||||
|
- `xdg-open` — open the mount point in the file manager
|
||||||
|
- `cat` — read `/proc/mounts` for mount status
|
||||||
|
|
||||||
|
**Desktop keyring:** persistent “Remember” needs a Secret Service backend (GNOME Keyring, KeePassXC as Secret Service, etc.) running and unlocked after login. If only `keyctl` is available, remember still works for the current login session.
|
||||||
|
|
||||||
|
## Usage
|
||||||
|
|
||||||
|
Add the **status** bar widget from Settings → Bar (`davemhammer/gocryptfs:status`).
|
||||||
|
|
||||||
|
- **Left-click** — open the manager panel
|
||||||
|
- **Right-click** — refresh mount status
|
||||||
|
|
||||||
|
In the panel you can:
|
||||||
|
|
||||||
|
- Select a volume → **Mount** / **Unmount** / **Open** (file manager via `xdg-open`)
|
||||||
|
- **Edit → Remember / Forget** — store or clear the volume password (desktop keyring + session cache)
|
||||||
|
- **Add** an existing cipher directory, or **Init** a new one (`gocryptfs -init`)
|
||||||
|
- Mount with a remembered keyring password, an optional advanced passfile path, or a one-shot password prompt (optional “also remember”)
|
||||||
|
|
||||||
|
```sh
|
||||||
|
noctalia msg panel-toggle davemhammer/gocryptfs:manager
|
||||||
|
```
|
||||||
|
|
||||||
|
### Auto-mount on login
|
||||||
|
|
||||||
|
Requires all of:
|
||||||
|
|
||||||
|
1. Plugin setting **Auto-mount on login** (default on)
|
||||||
|
2. Per-volume **Auto-mount** enabled
|
||||||
|
3. A remembered keyring password (**Remember**) or an advanced passfile path
|
||||||
|
|
||||||
|
After reboot, the desktop keyring must unlock (normal login) so `secret-tool` can supply the password. The kernel session key is refilled automatically on mount.
|
||||||
|
|
||||||
|
## Settings
|
||||||
|
|
||||||
|
| Setting | Type | Default | Description |
|
||||||
|
| --- | --- | --- | --- |
|
||||||
|
| `refresh_interval` | `int` | `3` | Seconds between `/proc/mounts` polls. |
|
||||||
|
| `notify_on_action` | `bool` | `true` | Notify after mount, unmount, init, remember, and forget. |
|
||||||
|
| `create_mountpoint` | `bool` | `true` | Create the mount directory if missing before mount. |
|
||||||
|
| `auto_mount` | `bool` | `true` | Global switch: on service start, queue volumes that have auto-mount + keyring/passfile. |
|
||||||
|
| `show_count` | `bool` (widget) | `true` | Show `mounted/total` on the bar. |
|
||||||
|
| `glyph_color` | `select` (widget) | `on_surface` | Lock icon color when nothing is mounted. |
|
||||||
|
| `mounted_color` | `select` (widget) | `tertiary` | Icon/dot color when at least one volume is mounted. |
|
||||||
|
| `unmounted_color` | `select` (widget) | `on_surface_variant` | Status-dot color when nothing is mounted. |
|
||||||
|
|
||||||
|
## IPC
|
||||||
|
|
||||||
|
```sh
|
||||||
|
noctalia msg panel-toggle davemhammer/gocryptfs:manager
|
||||||
|
noctalia msg plugin davemhammer/gocryptfs:service all refresh
|
||||||
|
noctalia msg plugin davemhammer/gocryptfs:service all reload
|
||||||
|
noctalia msg plugin davemhammer/gocryptfs:service all automount
|
||||||
|
```
|
||||||
|
|
||||||
|
- `refresh` — re-read `/proc/mounts` and refresh the snapshot
|
||||||
|
- `reload` — reload `volumes.json` from the plugin data dir, clear the auto-mount queue, then refresh
|
||||||
|
- `automount` — reset the auto-mount schedule and refresh (eligible volumes are queued again on the next status pass)
|
||||||
|
|
||||||
|
## Notes
|
||||||
|
|
||||||
|
### Data and filesystem
|
||||||
|
|
||||||
|
- Volume definitions live under the plugin data directory as `volumes.json` (not inside the cipher directory).
|
||||||
|
- With **Create mount points** on, the service may `mkdir` the configured mount path before mounting.
|
||||||
|
- Cipher, mount, and passfile paths reject empty values, NUL, and `..` segments. Symlinks on those paths are followed by design (user-chosen paths).
|
||||||
|
|
||||||
|
### Secrets (no long-lived plaintext under plugin data)
|
||||||
|
|
||||||
|
**Remember password** does **not** write a long-lived password file under the plugin data dir. It stores the secret in:
|
||||||
|
|
||||||
|
1. **Desktop keyring** via `secret-tool` — attributes `service=noctalia-gocryptfs`, `volume-id=<volume-id>`. Survives reboot while the login keyring is unlocked.
|
||||||
|
2. **Kernel session keyring** via `keyctl` — description `noctalia-gocryptfs:<volume-id>`. Fast cache for this login only; cleared on reboot/logout.
|
||||||
|
|
||||||
|
On mount / auto-mount, the service prefers the session key; if missing, it hydrates from `secret-tool` into `keyctl`, then runs `gocryptfs -extpass keyctl pipe <id>`. Fallback: `gocryptfs -extpass secret-tool lookup …`.
|
||||||
|
|
||||||
|
- One-shot typed passwords use a short-lived file under `/dev/shm` (tmpfs) when available, then delete it.
|
||||||
|
- Optional **advanced** passfile paths remain supported for users who manage their own files (plaintext by user choice; not recommended).
|
||||||
|
- **Forget** and volume remove clear both the desktop keyring entry and the session key.
|
||||||
|
- Passwords are not logged.
|
||||||
|
|
||||||
|
### Processes and network
|
||||||
|
|
||||||
|
- Spawns: `gocryptfs`, `fusermount3` or `fusermount`, `keyctl`, `secret-tool`, `chmod`, `cat` (`/proc/mounts`), `xdg-open`.
|
||||||
|
- **Network:** none.
|
||||||
@@ -0,0 +1,878 @@
|
|||||||
|
--!nonstrict
|
||||||
|
-- Gocryptfs manager panel: list, mount/unmount, add/edit, init, password prompt.
|
||||||
|
|
||||||
|
local STATE_KEY = "gocrypt_snapshot"
|
||||||
|
local COMMAND_KEY = "gocrypt_command"
|
||||||
|
local RESULT_KEY = "gocrypt_action_result"
|
||||||
|
|
||||||
|
local snapshot = noctalia.state.get(STATE_KEY) or {
|
||||||
|
available = false,
|
||||||
|
loading = true,
|
||||||
|
busy = false,
|
||||||
|
volumes = {},
|
||||||
|
mountedCount = 0,
|
||||||
|
totalCount = 0,
|
||||||
|
error = "",
|
||||||
|
updatedAt = 0,
|
||||||
|
revision = 0,
|
||||||
|
}
|
||||||
|
|
||||||
|
local selectedId = ""
|
||||||
|
local requestCounter = 0
|
||||||
|
local feedback = ""
|
||||||
|
local feedbackError = false
|
||||||
|
local dirty = true
|
||||||
|
|
||||||
|
-- views: "list" | "form" | "password"
|
||||||
|
local view = "list"
|
||||||
|
local formMode = "add" -- add | edit | init
|
||||||
|
local formGeneration = 0
|
||||||
|
local formName = ""
|
||||||
|
local formCipher = ""
|
||||||
|
local formMount = ""
|
||||||
|
local formPassfile = ""
|
||||||
|
local formAllowOther = false
|
||||||
|
local formReadOnly = false
|
||||||
|
local formAutoMount = false
|
||||||
|
local formPlaintextNames = false
|
||||||
|
local formAesSiv = false
|
||||||
|
local formSavePassfile = true
|
||||||
|
local formPassword = ""
|
||||||
|
local formPasswordConfirm = ""
|
||||||
|
local formPasswordKey = 0
|
||||||
|
local formError = ""
|
||||||
|
local formEditId = ""
|
||||||
|
|
||||||
|
local passwordVolumeId = ""
|
||||||
|
local passwordVolumeName = ""
|
||||||
|
local passwordValue = ""
|
||||||
|
local passwordKey = 0
|
||||||
|
local passwordError = ""
|
||||||
|
-- "mount" | "store_keyring"
|
||||||
|
local passwordMode = "mount"
|
||||||
|
local passwordRememberKeyring = true
|
||||||
|
|
||||||
|
local render
|
||||||
|
|
||||||
|
local function tr(key, subst)
|
||||||
|
return noctalia.tr(key, subst)
|
||||||
|
end
|
||||||
|
|
||||||
|
local function nextRequestId()
|
||||||
|
requestCounter += 1
|
||||||
|
return `panel-{requestCounter}`
|
||||||
|
end
|
||||||
|
|
||||||
|
local function sendCommand(action, values)
|
||||||
|
local command = {
|
||||||
|
action = action,
|
||||||
|
requestId = nextRequestId(),
|
||||||
|
}
|
||||||
|
if type(values) == "table" then
|
||||||
|
for key, value in pairs(values) do
|
||||||
|
command[key] = value
|
||||||
|
end
|
||||||
|
end
|
||||||
|
noctalia.state.set(COMMAND_KEY, command)
|
||||||
|
return command.requestId
|
||||||
|
end
|
||||||
|
|
||||||
|
local function selectedVolume()
|
||||||
|
if selectedId == "" then
|
||||||
|
return nil
|
||||||
|
end
|
||||||
|
for _, vol in ipairs(snapshot.volumes or {}) do
|
||||||
|
if vol.id == selectedId then
|
||||||
|
return vol
|
||||||
|
end
|
||||||
|
end
|
||||||
|
return nil
|
||||||
|
end
|
||||||
|
|
||||||
|
local function resetForm()
|
||||||
|
formName = ""
|
||||||
|
formCipher = ""
|
||||||
|
formMount = ""
|
||||||
|
formPassfile = ""
|
||||||
|
formAllowOther = false
|
||||||
|
formReadOnly = false
|
||||||
|
formAutoMount = true
|
||||||
|
formPlaintextNames = false
|
||||||
|
formAesSiv = false
|
||||||
|
formSavePassfile = true
|
||||||
|
formPassword = ""
|
||||||
|
formPasswordConfirm = ""
|
||||||
|
formPasswordKey += 1
|
||||||
|
formError = ""
|
||||||
|
formEditId = ""
|
||||||
|
formGeneration += 1
|
||||||
|
end
|
||||||
|
|
||||||
|
local function fillFormFrom(vol)
|
||||||
|
formName = tostring(vol.name or "")
|
||||||
|
formCipher = tostring(vol.cipherDir or "")
|
||||||
|
formMount = tostring(vol.mountPoint or "")
|
||||||
|
formPassfile = tostring(vol.passfile or "")
|
||||||
|
formAllowOther = vol.allowOther == true
|
||||||
|
formReadOnly = vol.readOnly == true
|
||||||
|
formAutoMount = vol.autoMount == true
|
||||||
|
formPlaintextNames = false
|
||||||
|
formAesSiv = false
|
||||||
|
formSavePassfile = false
|
||||||
|
formPassword = ""
|
||||||
|
formPasswordConfirm = ""
|
||||||
|
formPasswordKey += 1
|
||||||
|
formError = ""
|
||||||
|
formEditId = tostring(vol.id or "")
|
||||||
|
formGeneration += 1
|
||||||
|
end
|
||||||
|
|
||||||
|
local function statusColor(vol)
|
||||||
|
if vol.mounted then
|
||||||
|
return "tertiary"
|
||||||
|
end
|
||||||
|
if vol.cipherExists == false or vol.initialized == false then
|
||||||
|
return "error"
|
||||||
|
end
|
||||||
|
return "on_surface_variant"
|
||||||
|
end
|
||||||
|
|
||||||
|
local function volumeCard(vol)
|
||||||
|
local selected = vol.id == selectedId
|
||||||
|
local statusText = vol.mounted and tr("panel.status.mounted") or tr("panel.status.unmounted")
|
||||||
|
local summary = `{vol.name} · {statusText} · {vol.mountPoint}`
|
||||||
|
|
||||||
|
return ui.button({
|
||||||
|
key = vol.id,
|
||||||
|
text = summary,
|
||||||
|
glyph = vol.mounted and "lock-open" or "lock",
|
||||||
|
contentAlign = "start",
|
||||||
|
variant = selected and "primary" or "outline",
|
||||||
|
selected = selected,
|
||||||
|
onClick = function()
|
||||||
|
selectedId = vol.id
|
||||||
|
feedback = ""
|
||||||
|
render()
|
||||||
|
end,
|
||||||
|
})
|
||||||
|
end
|
||||||
|
|
||||||
|
local function selectionToolbar()
|
||||||
|
local vol = selectedVolume()
|
||||||
|
if vol == nil then
|
||||||
|
return ui.label({ text = tr("panel.select_hint"), color = "on_surface_variant" })
|
||||||
|
end
|
||||||
|
|
||||||
|
local mounted = vol.mounted == true
|
||||||
|
local busy = snapshot.busy == true
|
||||||
|
local hasPassfile = type(vol.passfile) == "string" and vol.passfile ~= ""
|
||||||
|
local useKeyring = vol.useKeyring == true
|
||||||
|
local hints = {}
|
||||||
|
if useKeyring then
|
||||||
|
table.insert(hints, tr("panel.keyring_hint"))
|
||||||
|
elseif hasPassfile then
|
||||||
|
table.insert(hints, tr("panel.passfile_hint"))
|
||||||
|
end
|
||||||
|
if vol.autoMount == true and (useKeyring or hasPassfile) then
|
||||||
|
table.insert(hints, tr("panel.automount_hint"))
|
||||||
|
end
|
||||||
|
|
||||||
|
local buttons = {
|
||||||
|
ui.button({
|
||||||
|
text = mounted and tr("actions.unmount") or tr("actions.mount"),
|
||||||
|
glyph = mounted and "lock" or "lock-open",
|
||||||
|
variant = "primary",
|
||||||
|
enabled = not busy and snapshot.available == true,
|
||||||
|
onClick = "onToggleMount",
|
||||||
|
}),
|
||||||
|
ui.button({
|
||||||
|
text = tr("actions.open"),
|
||||||
|
glyph = "folder-open",
|
||||||
|
variant = "outline",
|
||||||
|
enabled = not busy,
|
||||||
|
onClick = "onOpenMount",
|
||||||
|
}),
|
||||||
|
ui.button({
|
||||||
|
text = tr("actions.edit"),
|
||||||
|
glyph = "edit",
|
||||||
|
variant = "outline",
|
||||||
|
enabled = not busy and not mounted,
|
||||||
|
onClick = "onEdit",
|
||||||
|
}),
|
||||||
|
ui.button({
|
||||||
|
text = tr("actions.remove"),
|
||||||
|
glyph = "trash",
|
||||||
|
variant = "destructive",
|
||||||
|
enabled = not busy and not mounted,
|
||||||
|
onClick = "onRemove",
|
||||||
|
}),
|
||||||
|
}
|
||||||
|
|
||||||
|
return ui.column({ gap = 4, padding = 10, fill = "surface_variant/0.45", radius = 10 }, {
|
||||||
|
ui.row({ gap = 8, align = "center" }, {
|
||||||
|
ui.glyph({ name = mounted and "lock-open" or "lock", size = 18, color = statusColor(vol) }),
|
||||||
|
ui.label({ text = tostring(vol.name), fontWeight = "bold", flexGrow = 1, maxLines = 1 }),
|
||||||
|
ui.label({
|
||||||
|
text = mounted and tr("panel.status.mounted") or tr("panel.status.unmounted"),
|
||||||
|
color = statusColor(vol),
|
||||||
|
fontSize = 12,
|
||||||
|
}),
|
||||||
|
}),
|
||||||
|
ui.label({
|
||||||
|
text = tr("panel.cipher", { path = vol.cipherDir }),
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontSize = 12,
|
||||||
|
maxLines = 1,
|
||||||
|
}),
|
||||||
|
ui.label({
|
||||||
|
text = tr("panel.mountpoint", { path = vol.mountPoint }),
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontSize = 12,
|
||||||
|
maxLines = 1,
|
||||||
|
}),
|
||||||
|
ui.label({
|
||||||
|
text = table.concat(hints, " · "),
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontSize = 11,
|
||||||
|
visible = #hints > 0,
|
||||||
|
}),
|
||||||
|
ui.row({ gap = 6, align = "center" }, buttons),
|
||||||
|
})
|
||||||
|
end
|
||||||
|
|
||||||
|
local function volumeList()
|
||||||
|
local vols = snapshot.volumes or {}
|
||||||
|
if #vols == 0 then
|
||||||
|
return ui.column({ align = "center", padding = 24, gap = 8 }, {
|
||||||
|
ui.glyph({ name = "lock", size = 42, color = "on_surface_variant" }),
|
||||||
|
ui.label({ text = tr("panel.empty"), color = "on_surface_variant", textAlign = "center" }),
|
||||||
|
})
|
||||||
|
end
|
||||||
|
local rows = {}
|
||||||
|
for _, vol in ipairs(vols) do
|
||||||
|
table.insert(rows, volumeCard(vol))
|
||||||
|
end
|
||||||
|
return ui.column({ gap = 8 }, rows)
|
||||||
|
end
|
||||||
|
|
||||||
|
local function formTitle()
|
||||||
|
if formMode == "edit" then
|
||||||
|
return tr("panel.edit_title")
|
||||||
|
end
|
||||||
|
if formMode == "init" then
|
||||||
|
return tr("panel.init_title")
|
||||||
|
end
|
||||||
|
return tr("panel.add_title")
|
||||||
|
end
|
||||||
|
|
||||||
|
local function formView()
|
||||||
|
local isInit = formMode == "init"
|
||||||
|
local children = {
|
||||||
|
ui.row({ gap = 8, align = "center" }, {
|
||||||
|
ui.label({ text = formTitle(), fontSize = 16, fontWeight = "bold", flexGrow = 1 }),
|
||||||
|
ui.button({ glyph = "close", onClick = "onCancelForm" }),
|
||||||
|
}),
|
||||||
|
ui.label({
|
||||||
|
text = isInit and tr("panel.init_help") or "",
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontSize = 12,
|
||||||
|
visible = isInit,
|
||||||
|
}),
|
||||||
|
ui.label({ text = tr("panel.field.name"), color = "on_surface_variant" }),
|
||||||
|
ui.input({
|
||||||
|
key = `form-name-{formGeneration}`,
|
||||||
|
value = formName,
|
||||||
|
placeholder = tr("panel.field.name_placeholder"),
|
||||||
|
onChange = "onFormName",
|
||||||
|
}),
|
||||||
|
ui.label({ text = tr("panel.field.cipher"), color = "on_surface_variant" }),
|
||||||
|
ui.input({
|
||||||
|
key = `form-cipher-{formGeneration}`,
|
||||||
|
value = formCipher,
|
||||||
|
placeholder = tr("panel.field.cipher_placeholder"),
|
||||||
|
onChange = "onFormCipher",
|
||||||
|
}),
|
||||||
|
ui.label({ text = tr("panel.field.mount"), color = "on_surface_variant" }),
|
||||||
|
ui.input({
|
||||||
|
key = `form-mount-{formGeneration}`,
|
||||||
|
value = formMount,
|
||||||
|
placeholder = tr("panel.field.mount_placeholder"),
|
||||||
|
onChange = "onFormMount",
|
||||||
|
}),
|
||||||
|
}
|
||||||
|
|
||||||
|
if isInit then
|
||||||
|
table.insert(children, ui.label({ text = tr("panel.field.password"), color = "on_surface_variant" }))
|
||||||
|
table.insert(children, ui.input({
|
||||||
|
key = `form-pw-{formGeneration}-{formPasswordKey}`,
|
||||||
|
value = "",
|
||||||
|
placeholder = tr("panel.password_placeholder"),
|
||||||
|
password = true,
|
||||||
|
onChange = "onFormPassword",
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.label({ text = tr("panel.field.password_confirm"), color = "on_surface_variant" }))
|
||||||
|
table.insert(children, ui.input({
|
||||||
|
key = `form-pw2-{formGeneration}-{formPasswordKey}`,
|
||||||
|
value = "",
|
||||||
|
placeholder = tr("panel.field.password_confirm_placeholder"),
|
||||||
|
password = true,
|
||||||
|
onChange = "onFormPasswordConfirm",
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.row({ gap = 10, align = "center" }, {
|
||||||
|
ui.toggle({ checked = formPlaintextNames, onChange = "onFormPlaintextNames" }),
|
||||||
|
ui.label({ text = tr("panel.field.plaintextnames"), flexGrow = 1 }),
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.row({ gap = 10, align = "center" }, {
|
||||||
|
ui.toggle({ checked = formAesSiv, onChange = "onFormAesSiv" }),
|
||||||
|
ui.label({ text = tr("panel.field.aessiv"), flexGrow = 1 }),
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.row({ gap = 10, align = "center" }, {
|
||||||
|
ui.toggle({ checked = formSavePassfile, onChange = "onFormSavePassfile" }),
|
||||||
|
ui.label({ text = tr("panel.field.save_passfile"), flexGrow = 1 }),
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.row({ gap = 10, align = "center", visible = formSavePassfile }, {
|
||||||
|
ui.toggle({ checked = formAutoMount, onChange = "onFormAutoMount" }),
|
||||||
|
ui.label({ text = tr("panel.field.auto_mount"), flexGrow = 1 }),
|
||||||
|
}))
|
||||||
|
else
|
||||||
|
-- Edit existing volume: keyring remember/forget + advanced passfile
|
||||||
|
local editVol = selectedVolume()
|
||||||
|
local editHasKeyring = editVol and editVol.useKeyring == true
|
||||||
|
table.insert(children, ui.label({
|
||||||
|
text = tr("panel.field.keyring_section"),
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontWeight = "bold",
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.label({
|
||||||
|
text = editHasKeyring and tr("panel.keyring_hint") or tr("panel.keyring_not_set"),
|
||||||
|
color = editHasKeyring and "tertiary" or "on_surface_variant",
|
||||||
|
fontSize = 12,
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.row({ gap = 8, align = "center" }, {
|
||||||
|
ui.button({
|
||||||
|
text = tr("actions.remember"),
|
||||||
|
glyph = "key",
|
||||||
|
variant = "outline",
|
||||||
|
enabled = snapshot.busy ~= true,
|
||||||
|
onClick = "onRememberKeyring",
|
||||||
|
}),
|
||||||
|
ui.button({
|
||||||
|
text = tr("actions.forget"),
|
||||||
|
glyph = "key-off",
|
||||||
|
variant = "destructive",
|
||||||
|
enabled = snapshot.busy ~= true and editHasKeyring == true,
|
||||||
|
onClick = "onForgetKeyring",
|
||||||
|
}),
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.label({
|
||||||
|
text = tr("panel.keyring_help"),
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontSize = 11,
|
||||||
|
maxLines = 4,
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.label({ text = tr("panel.field.passfile"), color = "on_surface_variant" }))
|
||||||
|
table.insert(children, ui.input({
|
||||||
|
key = `form-passfile-{formGeneration}`,
|
||||||
|
value = formPassfile,
|
||||||
|
placeholder = tr("panel.field.passfile_placeholder"),
|
||||||
|
onChange = "onFormPassfile",
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.row({ gap = 10, align = "center" }, {
|
||||||
|
ui.toggle({ checked = formAutoMount, onChange = "onFormAutoMount" }),
|
||||||
|
ui.label({ text = tr("panel.field.auto_mount"), flexGrow = 1 }),
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.label({
|
||||||
|
text = tr("panel.field.auto_mount_help"),
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontSize = 11,
|
||||||
|
}))
|
||||||
|
end
|
||||||
|
|
||||||
|
table.insert(children, ui.row({ gap = 10, align = "center" }, {
|
||||||
|
ui.toggle({ checked = formAllowOther, onChange = "onFormAllowOther" }),
|
||||||
|
ui.label({ text = tr("panel.field.allow_other"), flexGrow = 1 }),
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.row({ gap = 10, align = "center" }, {
|
||||||
|
ui.toggle({ checked = formReadOnly, onChange = "onFormReadOnly" }),
|
||||||
|
ui.label({ text = tr("panel.field.read_only"), flexGrow = 1 }),
|
||||||
|
}))
|
||||||
|
table.insert(children, ui.label({ text = formError, color = "error", visible = formError ~= "" }))
|
||||||
|
table.insert(children, ui.row({ justify = "end", gap = 8 }, {
|
||||||
|
ui.button({ text = tr("actions.cancel"), variant = "outline", onClick = "onCancelForm" }),
|
||||||
|
ui.button({
|
||||||
|
text = isInit and tr("actions.init") or tr("actions.save"),
|
||||||
|
glyph = isInit and "shield-lock" or "check",
|
||||||
|
variant = "primary",
|
||||||
|
enabled = snapshot.busy ~= true,
|
||||||
|
onClick = "onSaveForm",
|
||||||
|
}),
|
||||||
|
}))
|
||||||
|
|
||||||
|
return ui.scroll({ flexGrow = 1, gap = 10 }, children)
|
||||||
|
end
|
||||||
|
|
||||||
|
local function passwordView()
|
||||||
|
local isStore = passwordMode == "store_keyring"
|
||||||
|
local title = isStore
|
||||||
|
and tr("panel.keyring_title", { name = passwordVolumeName })
|
||||||
|
or tr("panel.password_title", { name = passwordVolumeName })
|
||||||
|
local confirmText = isStore and tr("actions.remember") or tr("actions.mount")
|
||||||
|
local confirmGlyph = isStore and "key" or "lock-open"
|
||||||
|
local children = {
|
||||||
|
ui.row({ gap = 8, align = "center" }, {
|
||||||
|
ui.label({
|
||||||
|
text = title,
|
||||||
|
fontSize = 16,
|
||||||
|
fontWeight = "bold",
|
||||||
|
flexGrow = 1,
|
||||||
|
}),
|
||||||
|
ui.button({ glyph = "close", onClick = "onCancelPassword" }),
|
||||||
|
}),
|
||||||
|
ui.label({
|
||||||
|
text = isStore and tr("panel.keyring_label") or tr("panel.password_label"),
|
||||||
|
color = "on_surface_variant",
|
||||||
|
}),
|
||||||
|
ui.input({
|
||||||
|
key = "pw_" .. tostring(passwordKey),
|
||||||
|
value = "",
|
||||||
|
placeholder = tr("panel.password_placeholder"),
|
||||||
|
password = true,
|
||||||
|
focus = true,
|
||||||
|
onChange = "onPasswordChange",
|
||||||
|
onSubmit = "onConfirmPassword",
|
||||||
|
}),
|
||||||
|
}
|
||||||
|
if not isStore then
|
||||||
|
table.insert(children, ui.row({ gap = 10, align = "center" }, {
|
||||||
|
ui.toggle({ checked = passwordRememberKeyring, onChange = "onPasswordRemember" }),
|
||||||
|
ui.label({ text = tr("panel.remember_keyring"), flexGrow = 1 }),
|
||||||
|
}))
|
||||||
|
else
|
||||||
|
table.insert(children, ui.label({
|
||||||
|
text = tr("panel.keyring_help"),
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontSize = 11,
|
||||||
|
maxLines = 4,
|
||||||
|
}))
|
||||||
|
end
|
||||||
|
table.insert(children, ui.label({ text = passwordError, color = "error", visible = passwordError ~= "" }))
|
||||||
|
table.insert(children, ui.row({ justify = "end", gap = 8 }, {
|
||||||
|
ui.button({ text = tr("actions.cancel"), variant = "outline", onClick = "onCancelPassword" }),
|
||||||
|
ui.button({
|
||||||
|
text = confirmText,
|
||||||
|
glyph = confirmGlyph,
|
||||||
|
variant = "primary",
|
||||||
|
enabled = snapshot.busy ~= true,
|
||||||
|
onClick = "onConfirmPassword",
|
||||||
|
}),
|
||||||
|
}))
|
||||||
|
return ui.column({ flexGrow = 1, gap = 12 }, children)
|
||||||
|
end
|
||||||
|
|
||||||
|
local function listView()
|
||||||
|
local statusRows = {}
|
||||||
|
if snapshot.loading == true then
|
||||||
|
table.insert(statusRows, ui.label({ text = tr("panel.loading"), color = "on_surface_variant" }))
|
||||||
|
end
|
||||||
|
if snapshot.busy == true then
|
||||||
|
table.insert(statusRows, ui.label({ text = tr("panel.busy"), color = "primary" }))
|
||||||
|
end
|
||||||
|
if type(snapshot.error) == "string" and snapshot.error ~= "" then
|
||||||
|
table.insert(statusRows, ui.label({ text = snapshot.error, color = "error", maxLines = 2 }))
|
||||||
|
end
|
||||||
|
if feedback ~= "" then
|
||||||
|
table.insert(statusRows, ui.label({
|
||||||
|
text = feedback,
|
||||||
|
color = feedbackError and "error" or "tertiary",
|
||||||
|
maxLines = 2,
|
||||||
|
}))
|
||||||
|
end
|
||||||
|
|
||||||
|
return ui.column({ flexGrow = 1, gap = 10 }, {
|
||||||
|
selectionToolbar(),
|
||||||
|
ui.column({ gap = 3 }, statusRows),
|
||||||
|
ui.scroll({ flexGrow = 1, gap = 8 }, { volumeList() }),
|
||||||
|
})
|
||||||
|
end
|
||||||
|
|
||||||
|
render = function()
|
||||||
|
dirty = false
|
||||||
|
|
||||||
|
local content
|
||||||
|
if view == "form" then
|
||||||
|
content = formView()
|
||||||
|
elseif view == "password" then
|
||||||
|
content = passwordView()
|
||||||
|
else
|
||||||
|
content = listView()
|
||||||
|
end
|
||||||
|
|
||||||
|
panel.render(ui.column({ flexGrow = 1, gap = 10 }, {
|
||||||
|
ui.row({ align = "center", gap = 8 }, {
|
||||||
|
ui.glyph({
|
||||||
|
name = "lock",
|
||||||
|
size = 24,
|
||||||
|
color = snapshot.available and "primary" or "on_surface_variant",
|
||||||
|
}),
|
||||||
|
ui.column({ flexGrow = 1, gap = 0 }, {
|
||||||
|
ui.label({ text = tr("title"), fontSize = 18, fontWeight = "bold" }),
|
||||||
|
ui.label({
|
||||||
|
text = tr("panel.subtitle"),
|
||||||
|
fontSize = 11,
|
||||||
|
color = "on_surface_variant",
|
||||||
|
}),
|
||||||
|
}),
|
||||||
|
ui.button({
|
||||||
|
text = tr("actions.init"),
|
||||||
|
glyph = "shield-lock",
|
||||||
|
variant = "outline",
|
||||||
|
visible = view == "list",
|
||||||
|
onClick = "onInit",
|
||||||
|
}),
|
||||||
|
ui.button({
|
||||||
|
text = tr("actions.add"),
|
||||||
|
glyph = "plus",
|
||||||
|
variant = "outline",
|
||||||
|
visible = view == "list",
|
||||||
|
onClick = "onAdd",
|
||||||
|
}),
|
||||||
|
ui.button({
|
||||||
|
text = tr("actions.refresh"),
|
||||||
|
glyph = "refresh",
|
||||||
|
variant = "outline",
|
||||||
|
visible = view == "list",
|
||||||
|
onClick = "onRefresh",
|
||||||
|
}),
|
||||||
|
ui.button({ glyph = "close", onClick = "onCloseClicked" }),
|
||||||
|
}),
|
||||||
|
content,
|
||||||
|
ui.label({
|
||||||
|
text = (snapshot.updatedAt or 0) > 0
|
||||||
|
and tr("panel.updated", { time = noctalia.formatTime("%H:%M:%S", snapshot.updatedAt) })
|
||||||
|
or "",
|
||||||
|
color = "on_surface_variant",
|
||||||
|
fontSize = 11,
|
||||||
|
visible = view == "list",
|
||||||
|
}),
|
||||||
|
}))
|
||||||
|
end
|
||||||
|
|
||||||
|
noctalia.state.watch(STATE_KEY, function(value)
|
||||||
|
if type(value) ~= "table" then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
-- Always re-render on snapshot publish. Mounted flags live inside
|
||||||
|
-- volumes[] and must update the list immediately after mount/unmount.
|
||||||
|
snapshot = value
|
||||||
|
if selectedId ~= "" and selectedVolume() == nil then
|
||||||
|
selectedId = ""
|
||||||
|
end
|
||||||
|
dirty = true
|
||||||
|
end)
|
||||||
|
|
||||||
|
noctalia.state.watch(RESULT_KEY, function(result)
|
||||||
|
if type(result) ~= "table" then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
if type(result.requestId) ~= "string" or not result.requestId:match("^panel%-") then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
feedback = tostring(result.message or "")
|
||||||
|
feedbackError = result.ok ~= true
|
||||||
|
if result.ok == true and (
|
||||||
|
result.action == "add_volume"
|
||||||
|
or result.action == "update_volume"
|
||||||
|
or result.action == "init_volume"
|
||||||
|
) then
|
||||||
|
view = "list"
|
||||||
|
resetForm()
|
||||||
|
end
|
||||||
|
if result.ok == true and result.action == "mount" then
|
||||||
|
view = "list"
|
||||||
|
passwordValue = ""
|
||||||
|
passwordError = ""
|
||||||
|
end
|
||||||
|
if result.ok ~= true and result.action == "mount" and view == "password" then
|
||||||
|
passwordError = feedback
|
||||||
|
passwordKey += 1
|
||||||
|
passwordValue = ""
|
||||||
|
end
|
||||||
|
if result.ok ~= true and result.action == "init_volume" and view == "form" then
|
||||||
|
formError = feedback
|
||||||
|
formPassword = ""
|
||||||
|
formPasswordConfirm = ""
|
||||||
|
formPasswordKey += 1
|
||||||
|
end
|
||||||
|
dirty = true
|
||||||
|
end)
|
||||||
|
|
||||||
|
panel.setWantsSecondTicks(true)
|
||||||
|
|
||||||
|
function onOpen(_context)
|
||||||
|
view = "list"
|
||||||
|
feedback = ""
|
||||||
|
sendCommand("refresh")
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function update()
|
||||||
|
if dirty then
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
end
|
||||||
|
|
||||||
|
function onCloseClicked()
|
||||||
|
panel.close()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onRefresh()
|
||||||
|
sendCommand("refresh")
|
||||||
|
end
|
||||||
|
|
||||||
|
function onAdd()
|
||||||
|
formMode = "add"
|
||||||
|
resetForm()
|
||||||
|
formAutoMount = false
|
||||||
|
view = "form"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onInit()
|
||||||
|
formMode = "init"
|
||||||
|
resetForm()
|
||||||
|
formAutoMount = true
|
||||||
|
formSavePassfile = true
|
||||||
|
view = "form"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onEdit()
|
||||||
|
local vol = selectedVolume()
|
||||||
|
if not vol then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
formMode = "edit"
|
||||||
|
fillFormFrom(vol)
|
||||||
|
view = "form"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onCancelForm()
|
||||||
|
view = "list"
|
||||||
|
formError = ""
|
||||||
|
formPassword = ""
|
||||||
|
formPasswordConfirm = ""
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onFormName(value) formName = value end
|
||||||
|
function onFormCipher(value) formCipher = value end
|
||||||
|
function onFormMount(value) formMount = value end
|
||||||
|
function onFormPassfile(value) formPassfile = value end
|
||||||
|
function onFormPassword(value) formPassword = if type(value) == "string" then value else "" end
|
||||||
|
function onFormPasswordConfirm(value) formPasswordConfirm = if type(value) == "string" then value else "" end
|
||||||
|
|
||||||
|
function onFormAllowOther(value)
|
||||||
|
formAllowOther = value == "true"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
function onFormReadOnly(value)
|
||||||
|
formReadOnly = value == "true"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
function onFormAutoMount(value)
|
||||||
|
formAutoMount = value == "true"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
function onFormPlaintextNames(value)
|
||||||
|
formPlaintextNames = value == "true"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
function onFormAesSiv(value)
|
||||||
|
formAesSiv = value == "true"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
function onFormSavePassfile(value)
|
||||||
|
formSavePassfile = value == "true"
|
||||||
|
if not formSavePassfile then
|
||||||
|
formAutoMount = false
|
||||||
|
end
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onSaveForm()
|
||||||
|
local name = noctalia.string.trim(formName)
|
||||||
|
local cipher = noctalia.string.trim(formCipher)
|
||||||
|
local mount = noctalia.string.trim(formMount)
|
||||||
|
if name == "" or cipher == "" or mount == "" then
|
||||||
|
formError = tr("panel.field.required")
|
||||||
|
render()
|
||||||
|
return
|
||||||
|
end
|
||||||
|
|
||||||
|
if formMode == "init" then
|
||||||
|
if formPassword == "" then
|
||||||
|
formError = tr("panel.password_required")
|
||||||
|
render()
|
||||||
|
return
|
||||||
|
end
|
||||||
|
if formPassword ~= formPasswordConfirm then
|
||||||
|
formError = tr("panel.field.password_mismatch")
|
||||||
|
formPassword = ""
|
||||||
|
formPasswordConfirm = ""
|
||||||
|
formPasswordKey += 1
|
||||||
|
render()
|
||||||
|
return
|
||||||
|
end
|
||||||
|
formError = ""
|
||||||
|
sendCommand("init_volume", {
|
||||||
|
name = name,
|
||||||
|
cipherDir = cipher,
|
||||||
|
mountPoint = mount,
|
||||||
|
password = formPassword,
|
||||||
|
plaintextNames = formPlaintextNames,
|
||||||
|
aesSiv = formAesSiv,
|
||||||
|
savePassfile = formSavePassfile,
|
||||||
|
autoMount = formAutoMount and formSavePassfile,
|
||||||
|
allowOther = formAllowOther,
|
||||||
|
readOnly = formReadOnly,
|
||||||
|
})
|
||||||
|
formPassword = ""
|
||||||
|
formPasswordConfirm = ""
|
||||||
|
formPasswordKey += 1
|
||||||
|
render()
|
||||||
|
return
|
||||||
|
end
|
||||||
|
|
||||||
|
formError = ""
|
||||||
|
local payload = {
|
||||||
|
name = name,
|
||||||
|
cipherDir = cipher,
|
||||||
|
mountPoint = mount,
|
||||||
|
passfile = noctalia.string.trim(formPassfile),
|
||||||
|
allowOther = formAllowOther,
|
||||||
|
readOnly = formReadOnly,
|
||||||
|
autoMount = formAutoMount,
|
||||||
|
}
|
||||||
|
if formMode == "edit" then
|
||||||
|
payload.id = formEditId
|
||||||
|
sendCommand("update_volume", payload)
|
||||||
|
else
|
||||||
|
sendCommand("add_volume", payload)
|
||||||
|
end
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onRemove()
|
||||||
|
local vol = selectedVolume()
|
||||||
|
if not vol then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
sendCommand("remove_volume", { id = vol.id })
|
||||||
|
end
|
||||||
|
|
||||||
|
-- Named onOpenMount so it does not override the panel lifecycle onOpen().
|
||||||
|
function onOpenMount()
|
||||||
|
local vol = selectedVolume()
|
||||||
|
if not vol then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
sendCommand("open", { id = vol.id })
|
||||||
|
end
|
||||||
|
|
||||||
|
local function openPasswordPrompt(vol, mode)
|
||||||
|
passwordVolumeId = vol.id
|
||||||
|
passwordVolumeName = vol.name
|
||||||
|
passwordValue = ""
|
||||||
|
passwordError = ""
|
||||||
|
passwordMode = mode or "mount"
|
||||||
|
passwordRememberKeyring = true
|
||||||
|
passwordKey += 1
|
||||||
|
view = "password"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onToggleMount()
|
||||||
|
local vol = selectedVolume()
|
||||||
|
if not vol then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
if vol.mounted then
|
||||||
|
sendCommand("unmount", { id = vol.id })
|
||||||
|
return
|
||||||
|
end
|
||||||
|
-- Prefer keyring or existing passfile without prompting.
|
||||||
|
if vol.useKeyring == true or (type(vol.passfile) == "string" and vol.passfile ~= "") then
|
||||||
|
sendCommand("mount", { id = vol.id })
|
||||||
|
return
|
||||||
|
end
|
||||||
|
openPasswordPrompt(vol, "mount")
|
||||||
|
end
|
||||||
|
|
||||||
|
function onRememberKeyring()
|
||||||
|
local vol = selectedVolume()
|
||||||
|
if not vol then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
-- Keep edit context: after save, return to list via cancel/result
|
||||||
|
openPasswordPrompt(vol, "store_keyring")
|
||||||
|
end
|
||||||
|
|
||||||
|
function onForgetKeyring()
|
||||||
|
local vol = selectedVolume()
|
||||||
|
if not vol then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
sendCommand("forget_keyring", { id = vol.id })
|
||||||
|
-- Stay on edit form; snapshot watch will refresh useKeyring flag
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onPasswordChange(value)
|
||||||
|
passwordValue = if type(value) == "string" then value else ""
|
||||||
|
end
|
||||||
|
|
||||||
|
function onPasswordRemember(value)
|
||||||
|
passwordRememberKeyring = value == true or value == "true"
|
||||||
|
end
|
||||||
|
|
||||||
|
function onCancelPassword()
|
||||||
|
passwordValue = ""
|
||||||
|
passwordError = ""
|
||||||
|
passwordMode = "mount"
|
||||||
|
view = "list"
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onConfirmPassword()
|
||||||
|
if snapshot.busy then
|
||||||
|
return
|
||||||
|
end
|
||||||
|
if passwordValue == "" then
|
||||||
|
passwordError = tr("panel.password_required")
|
||||||
|
render()
|
||||||
|
return
|
||||||
|
end
|
||||||
|
local pw = passwordValue
|
||||||
|
local mode = passwordMode
|
||||||
|
local id = passwordVolumeId
|
||||||
|
passwordValue = ""
|
||||||
|
passwordError = ""
|
||||||
|
passwordMode = "mount"
|
||||||
|
if mode == "store_keyring" then
|
||||||
|
sendCommand("store_keyring", {
|
||||||
|
id = id,
|
||||||
|
password = pw,
|
||||||
|
enableAutoMount = true,
|
||||||
|
})
|
||||||
|
else
|
||||||
|
sendCommand("mount", {
|
||||||
|
id = id,
|
||||||
|
password = pw,
|
||||||
|
storeKeyring = passwordRememberKeyring == true,
|
||||||
|
})
|
||||||
|
end
|
||||||
|
passwordKey += 1
|
||||||
|
view = "list"
|
||||||
|
render()
|
||||||
|
end
|
||||||
@@ -0,0 +1,106 @@
|
|||||||
|
# Manage gocryptfs encrypted volumes: mount, unmount, and status.
|
||||||
|
|
||||||
|
id = "davemhammer/gocryptfs"
|
||||||
|
name = "Gocryptfs"
|
||||||
|
version = "1.3.0"
|
||||||
|
plugin_api = 10
|
||||||
|
author = "davemhammer"
|
||||||
|
license = "MIT"
|
||||||
|
dependencies = ["gocryptfs", "fusermount3", "fusermount", "chmod", "xdg-open", "cat", "keyctl", "secret-tool"]
|
||||||
|
tags = ["privacy", "utility", "bar", "panel", "service"]
|
||||||
|
icon = "lock"
|
||||||
|
description = "Mount, unmount, and auto-mount gocryptfs encrypted volumes from Noctalia."
|
||||||
|
|
||||||
|
[[setting]]
|
||||||
|
key = "refresh_interval"
|
||||||
|
type = "int"
|
||||||
|
label_key = "settings.refresh_interval.label"
|
||||||
|
description_key = "settings.refresh_interval.description"
|
||||||
|
default = 3
|
||||||
|
min = 1
|
||||||
|
max = 60
|
||||||
|
|
||||||
|
[[setting]]
|
||||||
|
key = "notify_on_action"
|
||||||
|
type = "bool"
|
||||||
|
label_key = "settings.notify_on_action.label"
|
||||||
|
description_key = "settings.notify_on_action.description"
|
||||||
|
default = true
|
||||||
|
|
||||||
|
[[setting]]
|
||||||
|
key = "create_mountpoint"
|
||||||
|
type = "bool"
|
||||||
|
label_key = "settings.create_mountpoint.label"
|
||||||
|
description_key = "settings.create_mountpoint.description"
|
||||||
|
default = true
|
||||||
|
|
||||||
|
[[setting]]
|
||||||
|
key = "auto_mount"
|
||||||
|
type = "bool"
|
||||||
|
label_key = "settings.auto_mount.label"
|
||||||
|
description_key = "settings.auto_mount.description"
|
||||||
|
default = true
|
||||||
|
|
||||||
|
[[widget]]
|
||||||
|
id = "status"
|
||||||
|
entry = "widget.luau"
|
||||||
|
|
||||||
|
[[widget.setting]]
|
||||||
|
key = "show_count"
|
||||||
|
type = "bool"
|
||||||
|
label_key = "settings.show_count.label"
|
||||||
|
description_key = "settings.show_count.description"
|
||||||
|
default = true
|
||||||
|
|
||||||
|
[[widget.setting]]
|
||||||
|
key = "glyph_color"
|
||||||
|
type = "select"
|
||||||
|
label_key = "settings.glyph_color.label"
|
||||||
|
description_key = "settings.glyph_color.description"
|
||||||
|
default = "on_surface"
|
||||||
|
options = [
|
||||||
|
{ value = "on_surface", label_key = "colors.default" },
|
||||||
|
{ value = "primary", label_key = "colors.primary" },
|
||||||
|
{ value = "secondary", label_key = "colors.secondary" },
|
||||||
|
{ value = "tertiary", label_key = "colors.tertiary" }
|
||||||
|
]
|
||||||
|
|
||||||
|
[[widget.setting]]
|
||||||
|
key = "mounted_color"
|
||||||
|
type = "select"
|
||||||
|
label_key = "settings.mounted_color.label"
|
||||||
|
description_key = "settings.mounted_color.description"
|
||||||
|
default = "tertiary"
|
||||||
|
options = [
|
||||||
|
{ value = "primary", label_key = "colors.primary" },
|
||||||
|
{ value = "secondary", label_key = "colors.secondary" },
|
||||||
|
{ value = "tertiary", label_key = "colors.tertiary" }
|
||||||
|
]
|
||||||
|
|
||||||
|
[[widget.setting]]
|
||||||
|
key = "unmounted_color"
|
||||||
|
type = "select"
|
||||||
|
label_key = "settings.unmounted_color.label"
|
||||||
|
description_key = "settings.unmounted_color.description"
|
||||||
|
default = "on_surface_variant"
|
||||||
|
options = [
|
||||||
|
{ value = "error", label_key = "colors.error" },
|
||||||
|
{ value = "on_surface_variant", label_key = "colors.muted" },
|
||||||
|
{ value = "primary", label_key = "colors.primary" },
|
||||||
|
{ value = "tertiary", label_key = "colors.tertiary" }
|
||||||
|
]
|
||||||
|
|
||||||
|
[[panel]]
|
||||||
|
id = "manager"
|
||||||
|
entry = "panel.luau"
|
||||||
|
width = 540
|
||||||
|
height = 620
|
||||||
|
placement = "floating"
|
||||||
|
position = "center"
|
||||||
|
open_near_click = true
|
||||||
|
keyboard_focus = "exclusive"
|
||||||
|
dismiss_on_outside_click = true
|
||||||
|
|
||||||
|
[[service]]
|
||||||
|
id = "service"
|
||||||
|
entry = "service.luau"
|
||||||
File diff suppressed because it is too large
Load Diff
Binary file not shown.
|
After Width: | Height: | Size: 49 KiB |
@@ -0,0 +1,140 @@
|
|||||||
|
{
|
||||||
|
"title": "Gocryptfs",
|
||||||
|
"settings": {
|
||||||
|
"refresh_interval": {
|
||||||
|
"label": "Refresh interval (seconds)",
|
||||||
|
"description": "How often the service rechecks mount status."
|
||||||
|
},
|
||||||
|
"notify_on_action": {
|
||||||
|
"label": "Notify on mount/unmount",
|
||||||
|
"description": "Show a notification when a volume mounts or unmounts."
|
||||||
|
},
|
||||||
|
"create_mountpoint": {
|
||||||
|
"label": "Create mount points",
|
||||||
|
"description": "Create the mount directory if it does not exist before mounting."
|
||||||
|
},
|
||||||
|
"auto_mount": {
|
||||||
|
"label": "Auto-mount on login",
|
||||||
|
"description": "When Noctalia starts, mount volumes that have auto-mount enabled and a keyring password or passfile."
|
||||||
|
},
|
||||||
|
"show_count": {
|
||||||
|
"label": "Show mounted count",
|
||||||
|
"description": "Display mounted/total on the bar widget."
|
||||||
|
},
|
||||||
|
"glyph_color": {
|
||||||
|
"label": "Icon color",
|
||||||
|
"description": "Color of the lock icon when gocryptfs is available."
|
||||||
|
},
|
||||||
|
"mounted_color": {
|
||||||
|
"label": "Mounted indicator",
|
||||||
|
"description": "Status-dot color when at least one volume is mounted."
|
||||||
|
},
|
||||||
|
"unmounted_color": {
|
||||||
|
"label": "Unmounted indicator",
|
||||||
|
"description": "Status-dot color when nothing is mounted."
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"colors": {
|
||||||
|
"default": "Default",
|
||||||
|
"primary": "Primary",
|
||||||
|
"secondary": "Secondary",
|
||||||
|
"tertiary": "Tertiary",
|
||||||
|
"error": "Error",
|
||||||
|
"muted": "Muted"
|
||||||
|
},
|
||||||
|
"widget": {
|
||||||
|
"tooltip": "{mounted} of {total} mounted",
|
||||||
|
"tooltip_none": "No volumes configured",
|
||||||
|
"unavailable": "gocryptfs is not installed",
|
||||||
|
"refresh_requested": "Refreshing volume status…"
|
||||||
|
},
|
||||||
|
"panel": {
|
||||||
|
"subtitle": "Encrypted volumes",
|
||||||
|
"empty": "No volumes yet. Initialize a new volume or add an existing one.",
|
||||||
|
"loading": "Checking mounts…",
|
||||||
|
"busy": "Working…",
|
||||||
|
"select_hint": "Select a volume to manage it.",
|
||||||
|
"updated": "Updated {time}",
|
||||||
|
"password_title": "Password for {name}",
|
||||||
|
"password_label": "Password",
|
||||||
|
"password_placeholder": "Volume password",
|
||||||
|
"password_required": "Password is required.",
|
||||||
|
"keyring_title": "Remember password for {name}",
|
||||||
|
"keyring_label": "Volume password (desktop keyring + session cache)",
|
||||||
|
"keyring_help": "Saved in your desktop keyring (survives reboot when unlocked) and cached for this login. No password file under plugin data.",
|
||||||
|
"keyring_not_set": "No remembered password for this volume.",
|
||||||
|
"remember_keyring": "Also remember in keyring (desktop + this login)",
|
||||||
|
"add_title": "Add existing volume",
|
||||||
|
"edit_title": "Edit volume",
|
||||||
|
"init_title": "Initialize new volume",
|
||||||
|
"init_help": "Runs gocryptfs -init on the cipher directory, then registers it for mounting.",
|
||||||
|
"field": {
|
||||||
|
"name": "Name",
|
||||||
|
"name_placeholder": "Documents",
|
||||||
|
"cipher": "Cipher directory",
|
||||||
|
"cipher_placeholder": "~/Encrypted/docs",
|
||||||
|
"mount": "Mount point",
|
||||||
|
"mount_placeholder": "~/Private/docs",
|
||||||
|
"keyring_section": "Password (desktop keyring)",
|
||||||
|
"passfile": "Passfile path (optional, advanced)",
|
||||||
|
"passfile_placeholder": "Leave empty — prefer desktop keyring",
|
||||||
|
"password": "Password",
|
||||||
|
"password_confirm": "Confirm password",
|
||||||
|
"password_confirm_placeholder": "Re-enter password",
|
||||||
|
"password_mismatch": "Passwords do not match.",
|
||||||
|
"plaintextnames": "Plaintext file names (-plaintextnames)",
|
||||||
|
"aessiv": "AES-SIV encryption (-aessiv)",
|
||||||
|
"save_passfile": "Remember password in keyring (desktop + this login)",
|
||||||
|
"auto_mount": "Auto-mount on login",
|
||||||
|
"auto_mount_help": "Requires a remembered keyring password or advanced passfile. Global auto-mount must also be on. Desktop keyring must unlock after login for reboot-safe auto-mount.",
|
||||||
|
"allow_other": "Allow other users (-allow_other)",
|
||||||
|
"read_only": "Read-only (-ro)",
|
||||||
|
"required": "Name, cipher directory, and mount point are required.",
|
||||||
|
"duplicate": "A volume with that cipher directory or mount point already exists."
|
||||||
|
},
|
||||||
|
"status": {
|
||||||
|
"mounted": "Mounted",
|
||||||
|
"unmounted": "Unmounted",
|
||||||
|
"unknown": "Unknown"
|
||||||
|
},
|
||||||
|
"cipher": "Cipher: {path}",
|
||||||
|
"mountpoint": "Mount: {path}",
|
||||||
|
"passfile_hint": "Using passfile",
|
||||||
|
"keyring_hint": "Password in keyring",
|
||||||
|
"automount_hint": "Auto-mount"
|
||||||
|
},
|
||||||
|
"actions": {
|
||||||
|
"mount": "Mount",
|
||||||
|
"unmount": "Unmount",
|
||||||
|
"open": "Open",
|
||||||
|
"refresh": "Refresh",
|
||||||
|
"add": "Add",
|
||||||
|
"init": "Init",
|
||||||
|
"edit": "Edit",
|
||||||
|
"remove": "Remove",
|
||||||
|
"remember": "Remember",
|
||||||
|
"forget": "Forget",
|
||||||
|
"save": "Save",
|
||||||
|
"cancel": "Cancel",
|
||||||
|
"close": "Close"
|
||||||
|
},
|
||||||
|
"result": {
|
||||||
|
"success": "Done",
|
||||||
|
"failed": "Failed: {error}",
|
||||||
|
"busy": "Another operation is already running.",
|
||||||
|
"gocryptfs_missing": "gocryptfs is not on PATH. Install gocryptfs and try again.",
|
||||||
|
"mounted": "Mounted {name}",
|
||||||
|
"unmounted": "Unmounted {name}",
|
||||||
|
"initialized": "Initialized and saved {name}",
|
||||||
|
"already_initialized": "Already a gocryptfs volume: {path}",
|
||||||
|
"not_found": "Volume not found.",
|
||||||
|
"cipher_missing": "Cipher directory does not exist: {path}",
|
||||||
|
"mount_create_failed": "Could not create mount point: {path}",
|
||||||
|
"already_mounted": "{name} is already mounted.",
|
||||||
|
"not_mounted": "{name} is not mounted.",
|
||||||
|
"removed": "Removed {name}",
|
||||||
|
"saved": "Saved {name}",
|
||||||
|
"keyring_saved": "Password for {name} saved in desktop keyring",
|
||||||
|
"keyring_forgotten": "Keyring password cleared for {name}"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,93 @@
|
|||||||
|
--!nonstrict
|
||||||
|
|
||||||
|
local PANEL_ID = "davemhammer/gocryptfs:manager"
|
||||||
|
local STATE_KEY = "gocrypt_snapshot"
|
||||||
|
local COMMAND_KEY = "gocrypt_command"
|
||||||
|
|
||||||
|
local snapshot = noctalia.state.get(STATE_KEY) or {
|
||||||
|
available = false,
|
||||||
|
loading = true,
|
||||||
|
mountedCount = 0,
|
||||||
|
totalCount = 0,
|
||||||
|
}
|
||||||
|
|
||||||
|
local requestId = 0
|
||||||
|
|
||||||
|
local function configString(key, fallback)
|
||||||
|
local value = noctalia.getConfig(key)
|
||||||
|
return type(value) == "string" and value or fallback
|
||||||
|
end
|
||||||
|
|
||||||
|
local function render()
|
||||||
|
local mounted = tonumber(snapshot.mountedCount) or 0
|
||||||
|
local total = tonumber(snapshot.totalCount) or 0
|
||||||
|
local available = snapshot.available == true
|
||||||
|
local showCount = noctalia.getConfig("show_count") ~= false
|
||||||
|
local anyMounted = mounted > 0
|
||||||
|
|
||||||
|
local glyphName = anyMounted and "lock-open" or "lock"
|
||||||
|
local glyphColor = available and configString("glyph_color", "on_surface") or "on_surface_variant"
|
||||||
|
if anyMounted then
|
||||||
|
glyphColor = configString("mounted_color", "tertiary")
|
||||||
|
end
|
||||||
|
|
||||||
|
local children = {
|
||||||
|
ui.glyph({
|
||||||
|
name = glyphName,
|
||||||
|
size = 16,
|
||||||
|
color = glyphColor,
|
||||||
|
}),
|
||||||
|
}
|
||||||
|
|
||||||
|
if showCount and available and total > 0 then
|
||||||
|
table.insert(children, ui.label({
|
||||||
|
text = `{mounted}/{total}`,
|
||||||
|
fontWeight = "bold",
|
||||||
|
color = "on_surface",
|
||||||
|
}))
|
||||||
|
end
|
||||||
|
|
||||||
|
if available and total > 0 then
|
||||||
|
table.insert(children, ui.box({
|
||||||
|
width = 7,
|
||||||
|
height = 7,
|
||||||
|
radius = 4,
|
||||||
|
fill = anyMounted and configString("mounted_color", "tertiary") or configString("unmounted_color", "on_surface_variant"),
|
||||||
|
}))
|
||||||
|
end
|
||||||
|
|
||||||
|
local container = barWidget.isVertical() and ui.column or ui.row
|
||||||
|
barWidget.render(container({ gap = 5, align = "center" }, children))
|
||||||
|
|
||||||
|
if not available then
|
||||||
|
barWidget.setTooltip(noctalia.tr("widget.unavailable"))
|
||||||
|
elseif total == 0 then
|
||||||
|
barWidget.setTooltip(noctalia.tr("widget.tooltip_none"))
|
||||||
|
else
|
||||||
|
barWidget.setTooltip(noctalia.tr("widget.tooltip", { mounted = mounted, total = total }))
|
||||||
|
end
|
||||||
|
end
|
||||||
|
|
||||||
|
noctalia.state.watch(STATE_KEY, function(value)
|
||||||
|
if type(value) == "table" then
|
||||||
|
snapshot = value
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
end)
|
||||||
|
|
||||||
|
noctalia.setUpdateInterval(5000)
|
||||||
|
render()
|
||||||
|
|
||||||
|
function update()
|
||||||
|
render()
|
||||||
|
end
|
||||||
|
|
||||||
|
function onClick()
|
||||||
|
noctalia.togglePanel(PANEL_ID)
|
||||||
|
end
|
||||||
|
|
||||||
|
function onRightClick()
|
||||||
|
requestId += 1
|
||||||
|
noctalia.state.set(COMMAND_KEY, { action = "refresh", requestId = `widget-{requestId}` })
|
||||||
|
noctalia.notify(noctalia.tr("title"), noctalia.tr("widget.refresh_requested"))
|
||||||
|
end
|
||||||
Reference in New Issue
Block a user