cryptomator / docker

Docker containers to build Cryptomator packages

Supporting Cryptomator

Cryptomator is provided free of charge as an open-source project despite the high development effort and is therefore dependent on donations. If you are also interested in further development, we offer you the opportunity to support us:

• One-time or recurring donation via Cryptomator's website.
• Become a sponsor via Cryptomator's sponsors website.

Gold Sponsors

Silver Sponsors

Special Shoutout

Continuous integration hosting for ARM64 builds is provided by MacStadium.

---

Introduction

Cryptomator offers multi-platform transparent client-side encryption of your files in the cloud.

Download native binaries of Cryptomator on cryptomator.org or clone and build Cryptomator using Maven (instructions below).

Features

• Works with Dropbox, Google Drive, OneDrive, MEGA, pCloud, ownCloud, Nextcloud and any other cloud storage service which synchronizes with a local directory
• Open Source means: No backdoors, control is better than trust
• Client-side: No accounts, no data shared with any online service
• Totally transparent: Just work on the virtual drive as if it were a USB flash drive
• AES encryption with 256-bit key length
• File names get encrypted
• Folder structure gets obfuscated
• Use as many vaults in your Dropbox as you want, each having individual passwords
• Four thousand commits for the security of your data!! 🎉

Privacy

• 256-bit keys (unlimited strength policy bundled with native binaries)
• Scrypt key derivation
• Cryptographically secure random numbers for salts, IVs and the masterkey of course
• Sensitive data is wiped from the heap asap
• Lightweight: Complexity kills security

Consistency

• Authenticated encryption is used for file content to recognize changed ciphertext before decryption
• I/O operations are transactional and atomic, if the filesystems support it
• Each file contains all information needed for decryption (except for the key of course), no common metadata means no SPOF

Security Architecture

For more information on the security details visit cryptomator.org.

Building

Dependencies

• JDK 22 (e.g. temurin, zulu)
• Maven 3

Run Maven

mvn clean install
# or mvn clean install -Pwin
# or mvn clean install -Pmac
# or mvn clean install -Plinux

This will build all the jars and bundle them together with their OS-specific dependencies under target. This can now be used to build native packages.

License

This project is dual-licensed under the GPLv3 for FOSS projects as well as a commercial license for independent software vendors and resellers. If you want to modify this application under different conditions, feel free to contact our support team.

docker's Issues

Fails to build cryptomator 1.4.0-beta1 and the continous releases

The build for anything beyond 1.3.0-rc1 fails with
Buildfile: /home/build.xml [taskdef] Could not load definitions from resource com/sun/javafx/tools/ant/antlib.xml. It could not be found.

It would be nice to be able to build any version from source.

Container with Cryptomator + Cloud

It would be nice to have an image / images that simply contain a working solution.
Maybe combining a Dropbox container with Cryptomator for example. In the dropbox container the Dropbox-setup is already done in the beginning, so it probably requires adding the cryptomator dependencies and the CLI dialogue for the Cryptomator credentials as well (this would require to have issues like 11 and 8 solved as well).
Besides from that WebDav support could be disabled as we just want to mount here.

Thank you in advance and have a wonderful day!

docker run cryptomator/cryptomator-deb-x64 issues lack of doc?!

I recently just ran into cryptomator (which BTW is an idea that I've been thinking for a while and really love what you guys have done thus far)... but, my question (two-part question)

1. Why aren't the docker images already configured? I ran into the issue below.
2. Do you guys need help documenting on how to run cryptomator from a docker container? I could take a stab at it

$ docker run cryptomator/cryptomator-deb-x64
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   603    0   603    0     0   1250      0 --:--:-- --:--:-- --:--:--  1634
100  9.8M  100  9.8M    0     0  1139k      0  0:00:08  0:00:08 --:--:-- 1637k
Buildfile: /home/build.xml

create-jar:

deb:
No base JDK. Package will use system JRE.
No base JDK. Package will use system JRE.
Debian packages should specify a license.  The absence of a license will cause some linux distributions to complain about the quality of the application.
  Using custom package resource [menu icon]  (loaded from package/linux/Cryptomator.png)
  Using default package resource [Menu shortcut descriptor]  (add package/linux/Cryptomator.desktop to the class path to customize)
  Using custom package resource [DEB control file]  (loaded from package/linux/control)
  Using default package resource [DEB preinstall script]  (add package/linux/preinst to the class path to customize)
  Using default package resource [DEB prerm script]  (add package/linux/prerm to the class path to customize)
  Using custom package resource [DEB postinstall script]  (loaded from package/linux/postinst)
  Using default package resource [DEB postrm script]  (add package/linux/postrm to the class path to customize)
  Using custom package resource [DEB copyright file]  (loaded from package/linux/copyright)
dpkg-deb: warning: 'cryptomator-1.3.0-rc1/DEBIAN/control' contains user-defined field 'Vcs-Git'
dpkg-deb: warning: 'cryptomator-1.3.0-rc1/DEBIAN/control' contains user-defined field 'Vcs-Browser'
dpkg-deb: warning: ignoring 2 warnings about the control file(s)

dpkg-deb: building package `cryptomator' in `/home/antbuild/bundles/cryptomator-1.3.0-rc1.deb'.
Package (.deb) saved to: /home/antbuild/bundles/cryptomator-1.3.0-rc1.deb
  Config files are saved to /tmp/fxbundler7503370810062218566/linux. Use them to customize package.

BUILD SUCCESSFUL
Total time: 30 seconds
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 81.4M    0    51  100 81.4M      0  1562k  0:00:53  0:00:53 --:--:-- 1106k{"message":"This resource requires authentication"}
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    51    0    51    0     0    215      0 --:--:-- --:--:-- --:--:--   253{"message":"This resource requires authentication"}
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    51    0    51    0     0    216      0 --:--:-- --:--:-- --:--:--   260
{"message":"This resource requires authentication"}