Automic VaultAutomic Vault

brew

Install gocryptfs with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper

Encrypted overlay filesystem written in Go. Version 2.6.1 via Homebrew; verified 2026-04-20.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install gocryptfs

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install gocryptfs

MacPorts ports tree · fuse/gocryptfs/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add gocryptfs

Alpine Linux edge package indexes · gocryptfs · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install gocryptfs

Debian stable package indexes · gocryptfs · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install gocryptfs

Fedora Rawhide package metadata · gocryptfs · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#gocryptfs

nixpkgs package indexes · pkgs/by-name/go/gocryptfs/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S gocryptfs

Arch Linux sync databases · gocryptfs · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install gocryptfs

openSUSE Tumbleweed package metadata · gocryptfs · source: download.opensuse.org

overview

Package summary

Encrypted overlay filesystem written in Go

Commands and aliases

  • gocryptfs
  • gocryptfs-xray

history

Project history and usage

gocryptfs is an encrypted FUSE overlay filesystem written in Go. It was designed as an EncFS-inspired tool that fixes security weaknesses while preserving the convenient model of mounting an encrypted directory as a plaintext view.

Project history

The public GitHub repository was created in September 2015. The README says gocryptfs is built on go-fuse, was inspired by EncFS, and strives to fix EncFS security issues while providing good performance.

The project reached version 1.0 on July 17, 2016 after stress and correctness testing with fsstress, extractloop, and xfstests. The README also records a March 3, 2017 security audit, signed releases from v0.4 onward, Linux as the native platform, beta-quality macOS support, and a stable CLI ABI for scripts and applications.

Adoption history

gocryptfs spread through the channels expected for a filesystem utility: upstream release binaries, Linux distribution packages, MacPorts, Homebrew, and package-manager metadata for Alpine, Debian, Fedora, Nix, Arch, Ubuntu, and openSUSE in the batch input.

Its adoption was helped by a clear operational niche: users wanted per-directory encryption that worked with sync tools and ordinary filesystems without placing trust in a full-disk-encryption layer or a cloud provider.

How it is used

The core workflow is to run `gocryptfs -init CIPHERDIR` and then mount `CIPHERDIR` at a plaintext mount point. The manpage also documents password changes, filesystem checks, info display, reverse mode, deterministic names, speed tests, and other operational flags.

gocryptfs stores encrypted data in CIPHERDIR and presents a plaintext view at MOUNTPOINT. Its `gocryptfs.conf` file is part of the encrypted directory metadata, while the password or master key remains the user's responsibility.

Why package nerds care

Package nerds care about gocryptfs because filesystem tools are hard to package well: they touch FUSE, kernel interfaces, release signatures, platform caveats, and data safety. gocryptfs documents those edges unusually directly, including signed releases, security design, stable CLI ABI, benchmark expectations, and config-file recovery advice.

It is also a strong example of Go in systems-tool packaging: a single CLI with static-binary potential, distribution packages, and tight interaction with low-level OS facilities.

Timeline

  • 2015-09: GitHub repository created.
  • 2016-07: Version 1.0 reached and declared ready for general consumption.
  • 2017-03: Security audit completed.
  • 2021-06: v2.0 released in the release history.
  • 2025-08: v2.6.1 released.

Related projects

  • EncFS is the design predecessor named by gocryptfs.
  • go-fuse is the FUSE library gocryptfs builds on.
  • cppcryptfs is the independent Windows reimplementation named in the README.
  • SiriKali is a graphical frontend that supports gocryptfs.

security posture

Risk level: blue

broad file, network, media, or database tool signal.

Risk classifier

blue risk · medium confidence · tool

Why

  • broad file, network, media, or database tool signal

Signals

  • text:encrypt

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 2 platform targets.
  • Installs with 2 runtime dependencies.
  • Build metadata lists 2 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
CIPHERDIR/gocryptfs.conf

executables

Installed executables

CommandKindExposureNote
gocryptfscliglobal executable
gocryptfs-xraycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version2.6.1
manager updated2026-04-20
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/rfjakob/gocryptfs

install metadata

Package metadata

Package keybrew:gocryptfs
Version2.6.1
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/gocryptfs
Homepagehttps://nuetzlich.net/gocryptfs/
Repositoryhttps://github.com/rfjakob/gocryptfs
Upstream docshttps://github.com/rfjakob/gocryptfs#readme
LicenseMIT
Source archivehttps://github.com/rfjakob/gocryptfs/releases/download/v2.6.1/gocryptfs_v2.6.1_src-deps.tar.gz
Last updated2026-04-20T18:48:44Z
Pulseupdated
Dependencieslibfuse, openssl@4
Build dependenciesgo, pkgconf
Bottleavailable (on arm64_linux, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namegocryptfs
Version Scheme0
Revision0
Head VersionHEAD
Requirements
  • linux
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

gocryptfs 2.5.1-2+b1

Encrypted overlay filesystem written in Go

https://github.com/rfjakob/gocryptfs

sudo apt install gocryptfs
  • Section: devel
  • Architecture: amd64
  • Source Package: gocryptfs
  • 3 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Gocryptfs
Debian stable package indexes · deb.debian.org · Debian stable package indexes: gocryptfs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

gocryptfs

nix profile install nixpkgs#gocryptfs
  • normalized package name match
  • Matched by: Gocryptfs
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/go/gocryptfs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

gocryptfs 2.4.0-1build3

Encrypted overlay filesystem written in Go

https://github.com/rfjakob/gocryptfs

sudo apt install gocryptfs
  • Section: universe/devel
  • Architecture: amd64
  • 2 dependencies
  • 2 optional deps
  • normalized package name match
  • Matched by: Gocryptfs
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: gocryptfs from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

gocryptfs 2.6.1-r5

Encrypted overlay filesystem written in Go

https://github.com/rfjakob/gocryptfs

sudo apk add gocryptfs
  • License: MIT
  • Architecture: x86_64
  • Source Package: gocryptfs
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Gocryptfs
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: gocryptfs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

gocryptfs-doc 2.6.1-r5

Encrypted overlay filesystem written in Go (documentation)

https://github.com/rfjakob/gocryptfs

sudo apk add gocryptfs-doc
  • License: MIT
  • Architecture: x86_64
  • Source Package: gocryptfs
  • normalized package name match
  • Matched by: Gocryptfs
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: gocryptfs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

gocryptfs 2.6.1-5.fc44

Encrypted overlay filesystem written in Go

https://github.com/rfjakob/gocryptfs

sudo dnf install gocryptfs
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: gocryptfs
  • 5 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Gocryptfs
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: gocryptfs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

gocryptfs 2.6.1-1

Encrypted overlay filesystem written in Go.

https://github.com/rfjakob/gocryptfs

sudo pacman -S gocryptfs
  • License: MIT
  • Architecture: x86_64
  • 3 dependencies
  • normalized package name match
  • Matched by: Gocryptfs
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: gocryptfs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

gocryptfs 2.6.1-1.5

Encrypted overlay filesystem written in Go

https://nuetzlich.net/gocryptfs/

sudo zypper install gocryptfs
  • License: MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: gocryptfs
  • 4 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Gocryptfs
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: gocryptfs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

gocryptfs-doc 2.6.1-1.5

Documentation for gocryptfs

https://nuetzlich.net/gocryptfs/

sudo zypper install gocryptfs-doc
  • License: MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: gocryptfs
  • 1 provides
  • normalized package name match
  • Matched by: Gocryptfs
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: gocryptfs-doc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

gocryptfs

sudo port install gocryptfs
  • normalized package name match
  • Matched by: Gocryptfs
MacPorts ports tree · api.github.com · MacPorts ports tree: fuse/gocryptfs/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • libfuseRuntime dependency declared by Homebrew.
  • openssl@4Runtime dependency declared by Homebrew.
  • goBuild dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.

Same workflow

  • cryfsShares av.db curated category or tags: cli, encryption, filesystem, fuse, security.
  • dislockerShares av.db curated category or tags: cli, encryption, filesystem, fuse, security.
  • encfsShares av.db curated category or tags: cli, encryption, filesystem, fuse, security.
  • git-cryptShares av.db curated category or tags: cli, encryption, security.
  • git-remote-gcryptShares av.db curated category or tags: cli, encryption, security.
  • shushShares av.db curated category or tags: cli, encryption, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment