How to Secure a Thumbdrive with Gocryptfs on Crostini
This guide assumes the user is using a Debian-based disto and is written specifically for Crostini.
In this example the removable storage device is
sudo apt install -y gocryptfs
Create two directories. The secured one is on the thumbdrive. The clear directory is in the user’s home directory
mkdir -p /mnt/chromeos/removable/USB128GB/encrypted ~/clear
Initialize the encrypted directory.
gocryptfs -init /mnt/chromeos/removable/USB128GB/encrypted
Mounting and unmounting
gocryptfs /mnt/chromeos/removable/USB128GB/encrypted ~/clear
fusermount -u ~/clear