S3Drive - Can I access files outside of the client on iOS? Files does not work

Hello! I stumbled today over your project while looking for a replacement for my own hosted NextCloud. I do not have anymore the time to keep up with proper maintenance and happy to pay someone for it

Now to the issue: Mainly I use my setup to sync my Keepass db over clients. So I need to access the file from KeePassium. When I try to access s3drive via files on iOS, I get a message that I need to open the app to authorize. However, opening does not anything. I have E2E enabled. v1.12.1 (build: 10120102) iOS

Hi, I am quite surprised that despite having E2EE enabled the S3Drive appeared in the iOS Files. In principle, once E2EE is enabled the S3Drive should disappear from the list. Conversely if E2EE is enabled, it shouldn't be possible to enable the Mount in the settings. Files integration is currently in the (Alpha) state and unfortunately E2EE isn't supported just yet (due to memory issues). We've built iOS Files integration with Rclone, unfortunately once we load the crypt module in order to support E2EE, it exceeds the iOS 20MB memory limit and fails: https://developer.apple.com/forums/thread/739839 There are two options, none of them easy or straightforward. a) Rebuild the E2EE using iOS Swift, outside Rclone, but that's feasible just for S3 protocol, as we have no plans (nor capacity) of rebuilding whole Rclone in Swift. b) Trying to find some neat ways to optimize Rclone's memory usage, so it fits the iOS's 20MB limitation. Do you use S3 or some other Rclone back-end? (edited)

Oh, how unfortunate. I am using right now the storage provided by s3drive, I assume you have a s3backend?

7:55 PM

For my use case it would be as well fine to have “offline” files in the s3drive folder. Actually, that was what I expected when I made a file offline and was surprised to not find anything in the folder (the one with the sqlite db)

Kaon

Oh, how unfortunate. I am using right now the storage provided by s3drive, I assume you have a s3backend?

That's right, we've built our own S3 and serve it as Free and Paid plans. If our storage with E2EE enabled appeared in the list, then this is an error on our end. It actually shouldn't be there, becuase it doesn't work. Sorry for that, I will pass that info to our dev team for fixing. Regarding supporting E2EE for iOS Files, we will come back to this again in the near future, this feature is desirable by our community, so despite the challenges we'll try to make it happen one way or another. (edited)

Allright, thanks and I keep an eye on the project but without having my Keepass db available it would not yet work for me.

Kaon

Allright, thanks and I keep an eye on the project but without having my Keepass db available it would not yet work for me.

I assume that downloading a Keepass from the app whenever you need it is not an option?

8:02 PM

Whilst I still use Keepass, I've also decided to give: https://bitwarden.com/ a try and quite happy with the product. Don't want to make any recommendation here, but it really helped me to solve the syncing problem neatly, as there is no need to sync&merge the whole DB file every time there is a change. Perhaps it might suit your needs as well. (edited)

Kaon

Hello! I stumbled today over your project while looking for a replacement for my own hosted NextCloud. I do not have anymore the time to keep up with proper maintenance and happy to pay someone for it

Now to the issue: Mainly I use my setup to sync my Keepass db over clients. So I need to access the file from KeePassium. When I try to access s3drive via files on iOS, I get a message that I need to open the app to authorize. However, opening does not anything. I have E2E enabled. v1.12.1 (build: 10120102) iOS

a replacement for my own hosted NextCloud. ... I do not have anymore the time to keep up with proper maintenance

Believe me or not, but that was one of the reasons when I've decided to start this project back in 2022

It's probably eating way more time than NextCloud would ever do, but I hope at least we can offload some difficulties for other users at least. (edited)

I use both , Keepass and Bitwarden. Depending on how paranoid I am on the content.

8:37 PM

Actually, downloading the file from the app would be fine, it does not update that often. But tbh. I do not see how? (edited)

Have you tried: "Open with" feature? Once you navigate the file, you can then click 3 "dots" icon to the right and then you either shall be able to "Download" the file or open the file, if e.g. kdbx or other extension is registered by the Keepass.

9:30 PM

Out of own curiosity, tried with KeePassium on iOS. I've used: Open with, and had to use: More and select KeePassium On subsequent tries, KeePassium is already on the list of apps tha can handle the kdbx. I would be keen to hear if this satisfies your requirement.

9:32 PM

Ahh, I was trying out with some random python file. Here “open with” just showed the content. With the Keepass db it worked.

I will then continue to check my desktop workflow. (edited)

Tom

Hi, I am quite surprised that despite having E2EE enabled the S3Drive appeared in the iOS Files. In principle, once E2EE is enabled the S3Drive should disappear from the list. Conversely if E2EE is enabled, it shouldn't be possible to enable the Mount in the settings. Files integration is currently in the (Alpha) state and unfortunately E2EE isn't supported just yet (due to memory issues). We've built iOS Files integration with Rclone, unfortunately once we load the crypt module in order to support E2EE, it exceeds the iOS 20MB memory limit and fails: https://developer.apple.com/forums/thread/739839 There are two options, none of them easy or straightforward. a) Rebuild the E2EE using iOS Swift, outside Rclone, but that's feasible just for S3 protocol, as we have no plans (nor capacity) of rebuilding whole Rclone in Swift. b) Trying to find some neat ways to optimize Rclone's memory usage, so it fits the iOS's 20MB limitation. Do you use S3 or some other Rclone back-end? (edited)

For A, if this is any help I found a working Python implementation of Rclone's crypt algorithm (edited)

12:16 AM

https://github.com/Ftbom/rclone_crypt_py

GitHub - Ftbom/rclone_crypt_py: rclone crypt encrypt/decrypt library

rclone crypt encrypt/decrypt library. Contribute to Ftbom/rclone_crypt_py development by creating an account on GitHub.

12:17 AM

it maybe useful to look through to understand the algorithm being used

CrushedAsian255

https://github.com/Ftbom/rclone_crypt_py

Thanks, we already implemented rclone crypt algorithm (https://s3drive.app/changelog - [1.4.0] - 2023-07-21 - "Rclone compatible encryption scheme,") even before integrating with Go librclone. This allows us to support Rclone encryption scheme (currently for S3 back-ends) even on Web. We also push back improvements to Rclone cipher: https://github.com/rclone/rclone/issues/7192 It's just maintaining multiple implementations of crypt, along with all security updates and future upgrades, in a different languages isn't something we're extremely keen doing.

Changelog - S3Drive

Rclone crypt improvements (envelope encryption, truncation protecti...

We're running S3Drive (GUI for S3 on desktop, mobile, web) and recently aligned with Rclone's encryption scheme for better interoperability and features like drive mount and Webdav that we ...