Can someone explain the need for FUSE-T?

Help Desktop App
1

Came back from a week away, and Cryptomator wouldn’t open on my 16-inch M3 MacBook Pro running Sonoma (14.7.4). The error message that popped up prompted me to look at a discussion thread here that suggested using FUSE-T to fix the issue. After discovering that there was also a newer version to install (whose page also recommended FUSE-T), I installed that, and successfully installed FUSE-T as well. I will say that Cryptomator seemed a little zippier to respond when I signed into the new version.

Anyway, this message on the download page sparked my curiousity:

“We recommend installing FUSE-T. FUSE is optional but offers better integration into macOS.”

I’m a moderately knowledgeable Mac user, and would love to know more about how FUSE “offers better integration into macOS”.

Many thanks in advance,
John

2

We admittedly have bad and outdated documentation regarding the volume type. :see_no_evil:

Neither option is ideal, but macFUSE is the most mature one. So if you consider yourself a “moderately knowledgeable Mac user” and feel comfortable with booting into recovery mode (just once) to enable loading of kernel extensions, I would recommend using this option. Here is an installation guide.

For those folks who dislike the idea of having 3rd party kernel extensions, we recommend using fuse-t. It isn’t that mature and we have received reports of malfunctions.

Lastly, we have WebDAV for those wo don’t want to install any additional software, regardless of whether it is running in kernel or user space. It is sufficient for most file-based operations, however it feels a little clunky with warnings being displayed regarding the connection (to localhost) not being secure (because no CA will ever issue a TLS certificate for localhost).

1 Like
3

Thanks @overheadhunter. My only hesitation with macFUSE is that I don’t trust Apple to eventually disallow kernel extensions altogether. I’m curious about using WebDAV; is there a configuration guide for that?

Thanks again!

4

Hi.
There is not much to configure apart from selecting the volume type
https://docs.cryptomator.org/desktop/volume-type/

5

Hi
I am a seasoned unix mac user and just wanted to add an important “issue” with fuse-t.

There is actually two issues. As OP said, using fuse-t is the recommended way, (it is now even displayed when creating new vaults irrc) . However, as @overheadhunter stated Cryptomator over fuse-t is not mature, at least compared to the macfuse kernel extension implementation.

What I can say from the tests I made the past months, is that if you’re not using fancy things, fuse-t works really good, I am at least very satisfied. But, I join OP’s fear that Apple will deprecate Kernel extension in the future.

But now to feature not working with Cryptomator fuse-t !! namely symbolic links

I made tests that are reproducible. Fuse-t supports symlinks, no worries about that. However, Cryptomator with fuse-t, breaks the use of symbolic links
I always get “permission denied” errors. Reverting Cryptomator to using macfuse volume type solves the issue. But like the OP I really would like to get rid of Fuse kernel extension (macfuse) but this issue (unsupported feature or bug?) really limit me since my Obsidian Note taking system completely relies on symlinks :disappointed:

So is this a bug or a yet unsupported feature ?
Nevertheless, I love cryptomator (i am a supporter) and would really to see symlinks working as they do in fuse-t (tested with veracrypt-fuse-t)

And to test no fancy symlinks to do simply symlink two in same or different folders in the same vault…

6

Hi,

This description comes from Chat gpt only it is a very good description so I’m including it here.

It explains the fuse file system and why cryptometer uses it.

In the context of Cryptomator, FUSE-T is a modern, kernel-extension-free alternative to macFUSE, designed to improve compatibility and security on macOS—especially for Apple Silicon (M1/M2/M3) systems.

:mag: What Is FUSE-T?

FUSE-T is a user-space implementation of FUSE (Filesystem in Userspace) for macOS that avoids using kernel extensions (kexts). Instead, it operates by translating FUSE protocol calls into NFS (Network File System) calls, allowing macOS to mount encrypted volumes without deep system integration. This design aligns with Apple’s move away from supporting third-party kernel extensions, which are increasingly restricted in newer macOS versions .

:jigsaw: Why Cryptomator Uses FUSE-T

Cryptomator recommends FUSE-T for macOS users, particularly those with Apple Silicon devices, because:

No Kernel Extensions Required: FUSE-T doesn’t require kernel extensions, simplifying installation and avoiding the need to disable System Integrity Protection (SIP) .

Better macOS Integration: It offers smoother integration with macOS, reducing potential conflicts and installation issues associated with macFUSE .

Future-Proofing: As Apple continues to deprecate kernel extensions, FUSE-T provides a more sustainable solution for mounting encrypted volumes .

:warning: Considerations and Limitations

While FUSE-T offers several advantages, there are some considerations:

Experimental Support: Cryptomator’s support for FUSE-T is still considered experimental, and users may encounter occasional issues .

File Preview Behavior: Some users have reported that previewing files within a FUSE-T-mounted volume can update the file’s “date modified” attribute, which may be undesirable in certain workflows .

:white_check_mark: Recommendation

If you’re using Cryptomator on a Mac with Apple Silicon, installing FUSE-T is advisable for better compatibility and to avoid the complexities associated with kernel extensions. However, be aware of its experimental nature and monitor for any issues that may arise during use.

For more information or to download FUSE-T, you can visit the official website: fuse-t.org.