Skip to main content

File immutability manager

Project description

Keep your important files safe.

Make them unable to be modified or deleted by any user, even root.


$ pip install entomb

How it works

Entomb recursively sets/unsets the immutable attribute on all files on a path using the chattr command.

Files in .git directories are ignored by default, but can be included.

The immutable attribute is never set on directories, because this would stop files being created in those directories. Entomb works on files only.

At the moment Entomb only works on Linux.

Entomb has no dependencies.


$ # Make all files in ~/photos immutable.
$ entomb ~/photos

$ # List all files in ~/photos which are not immutable.
$ entomb --list-mutable ~/photos

$ # Report on how many files in ~/photos are and aren't immutable.
$ entomb --report ~/photos

$ # Do a dry run on ~/photos, including any git files/directories.
$ entomb -d -g ~/photos

$ # Make all files in ~/photos mutable (i.e. unset the immutable
$ # attribute).
$ entomb -u ~/photos


$ entomb --help
usage: entomb [options] path

Manage file immutability.

positional arguments:
  path               the path to operate on

optional arguments:
  -h, --help         show this help message and exit
  -d, --dry-run      make no changes
  -g, --include-git  include .git directories (excluded by default)
  --list-immutable   list all immutable files
  --list-mutable     list all mutable files
  -r, --report       display a status report
  -u, --unset        unset immutability
  -v, --version      show program's version number and exit


Get set up, preferably in a virtualenv:

$ make init
$ make install

Lint the code:

$ make lint

Run the tests:

$ make test

Check the test coverage:

$ make coverage


  1. Check out the main branch.

  2. Ensure CHANGELOG.rst includes everything to go in the release and is committed.

  3. Ensure everything to go in the release is committed.

  4. Increment the version in

  5. Shift everything in the Unreleased section of CHANGELOG.rst to a new section named with the new version number and the current date.

  6. Ensure CI runs without warnings or errors:

    $ make ci
  7. Make and tag the release commit:

    $ make release
  8. Build the package:

    $ make package
  9. Publish the package to PyPI:

    $ make publish
  10. Push to the repo and clean up packaging artifacts:

    $ make push
    $ make clean
  11. Create a GitHub release.

Code style

  1. Only modules are imported. Classes, functions and variables are not imported directly.

  2. A module’s functions are ordered alphabetically.

  3. A module’s private functions are placed alphabetically at the bottom of the module.

  4. Docstrings follow the NumPy docstring guide.

  5. Strings are enclosed with double quotes.

  6. The last item of a multi-line dictionary or list has a trailing comma.


For what has changed in each version, see CHANGELOG.rst.

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

entomb-0.4.0.tar.gz (22.9 kB view hashes)

Uploaded Source

Built Distribution

entomb-0.4.0-py3-none-any.whl (27.4 kB view hashes)

Uploaded Python 3

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page