Luks

Luks

Install

1
# apt-get update && apt-get install -y cryptsetup

set up

Generate secret

1
# openssl rand -base64 32 > /root/.luks
# chmod 400 /root/.luks

Create partition

1
# cryptsetup luksFormat -c aes-xts-plain64 -s 512 -h sha512 /dev/vdb

Show informations

1
# cryptsetup luksDump /dev/vdb

Uncrypt / crypt

1
# cryptsetup luksOpen /dev/vdb safedata
# cryptsetup -v luksClose safedata

Format

1
# mkfs.ext4 /dev/mapper/safedata

Associate key to crypted partition

1
# cryptsetup -v luksAddKey /dev/vdb /root/.luks

Mount

1
# cat /etc/crypttab
safedata	UUID=3ffa60f1-a93d-1e4f-9f82-4c7db85e6b3e	/root/.luks	luks
1
# cat /etc/fstab
/dev/mapper/safedata        /datas   ext4    defaults        0       1