Linux luks硬盘加密

本例加密硬盘/dev/sdb

Step1:创建加密

root@AWS:~# cryptsetup luksFormat /dev/sdb

WARNING!
========
这将覆盖 /dev/sdb 上的数据，该动作不可取消。

Are you sure? (Type uppercase yes): YES
输入 /dev/sdb 的口令：
确认密码：
root@AWS:~#

Step2:创建挂载点

root@AWS:~# mkdir /lfs

 Step3:映射分区

root@AWS:~# cryptsetup luksOpen /dev/sdb lfs
输入 /dev/sdb 的口令：
root@AWS:~#

 Step4:格式化、挂载分区

root@AWS:~# mkfs.ext4 /dev/mapper/lfs
mke2fs 1.44.5 (15-Dec-2018)
Creating filesystem with 18345984 4k blocks and 4587520 inodes
Filesystem UUID: f92ea6b3-2871-4000-bce9-a8aab7a7cf3d
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424

Allocating group tables: done
Writing inode tables: done
Creating journal (131072 blocks): done
Writing superblocks and filesystem accounting information:
done

root@AWS:~#

root@AWS:~# mount /dev/mapper/lfs /lfs

Step5:格式化、挂载分区

root@AWS:~# vi /etc/fstab 

UUID="f92ea6b3-2871-4000-bce9-a8aab7a7cf3d" /lfs          ext4    defaults        0       0

Step6:设置自动加密挂载

root@AWS:~# touch /root/cryptpasswd

root@AWS:~# cryptsetup luksAddKey /dev/sdb  /root/cryptpasswd 

root@AWS:~# vi /etc/crypttab