使用eCryptfs加密文件系统

（1）安装

[root@ECS iclound]# wget https://launchpad.net/ecryptfs/trunk/111/+download/ecryptfs-utils_111.orig.tar.gz

[root@ECS iclound]# tar zxvf ecryptfs-utils_111.orig.tar.gz

[root@ECS ecryptfs-utils-111]# ./configure --prefix=/usr/local/ecryptfs

[root@ECS ecryptfs-utils-111]# make

[root@ECS ecryptfs-utils-111]# make install

 

（2）创建目录

 

[root@ECS]#mkdir -pv /data                          //真实目录

[root@ECS]#mkdir -pv /iclound                     //挂载目录

 

（3）使用ecryptfs初始化目录

 

[root@ECS]#mount -t ecryptfs /data /iclound

Passphrase:

Select cipher:

1) aes: blocksize = 16; min keysize = 16; max keysize = 32

2) blowfish: blocksize = 8; min keysize = 16; max keysize = 56

3) des3_ede: blocksize = 8; min keysize = 24; max keysize = 24

4) twofish: blocksize = 16; min keysize = 16; max keysize = 32

5) cast6: blocksize = 16; min keysize = 16; max keysize = 32

6) cast5: blocksize = 8; min keysize = 5; max keysize = 16

Selection [aes]:

Select key bytes:

1) 16

2) 32

3) 24

Selection [16]: 32

Enable plaintext passthrough (y/n) [n]:

Enable filename encryption (y/n) [n]: y

Filename Encryption Key (FNEK) Signature [048b231563eb2ad0]:

Attempting to mount with the following options:

  ecryptfs_unlink_sigs

  ecryptfs_fnek_sig=048b231563eb2ad0

  ecryptfs_key_bytes=32

  ecryptfs_cipher=aes

  ecryptfs_sig=048b231563eb2ad0

Mounted eCryptfs

（4）测试

 

上传测试文件

 

[root@ECS]# ls -l

-rw-r--r-- 1 root root 49085020 Nov 14  2017  思科《BGP设计与实现》.pdf

-rw-r--r-- 1 root root 32611945 Nov 14  2017  思科《网络安全性设计（第二版）》.pdf

-rw-r--r-- 1 root root 25114337 Nov  2  2017  思科《高级MPLS设计与实施》.pdf

-rw-r--r-- 1 root root  2109379 Mar 19  2018  红茶三杯BGP.pdf

-rw-r--r-- 1 root root  2944231 Mar 19  2018  红茶三杯IProuting.pdf

-rw-r--r-- 1 root root  2228116 Mar 19  2018  红茶三杯IPv6.pdf

-rw-r--r-- 1 root root  1675721 Mar 19  2018  红茶三杯MPLS.pdf

-rw-r--r-- 1 root root  2485151 Mar 19  2018  红茶三杯MPLSTE.pdf

-rw-r--r-- 1 root root  5276538 Mar 19  2018  红茶三杯MPLSVPN.pdf

-rw-r--r-- 1 root root  1834720 Mar 19  2018  红茶三杯OSPF.pdf

-rw-r--r-- 1 root root  2811654 Mar 19  2018  红茶三杯Switching.pdf

 

卸载挂载目录

 

[root@ECS]#umount /iclound

 

查看加密目录

 

[root@ECS]# ls -l

total 281136

-rw-r--r-- 1 root root  2822144 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj4b5uZtdfAASWROMrSKu1dYvuBvODnW8kswp5.6DgfH2-

-rw-r--r-- 1 root root  2953216 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj4b5uZtdfAASWROMrSKu1dcUDczSbM-WqQCuMj-XlXCU-

-rw-r--r-- 1 root root  2236416 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj8WKFoOWx3b7MDQbco9Zn-ZXSSJePKzUBt34rK68ohto-

-rw-r--r-- 1 root root  1843200 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj8WKFoOWx3b7MDQbco9Zn-e0zcVLKZHKpwzXjtbKJcqY-

-rw-r--r-- 1 root root  1687552 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj8WKFoOWx3b7MDQbco9Zn-jfsSFHWNHxP3tMmuIi899w-

-rw-r--r-- 1 root root  5287936 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjK30hBKmgcUD3Z58xyq-YFoGAjtYn4FOMaO6OzSbx5h2-

-rw-r--r-- 1 root root  2117632 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjTId.ryt0v0Lpx5jPNx-M29MPUOHSL8Y61Or18XPpmVM-

-rw-r--r-- 1 root root  2494464 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjfa8BsuHd-EtzGyd0CMz6mGm4yKAm1mboJRhDoU-RjSI-

-rw-r--r-- 1 root root  2494464 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYDN8vcm6G1zHEAopbl8Ef15haMtzMicskNMIznSiDFCU-

-rw-r--r-- 1 root root  2953216 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYUKKNbHUe3ixo0BHAZx0upZ.hW7xZ9InVWjShKdmWfzY-

-rw-r--r-- 1 root root  2822144 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYUKKNbHUe3ixo0BHAZx0upZgAD5cBM6KtXCzTUcCSvyM-

-rw-r--r-- 1 root root  5287936 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYfqkOfzHA.PY1fyHfeexeAVJdaHzU-OSNKJ4ucisWOfY-

-rw-r--r-- 1 root root  1843200 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYvA6.qJ6XPdqYgjqeu2rys42.JCQkdvTcQNDfQaGIVE--

-rw-r--r-- 1 root root  2236416 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYvA6.qJ6XPdqYgjqeu2rys5YFK6Jc4VDBbOEAcxuOsA--

-rw-r--r-- 1 root root  1687552 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYvA6.qJ6XPdqYgjqeu2rysDxh33jT3CKV.5sTo.X.fXQ-

-rw-r--r-- 1 root root  2117632 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYy-WhpglOyqyt0YRXEySFN8l60EhexRBuS.Gm7mx.4sc-

-rw-r--r-- 1 root root 15572992 Nov  2  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjDx-E304294o0uITpWFBOnrXddINc4qKvGPIH.ACTZUDQJbFv3ApxchEUpb7xaTD9

-rw-r--r-- 1 root root 49094656 Nov 14  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjMc93GPummUvYhtAVddSXI8xzqwAFt40Qp0xXlnDd8uUOfYfllc2jj7ClpmLhcJYA

-rw-r--r-- 1 root root 25124864 Nov  2  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjSVYfd1xkdNweRx3Zvex41ql3QrPbwLXncjM0hnV3vRZv78bbh533Oas37m.m7OLX

-rw-r--r-- 1 root root 25124864 Nov  2  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYIhzUEQQB8D20wB-y.4VNLhizE27wBQw-H5IeBjXk5F97LZoCKwt0nowZQt605FR6

-rw-r--r-- 1 root root 49094656 Nov 14  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYd8yBkkIOmaH8oX0HIHmLGc77uJfKtcTWKTlDakTmTCTq8ty-B2KoU7XxGJMECoru

-rw-r--r-- 1 root root 32620544 Nov 14  2017 ECRYPTFS_FNEK_ENCRYPTED.FZY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj.2N17GkDXCdtWS3bHy1Vw2DYaD67EsGuE5.OMvwz-tWTIu3SgpGS6LBzg3TBLAbjSShr1OmDe0rc2RLCzTb0yE--

 

挂载目录

 

[root@ECS]#mount -t ecryptfs /data /iclound