Difference between revisions of "Cryptsetup"

Latest revision as of 19:06, 5 May 2014

cryptsetup is utility used to conveniently setup disk encryption based on dm-crypt kernel module. These include plain dm-crypt volumes, LUKS volumes, loop-AES and TrueCrypt compatible format.

Example

• Create an encrypted file system on a given partition:

fdisk -cu /dev/xvde1
partx -a /dev/xvde
cryptsetup luksFormat /dev/xvde1
cryptsetup luksOpen /dev/xvde1 vault
mkfs.ext4 /dev/mapper/vault
mkdir /vault

• Edit /etc/fstab and add the following line:

/dev/mapper/vault  /vault  ext4  defaults  1 2

• Test mount points:

mount -a

• Create/edit /etc/crypttab and add the following line:

vault  /dev/xvde1

• Allow for automated boot with your /vault drive automatically mounted and password entered (this is a very bad idea, as it defeats the entire purpose of LUKS encrypted partitions):

echo -n "vault  /dev/xvde1  /root/.vault" > /etc/crypttab
echo -n "your_password" > /root/.vault
chown root /root/.vault && chmod 600 /root/.vault
cryptsetup luksAddKey /dev/xvde1 /root/.vault

• Close

cryptsetup luksClose vault

External links

• Official cryptsetup website