LUKS: Difference between revisions
| Line 33: | Line 33: | ||
===Unmounting=== | ===Unmounting=== | ||
<pre> | <pre> | ||
# Unmount your partition | |||
umount <mountlocation> | umount <mountlocation> | ||
# Close the decrypted drive | |||
cryptsetup close <name> | cryptsetup close <name> | ||
</pre> | </pre> | ||
Revision as of 02:56, 26 July 2020
LUKS encryption
Getting Started
See Archwiki: dm-crypt/Device encryption.
Encrypting a device
- Setup encryption
cryptsetup -v --type luks --cipher aes-xts-plain64 --key-size 512 --hash sha512 \
--iter-time 3000 --use-urandom --verify-passphrase luksFormat <device>
- Open encrypted drive
cryptsetup open <device> <name>
- Create a partition
mkfs.fstype /dev/mapper/<name> # E.g. # mkfs.ext4 /dev/mapper/luksdrive1
Mounting
# Decrypt the drive cryptsetup open <device> <name> # Mount your partition mount -t <fstype> /dev/mapper/<name> <mountlocation>
Unmounting
# Unmount your partition umount <mountlocation> # Close the decrypted drive cryptsetup close <name>