##master-page:HomepageReadWritePageTemplate
##master-date:Unknown-Date
#format wiki
#language en
= Setup Linux crypto =
 * Links [[ecrypt]] . [[Linux/HomeDirEncryption]]
 Instructions on setting up crypto on USB HD for linux.
 * 2010 - January
 1. Find disk mapping by-uuid to keep it constant.
    * # ls -l /dev/disk/by-uuid/
 1. Setup Luks on device
    * cryptsetup --verbose --verify-passphrase luksFormat /dev/sdb1
 1. Format the encrypted partition
    * # mkfs.ext3 /dev/mapper/crypt -L crypt1.5GB -m 0.5
    * # mkfs.ext3 -j -m 1 -O dir_index,filetype,sparse_super,extent /dev/mapper/crypt
      flex_bg,extent,uninit_bg
    * mkfs.ext4 -O dir_index,filetype,sparse_super,extent,flex_bg,uninit_bg /dev/mapper/crypt -L crypt1.5GB -m 0.1

 1. 
    * gvim /etc/cryptmount/cmtab
    {{{
 crypt {
    keyformat=luks
    dev=/dev/disk/by-uuid/0513f3c1-14da-41d5-b4ee-97fac5b5ac23 keyfile=/dev/disk/by-uuid/0513f3c1-14da-41d5-b4ee-97fac5b5ac23
    dir=/home/USER/crypt    fstype=ext3
    }
    }}}
    {{{
  personal {
   keyformat=luks
   dev=/home/USER/.cryptofileLUKS
   dir=/home/USER/doc/personal
   }
    }}}
 1. mkdir /home/USER/crypt
 1. cryptmount crypt
 * 2015 - encrypted loop file
   {{{
personal  /home/pes/.cryptofileLUKS         none    luks,loop
   }}}
   * Start with $sudo cryptdisks_start personal


 * Automate / bypass luks password for LUKS passphrase
   * Create /etc/initramfs-tools/hooks/local-noluksprompt and add the following lines:
     {{{
mkdir -p ${DESTDIR}/root/bin
cat >${DESTDIR}/root/bin/luks-password <<END
#!/bin/sh --
echo -n password
END
chmod +x ${DESTDIR}/root/bin/luks-password
echo "Added cleartext password -- http://atterer.org/linux-remove-disable-luks-encryption-password-on-disk-partition-crypttab-initrd"
     }}}
     * Make the file executable with
       {{{ chmod +x /etc/initramfs-tools/hooks/local-noluksprompt  }}}
     * edit /etc/crypttab 
       * add option to root disk, ,keyscript=/root/bin/luks-password
     * update-initramfs -u


pcfpg clpg iltbbtims  pchdg-hp
...
----
CategoryLinux