Linux磁盘加密

1.磁盘分区

fdisk -cu /dev/sda

n-p-1-+100M-w

2.加密

crypsetup luksFormat /dev/sda1

YES   \\确认加密

redhat \\输入密码

redhat  \\重复密码

3.创建磁盘映射

crypsetup luksOpen /dev/sda1 boxue

4.磁盘格式化

mkfs.ext4 /dev/mapper/boxue

5.手动挂载

mkdir /aaa

mount /dev/mapper/boxue /aaa

6.关闭加密盘

umount /aaa

crypsetup luksClose boxue

7.加密盘开机手动输入密码挂载

vim /etc/fstab

/dev/mapper/boxue /aaa ext4 defaults 0 0

vim /etc/crypttab

boxue /dev/sda1 none

8.加密盘开机自动挂载

vim /etc/fstab

/dev/mapper/boxue /aaa ext4 defaults 0 0

echo -n "redhat" > /root/rhce

vim /etc/crypttab

boxue /dev/sda1    /root/rhce

cryptsetup luksAddKey /dev/sda1 /root/rhce