Maitiro ekunyora pasi kupatsanura neDM-Crypt LUKS

Hapana anotiza waunofanira kutsvaga kunatsiridza kuchengeteka Zvemidziyo yedu nepazvinogona napo, izvi zvemakomputa emakomputa nemalaptop, kunyangwe muchiitiko chekupedzisira zvinonyanya kudikanwa - kunyanya kana tikazvishandisa pabasa- kubvira chokwadi chekuvatora kubva kune mumwe kuenda kune mumwe nzvimbo kunowedzera mikana yekuirasa kana kubiwa kubva kwatiri, uye muzviitiko zvese izvi ruzivo rwedu runogona kufumurwa uye mhedzisiro yeizvi ingave yakakomba kwazvo.

Dzimwe nzira mune iyi pfungwa ishoma, uye ndicho chinhu chakanaka nezvazvo free software kazhinji, kunyangwe mune ino nyaya ini ndoda kutaura nezvayo DM-Crypt LUKS, mhinduro yekunyorera inozivikanwa kwazvo kwenguva yakareba nekuda kwekuti inosanganiswa mukernel sedhiraivho - inopa mukana weiyo Crypto APIs e linux kernel- uye upe kujekesa kunyorera uye kugona mepu zvigadzirwa uye zvikamu mumatanho e block block, nokudaro uchibvumira encrypt partitions, madhiraivha akaomarara, mavhoriyamu eRAID, mavhoriyamu ane musoro, mafaera kana madhiraivhu anobviswa.

Kutanga tinoda iva nechikamu chepachena (mune yangu, / dev / sda4), saka kana zvisiri izvo isu tichafanirwa kugadzira chikamu chitsva tichishandisa chishandiso chakaita seGParted. Kana tangowana nzvimbo yemahara isu tichatanga nayo gadza cryptsetup kana tisisina chishandiso ichi, icho kazhinji chinowanzo kuverengerwa nekutadza asi pamwe patinoisa yedu Ubuntu takasarudza kumisikidza kushoma:

# apt-tora kuisa cryptsetup

Zvino ngatitange na tanga kupatsanura chii chatiri kuenda encrypt, yatinoshandisa iyo yemahara chikamu chatakambotaura nezvacho pakutanga. Iri idanho rinogadzirawo kiyi yekutanga, uye kunyangwe zita rayo richiita serinoratidza kuti chikamu chacho chakamiswa izvo hazviitike, asi kungozvigadzirira kuti zvishande pamwe nekunyorera (kwatiri isu takasarudza AES ine saizi yakakosha yemakumi mashanu nemakumi mashanu emabheti:

# cryptsetup -verbose -verbose -cipher aes-xts-plain64 -key-size 512 -hash sha512 -iter-nguva 5000 - shandisa-zvisina kujairika luksFormat / dev / sda4

Isu tinogamuchira meseji yambiro isu patinoziviswa kuti izvo zvemukati izvo isu zvatakachengeta panguva ino mukati / dev / sda4, uye isu tinobvunzwa kana tine chokwadi. Tinobvumirana nekunyora Hungu, seizvi nemavara makuru, uyezve tinokumbirwa kuisa mutsara weRUKS, kaviri kuti uve nechokwadi chekuti hapana zvikanganiso.

Iye zvino isu 'tinovhura' chivharo chakanyorwa, tichichipa zita chairo, rinova iro rinowoneka naro muchirongwa (semuenzaniso patinoita mutemo df-h kuona zvikamu zvakasiyana, kwatiri tichazviona mu / dev / mapper / encrypted):

# crytpsetup luksVhura / dev / sda4 yakavharidzirwa

Isu tinobvunzwa iyo LUKS kiyi izvo zvatakasika kare, tinozvipinza uye takagadzirira. Iye zvino isu tinofanirwa kugadzira iyo faira sisitimu yeichi chakavharirwa chikamu:

# mkfs.ext3 / dev / mapper / encrypted

Nhanho inotevera ndeye wedzera ichi chikamu ku / etc / crypttab faira, yakafanana ne / etc / fstab sezvo iri iro basa rekupa iwo akavharirwa madhiraivhu pane system yekutanga:

# cryto_test / dev / sda4 hapana luks

Ipapo isu tinogadzira iyo nzvimbo yekukwiridzira yeichi chakavharidzirwa uye tinowedzera iro rose iro ruzivo kune / etc / fstab faira kuitira kuti isu tive nezvose zviripo nega reboot:

# mkdir / mnt / yakavharidzirwa

# nano / etc / fstab

Kuwedzera zvinotevera kunofanirwa kuve kwakanaka, kunyangwe avo vari kutsvaga avo vakasarudzika vanogona kutarisa iwo fstab man mapeji (man fstab) uko kune ruzivo rwakawanda nezvazvo:

/ dev / mapper / encrypted / mnt / encrypted ext3 zvisizvo 0 2

Zvino, pese patinotangazve sisitimu isu tinobvunzwa kuti tigoisa iyo passphrase, uye mushure mekuita kudaro chikamu chakavharirwa chichavhurwa kuitira kuti tigowana chichiwanikwa.