Indlela yokubethela ukwahlula kunye ne-DM-Crypt LUKS

Akukho mntu ubalekileyo ekufuneka ukhangele kuye ukuphucula ukhuseleko izixhobo zethu kangangoko kunokwenzeka, kokubini kwiikhompyuter zekhompyuter kunye neelaptops, nangona kwimeko yesiphelo inyanzelekile ngokuthe ngqo- ngakumbi ukuba siyisebenzisela umsebenzi- kuba inyani yokuzithatha ukusuka kwenye isiya kwenye indawo inyusa amathuba okuphulukana nayo okanye ukuba ibiwe kuthi, kwaye kuzo zombini iimeko ulwazi lwethu lunokuvezwa kwaye iziphumo zoku ziya kuba zibi kakhulu.

Ezinye iindlela kule ndlela zimbalwa, kwaye yinto elungileyo malunga nayo software free ngokubanzi, nangona kule meko ndifuna ukuthetha ngayo I-DM-Crypt LUKS, isisombululo sokubethela Idume ixesha elide enkosi kwinto yokuba idityaniswe kwikernel njengemodyuli-enikezela ukufikelela kwii-Crypto APIs ze I-linux kernel-Kwaye unikele Ukubhala ngokufihlakeleyo kunye nokukwazi ukwenza imephu yezixhobo kunye neesahlulelo kumanqanaba ebhloko, ngokuvumela bhala izahlulelo, zonke ii-hard drive, ivolumu yeRAID, imiqulu esengqiqweni, iifayile okanye ukuqhuba okususwayo.

Ukuqala kufuneka ube nesahlulelo sasimahla (kwimeko yam, / dev / sda4), ke ukuba akunjalo kuya kufuneka senze isahlulelo esitsha sisebenzisa isixhobo esinjengeGParted. Nje ukuba sinendawo yasimahla esiza kuqala ngayo faka i-cryptsetup ukuba asisenaso esi sixhobo, esihlala sibandakanywa ngokungagqibekanga kodwa mhlawumbi xa sifaka yethu Ubuntu sikhethe ufakelo oluncinci:

# apt-fumana ukufaka i-cryptsetup

Ngoku masiqale Qalisa ukwahlula siza kwenza ntoni encrypt, apho sisebenzisa eso sahlulelo simahla sithethe ngaso ngaphambili. Eli linyathelo elivelisa isitshixo sokuqala, kwaye nangona igama laso libonakala libonisa ukuba ulwahlulo luyifomathi olungenzekiyo, kodwa lulungiselela nje ukusebenza ngokubethela (kwimeko yethu sikhethile I-AES enobungakanani obuphambili bee-512 byte:

# cryptsetup -verbose -verbose -cipher aes-xts-plain64 –key-size 512 –hash sha512 -iter-time 5000 -usebenzise-okungahleliwe luksFormat / dev / sda4

Siza kufumana umyalezo osisilumkiso apho sixelelwa ukuba umxholo esiwugcinile ngeli xesha / dev / sda4, kwaye siyabuzwa ukuba siqinisekile na. Sivuma ngokubhala EWE, ngolu hlobo ngoonobumba abakhulu, emva koko sicelwe ukuba sifake ibinzana elithi LUKS, kabini ukuqinisekisa ukuba akukho zimpazamo.

Ngoku 'sivula' isikhongozeli esifihliweyo, ngaxeshanye silinika igama elibonakalayo, eliya kuba lelona livela kwinkqubo (umzekelo xa sisenza umthetho df-h ukujonga ukwahlula okwahlukileyo, kwimeko yethu siza kuyibona kwi / dev / mapper / encrypted):

I-Open / dev / sda4 ibhalwe ngokufihliweyo

Siyabuzwa i Isitshixo seLUKS esidale ngaphambili, siyangena kwaye sikulungele. Ngoku kufuneka senze inkqubo yefayile yokwahlula okubhaliweyo:

# mkfs.ext3 / dev / mapper / encrypted

Inyathelo elilandelayo kuku yongeza eli hlulo kwifayile / etc / crypttab, Ifana ne- / etc / fstab kuba inoxanduva lokubonelela ngokuqhuba ngokufihliweyo kuqaliso lwenkqubo:

# cryto_test / dev / sda4 akukho luks

Emva koko senza indawo yentaba yokwahlula okufihliweyo kwaye songeze lonke olo lwazi kwifayile / njl / fstab ukuze sibe nayo yonke into ekhoyo ngokuqala kwakhona:

# mkdir / mnt / encrypted

# nano / njl / fstab

Ukongeza oku kulandelayo kufanelekile, nangona abo bafuna ezona zintando banokujonga kwiphepha le-fstab man (man fstab) apho kunolwazi oluninzi malunga nalo:

/ dev / mapper / encrypted / mnt / encrypted ext3 yokungagqibeki 0 2

Ngoku, ngalo lonke ixesha siqala kwakhona inkqubo siza kucelwa ukuba singene ibinzana logqithiso, kwaye emva kokwenza oko ukwahlula okubhaliweyo kuya kuvulwa ukuze sikwazi ukufumaneka.