Ungabethela kanjani ukwahlukanisa nge-DM-Crypt LUKS

usufoku

Akekho ophunyukayo okufanele ufune thuthukisa ezokuphepha imishini yethu ngangokunokwenzeka, kokubili kumakhompyutha wedeskithophu nakuma-laptops, noma kunjalo uma kwenzeka okwakamuva kubaluleke kakhulu - ikakhulukazi uma siyisebenzisela umsebenzi- ngoba iqiniso lokuthi uzisusa kwesinye ziye kwenye indawo ziyandisa amathuba okulahleka noma eyebiwe, futhi kuzimo zombili imininingwane yethu ingavezwa futhi imiphumela yalokhu ingaba mibi kakhulu.

Ezinye izindlela ngalo mqondo zimbalwa, futhi leyo yinto enhle ngayo software free kukonke, yize kuleli cala ngifuna ukukhuluma ngalo I-DM-Crypt LUKS, isixazululo sokubethela idume isikhathi eside ngenxa yokuthi ihlanganiswe ne-kernel njengemodyuli - enikeza ukufinyelela kuma-Crypto APIs i-linux kernel- futhi unikele ukubethela okusobala kanye nokukwazi ukumaka amadivayisi nokuhlukanisa kumazinga we-block virtual, ngaleyo ndlela avumela ngemfihlo ukwahlukanisa, wonke ama-hard drive, amavolumu we-RAID, imiqulu enengqondo, amafayela noma amadrayivu asuswayo.

Ukuqala sidinga yiba nokuhlukaniswa kwamahhala (kimi, / dev / sda4), ngakho-ke uma kungenjalo kuzodingeka senze ukwahlukanisa okusha sisebenzisa ithuluzi elinjenge-GParted. Uma sesinendawo yamahhala esizoqala ngayo faka i-cryptsetup uma singasenalo leli thuluzi, okuvame ukufakwa ngokwakhona kepha mhlawumbe lapho sifaka yethu Ubuntu sikhethe ukufakwa okuncane:

# thola ukufaka i-cryptsetup

Manje ake siqale qala ukwahlukanisa sizoya ini ngemfihlo, lapho sisebenzisa khona ukwahlukanisa kwamahhala esishilo ekuqaleni. Lesi yisinyathelo esidala nokhiye wokuqala, futhi yize igama laso libonakala likhombisa ukuthi ukwahlukanisa kufomathiwe okungenzeki, kepha kumane kukulungiselela ukusebenza ngokubethela (kithi sikhethele I-AES ngosayizi wokhiye wama-byte ayi-512:

# cryptsetup –verbose –verbose –cipher aes-xts-plain64 –key-size 512 –hash sha512 –iter-time 5000 –usebenzisa-okungahleliwe luksFormat / dev / sda4

Sizothola umlayezo wesixwayiso lapho saziswa khona ukuthi okuqukethwe esikugcine ngalesi sikhathi / dev / sda4, futhi siyabuzwa ukuthi siqinisekile yini. Sivuma ngokubhala YEBO, kanjena ngamagama amakhulu, bese siyacelwa ukuthi sifake ibinzana elithi LUKS, kabili ukuqinisekisa ukuthi awekho amaphutha.

Manje 'sivula' isitsha esibethelwe, ngasikhathi sinye sisinikeza igama elibonakalayo, okuzoba yilona elizovela ohlelweni (ngokwesibonelo lapho senza umyalo df -h ukubona ngeso lengqondo ukwahlukaniswa okuhlukile, kithi sizokubona ku- / dev / mapper / encrypted):

# encrytpsetup luksVula / dev / sda4 ibethelwe

Siyacelwa Ukhiye we-LUKS lokho esikudalile phambilini, singena kukho futhi sikulungele. Manje kufanele senze uhlelo lwefayela lwalesi sehlukaniso esibethelwe:

# mkfs.ext3 / dev / mapper / encrypted

Isinyathelo esilandelayo uku engeza lesi sahlukaniso kufayela le- / etc / crypttab, Ifana ne- / etc / fstab ngoba inesibopho sokuhlinzeka ngemishini ebethelwe ekuqaleni kwesistimu:

# cryto_test / dev / sda4 akukho luks

Ngemuva kwalokho sakha iphuzu lokuphakama kwalokhu kuhlukaniswa okubethelwe bese sengeza lonke lolo lwazi kufayela le- / etc / fstab ukuze sikwazi ukuthola konke okutholakalayo ngokuqalisa kabusha ngakunye:

# mkdir / mnt / kubethelwe

# nano / etc / fstab

Ukungeza okulandelayo kufanele kube kuhle, noma ngabe labo abafuna okomuntu uqobo bangabheka amakhasi e-fstab man (man fstab) lapho kunolwazi oluningi ngakho:

/ dev / mapper / encrypted / mnt / encrypted ext3 iphutha 0 2

Manje, njalo lapho siqala kabusha uhlelo sizocelwa ukuthi sifake umushwana wokungena, futhi ngemuva kokwenza kanjalo ukwahlukanisa okubethelwe kuzovulwa ukuze sikwazi ukutholakala ngakho.


Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.

  1.   UJames kusho

    Ngiyabonga ngendatshana yenu.
    Nginenkinga, angazi uma kwenzeka kubantu abaningi abanjengami:

    Ngilandela izinyathelo ozichazile futhi ngemuva kokuqinisekisa ukuthi ifakiwe ngiqala icala lesibili->

    i-cryptsetup -verbose -verbose -ipher aes-xts-plain64 –key-size 512 –hash sha512 –iter-time 5000 –use-random luksFormat / dev / sda4

    cryptsetup: Isenzo esingaziwa

    Ngisebenzisa Kubuntu 15.04. Noma yimuphi umqondo wokuthi ungaxazululwa kanjani.

    Gracias