![]() ![]() # cryptsetup OPTIONS action action-specific-options device dmname For further information see Data-at-rest encryption#Block device encryption. Devices accessed via the device-mapper are called block devices. The most notable expansion was for the Linux Unified Key Setup (LUKS) extension, which stores all of the needed setup information for dm-crypt on the disk itself and abstracts partition and key management in an attempt to improve ease of use. The tool was later expanded to support different encryption types that rely on the Linux kernel device- mapper and the cryptographic modules. 7.5.2 With a keyfile embedded in the initramfsīefore using cryptsetup, always make sure the dm_crypt kernel module is loaded.Ĭryptsetup is the command line tool to interface with dm-crypt for creating, accessing and managing encrypted devices.7.5.1.2 Configuring the kernel parameters.7.5.1 With a keyfile stored on an external media.7.5 Unlocking the root partition at boot.7.4 Manually unlocking a partition using a keyfile.7.3 Configuring LUKS to make use of the keyfile.7.2.1.1 Securely overwriting stored keyfiles.7.2.1 Storing the keyfile on a file system.7.2 Creating a keyfile with random characters.5.4 Conversion from LUKS1 to LUKS2 and back.5.3.2 Re-encrypting an existing LUKS partition.5.3.1 Encrypt an existing unencrypted file system.4.1.2 Unlocking/Mapping LUKS partitions with the device mapper. ![]() 4.1.1.1 Using LUKS to format partitions with a keyfile. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |