b80e4e5ff8
This is a revamping of the TinHat build, see
http://opensource.dyc.edu/tinhat
Signed-off-by: Anthony G. Basile <blueness@gentoo.org>
72 lines
1.7 KiB
Plaintext
72 lines
1.7 KiB
Plaintext
|
|
- First make the key file. To make things easy, I've given you a script. Just run
|
|
|
|
./mkkey.sh
|
|
|
|
to generate key.gpg This file contains 65 random keys in an ascii armored gpg
|
|
file. (See the reference below for details.)
|
|
|
|
If this is slow, do some work. (It depends on /dev/random which blocks on system entropy.)
|
|
|
|
Put it somewhere. A USB stick is good. You can't put it on the filesystem since
|
|
it lives only in RAM. Once you reboot, poof! and no more access to your data.
|
|
|
|
You have been warned!
|
|
You have been warned!
|
|
You have been warned!
|
|
|
|
|
|
- Fill your drive with random data. Replace sda with your device.
|
|
|
|
head -c 15 /dev/urandom | uuencode -m - | head -n 2 | tail -n 1 | losetup -p 0 -e AES256 /dev/loop3 /dev/sda
|
|
dd if=/dev/zero of=/dev/loop3 bs=4k conv=notrunc 2>/dev/null
|
|
losetup -d /dev/loop3
|
|
|
|
|
|
- Add the following line to /etc/fstab
|
|
|
|
/dev/sda /mnt/mpoint ext3 defaults,noauto,loop=/dev/loop3,encryption=AES256,gpgkey=/path/to/key.gpg 0 0
|
|
|
|
Change /mnt/mpoint to whatever mount point you like. Change /path/to to
|
|
wherever your key lives.
|
|
|
|
NOTE: We are using the entire drive as one partition.
|
|
|
|
|
|
- Lay down a filesystem on your encrypted partition:
|
|
|
|
losetup -F /dev/loop3
|
|
mke2fs -j /dev/loop3
|
|
losetup -d /dev/loop3
|
|
|
|
|
|
- Mount the partition:
|
|
|
|
mount /mnt/mpoint
|
|
|
|
You may now use that filesystem as usual.
|
|
|
|
|
|
- Umount the parition:
|
|
|
|
umount /mnt/mpoint
|
|
|
|
|
|
- Every so often, you should do an fsck on the filesystem. Make sure its
|
|
unmount, and then:
|
|
|
|
losetup -F /dev/loop3
|
|
fsck -f -y /dev/loop3
|
|
losetup -d /dev/loop3
|
|
|
|
--------------------------------------------------------------------------------
|
|
|
|
REFERENCE: This howto derived from section 7.2 of
|
|
|
|
http://loop-aes.sourceforge.net/loop-AES.README
|
|
|
|
See that howto for more information on the loop-aes patch.
|
|
|
|
|
|
|