update..
This commit is contained in:
+21
-1
@@ -6,7 +6,24 @@
|
||||
|
||||
RAW_PARTITION=/dev/md5
|
||||
CRYPT_PARTITION=data
|
||||
KEY_FILE=/etc/cryptsetup-keys.d/data.key
|
||||
KEY_FILE=/etc/.cryptsetup-keys.d/${CRYPT_PARTITION}.key
|
||||
|
||||
|
||||
# 0.) Create crypted partition
|
||||
# =============================
|
||||
|
||||
# keyfile (1024 bit groß) erstellen
|
||||
#
|
||||
mkdir -p $(dirname "${KEY_FILE}")
|
||||
head -c1024 /dev/urandom > ${KEY_FILE}
|
||||
|
||||
cryptsetup luksFormat $RAW_PARTITION "${KEY_FILE}"
|
||||
cryptsetup luksAddKey -d "${KEY_FILE}" $RAW_PARTITION
|
||||
|
||||
cryptsetup luksOpen $RAW_PARTITION "${KEY_FILE}"
|
||||
|
||||
|
||||
|
||||
|
||||
# 1) cryptsetup-initramfs entfernen
|
||||
# =================================
|
||||
@@ -34,6 +51,9 @@ update-initramfs -u -k all
|
||||
apt install systemd-cryptsetup
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
# 3) /etc/crypttab anpassen (kein initramfs mehr)
|
||||
# ===============================================
|
||||
#
|
||||
|
||||
Reference in New Issue
Block a user