Files
LUKS/create_crypted_disk.sh
2026-02-02 00:45:17 +01:00

63 lines
1.4 KiB
Bash
Executable File

#!/usr/bin/env bash
_BACKUP_DEVICE_NAME=backup
_LABEL=BACKUP_OPP_03
_KEY_FILE=/crypt/home/.keys/zapata.key
echo ""
# - Encrypt Disk with given keyfile
# -
echo ""
echo "Encrypt Disk with given keyfile"
cryptsetup luksFormat /dev/sde1 $_KEY_FILE
# - Add Key with Passphrase
# -
echo ""
echo "Add Key (Passphrase) using existent key (keyfile: $_KEY_FILE)"
cryptsetup luksAddKey -d $_KEY_FILE /dev/sde1
# - Open encrypted device
# -
echo ""
echo "Open encrypted device"
cryptsetup luksOpen /dev/sde1 $_BACKUP_DEVICE_NAME --key-file $_KEY_FILE
# - Create Filesystem on crypted device
# -
echo ""
echo "Create ext4 Filesystem on crypted device \"$_BACKUP_DEVICE_NAME\""
mkfs.ext4 -E lazy_itable_init=0,lazy_journal_init=0 /dev/mapper/$_BACKUP_DEVICE_NAME
echo ""
echo "Simple sync.."
sync
# - Label crypted device
# -
echo ""
echo "Label crypted device \"$_BACKUP_DEVICE_NAME\". Label: $_LABEL"
tune2fs -L $_LABEL /dev/mapper/$_BACKUP_DEVICE_NAME
# - Set maximal mount count on crypted device
# -
echo ""
echo "Set maximal mount count on crypted device"
tune2fs -c 21 /dev/mapper/$_BACKUP_DEVICE_NAME
# - List settings of crypted device
# -
echo ""
echo "List settings of crypted device \"_BACKUP_DEVICE_NAME\""
tune2fs -l /dev/mapper/$_BACKUP_DEVICE_NAME
# - Close crypted device
# -
echo ""
echo "Close crypted device \"$_BACKUP_DEVICE_NAME\""
cryptsetup luksClose $_BACKUP_DEVICE_NAME
echo ""
exit 0