diff options
-rw-r--r-- | SETUP.md | 20 | ||||
-rw-r--r-- | USE.md | 8 |
2 files changed, 14 insertions, 14 deletions
@@ -32,29 +32,29 @@ Setting up "Full disk encryption" is done when setting up the whole system. You need package `cryptsetup-run`. Install it if not done already. -Connect the device (if removable) -and locate its device name (first column): +Connect the disk (if removable) +and locate its name (first column): lsblk --paths --nodeps -Make sure the device has no partitions mounted (last column): +Make sure the disk has no partitions mounted (last column): lsblk --paths -Format selected device -(replacing PATH_TO_YOUR_DEVICE with your actual device path): +Format the connected but unused disk +(replacing PATH_TO_YOUR_DISK with actual path): - luksformat -t ext4 PATH_TO_YOUR_DEVICE + luksformat -t ext4 PATH_TO_YOUR_DISK -Add info about the encrypted device to the file `etc/crypttab`: +Add info about the encrypted disk to the file `etc/crypttab`: - echo "mysecrets UUID=$(lsblk --noheadings -o UUID PATH_TO_YOUR_DEVICE) none luks,noauto" >> /etc/crypttab + echo "mysecrets UUID=$(lsblk --noheadings -o UUID PATH_TO_YOUR_DISK) none luks,noauto" >> /etc/crypttab -Create mountpoint for the partition inside the encrypted device: +Create mountpoint for the partition inside the encrypted disk: mkdir /mnt/mysecrets -Add info about the partition inside the encrypted device to the file `/etc/fstab`: +Add info about the partition inside the encrypted disk to the file `/etc/fstab`: echo "UUID=$(lsblk --noheadings -o UUID /dev/mapper/mysecrets) /mnt/mysecrets ext4 noauto" >> /etc/fstab @@ -15,14 +15,14 @@ Accounts containing trust secrets need special care. You need package `cryptsetup-bin`. Install it if not done already. -Connect the device (if removable) -and mount encrypted device and its partition inside: +Connect the disk (if removable) +and mount encrypted disk and its partition inside: sudo cryptdisks_start mysecrets sudo mount /mnt/mysecrets -When done using the device, -unmount first partition and then device: +When done using the disk, +unmount first partition and then disk: sudo umount /mnt/mysecrets sudo cryptdisks_stop mysecrets |