diff options
author | Jonas Smedegaard <dr@jones.dk> | 2019-06-03 20:22:47 +0200 |
---|---|---|
committer | Jonas Smedegaard <dr@jones.dk> | 2019-06-03 20:22:47 +0200 |
commit | f30a8d03adfd724a4a62f6266a260a5ade24a747 (patch) | |
tree | c870b7f497dfea3d64174b3950b4956a7bc1f00c | |
parent | 0c041b48a0974f1cab47e8695a82d1e4a1466381 (diff) |
Talk about disk (not device).
-rw-r--r-- | SETUP.md | 20 | ||||
-rw-r--r-- | USE.md | 8 |
2 files changed, 14 insertions, 14 deletions
@@ -32,29 +32,29 @@ Setting up "Full disk encryption" is done when setting up the whole system. You need package `cryptsetup-run`. Install it if not done already. -Connect the device (if removable) -and locate its device name (first column): +Connect the disk (if removable) +and locate its name (first column): lsblk --paths --nodeps -Make sure the device has no partitions mounted (last column): +Make sure the disk has no partitions mounted (last column): lsblk --paths -Format selected device -(replacing PATH_TO_YOUR_DEVICE with your actual device path): +Format the connected but unused disk +(replacing PATH_TO_YOUR_DISK with actual path): - luksformat -t ext4 PATH_TO_YOUR_DEVICE + luksformat -t ext4 PATH_TO_YOUR_DISK -Add info about the encrypted device to the file `etc/crypttab`: +Add info about the encrypted disk to the file `etc/crypttab`: - echo "mysecrets UUID=$(lsblk --noheadings -o UUID PATH_TO_YOUR_DEVICE) none luks,noauto" >> /etc/crypttab + echo "mysecrets UUID=$(lsblk --noheadings -o UUID PATH_TO_YOUR_DISK) none luks,noauto" >> /etc/crypttab -Create mountpoint for the partition inside the encrypted device: +Create mountpoint for the partition inside the encrypted disk: mkdir /mnt/mysecrets -Add info about the partition inside the encrypted device to the file `/etc/fstab`: +Add info about the partition inside the encrypted disk to the file `/etc/fstab`: echo "UUID=$(lsblk --noheadings -o UUID /dev/mapper/mysecrets) /mnt/mysecrets ext4 noauto" >> /etc/fstab @@ -15,14 +15,14 @@ Accounts containing trust secrets need special care. You need package `cryptsetup-bin`. Install it if not done already. -Connect the device (if removable) -and mount encrypted device and its partition inside: +Connect the disk (if removable) +and mount encrypted disk and its partition inside: sudo cryptdisks_start mysecrets sudo mount /mnt/mysecrets -When done using the device, -unmount first partition and then device: +When done using the disk, +unmount first partition and then disk: sudo umount /mnt/mysecrets sudo cryptdisks_stop mysecrets |