Editing User:Jebba/Cryptsetup

Warning: You are not logged in. Your IP address will be recorded in this page's edit history.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Learn more about Contributing to the wiki.

=Intro=
Cryptsetup is a good way to use an encrypted filesystem with a gnulinux system. I have made kernel modules and built the cryptsetup program so it can be used with Maemo.

=Kernel=
You need some kernel modules to use cryptsetup. You can build your own kernel or use mine. This wiki has [[User:Jebba/Kernel#Installing_my_custom_kernel|instructions on installing my custom kernel]].

=Userspace tools=
You'll need to install cryptsetup from the extras-devel repository.

=Create cryptfile=
Set up a file to use:

#!/bin/sh
 set -x
 CRYPTSIZE=4
 LOOPFILE=/dev/loop0
 CRYPTNAME=cryptfooz
 CRYPTFILE=/home/user/MyDocs/$CRYPTNAME
 echo "warning going to erase $CRYPTFILE"
 read ok
 dd if=/dev/urandom of=$CRYPTFILE bs=1M count=$CRYPTSIZE
 cryptsetup remove $CRYPTNAME
 losetup -d $LOOPFILE
 losetup $LOOPFILE $CRYPTFILE
 cryptsetup -v \
 	--key-size=256 \
 	--cipher=twofish-cbc-essiv:sha256 \
 	create \
 	$CRYPTNAME \
 	$LOOPFILE
 mkfs.ext3 -j -m0 /dev/mapper/$CRYPTNAME
 mkdir -p /mnt/$CRYPTNAME
 mount -o noatime /dev/mapper/$CRYPTNAME /mnt/$CRYPTNAME
 chown user:users /mnt/$CRYPTNAME
 ls -la /mnt/$CRYPTNAME

With this, you can now copy files to /mnt/cryptfooz and they'll be encrypted.

=Umount=
(Untested, but should just be like this)

# cryptfooz or whatever you named it above
 umount /mnt/cryptfooz
 
 # Then remove it from cryptsetup
 cryptsetup remove cryptofooz
 
 # Then freeup the loopback
 losetup -d /dev/loop0

=Mount=
So the next time you want to mount it, just run:

#!/bin/sh
 set -x
 CRYPTSIZE=4
 LOOPFILE=/dev/loop0
 CRYPTNAME=cryptfooz
 CRYPTFILE=/home/user/MyDocs/$CRYPTNAME
 cryptsetup remove $CRYPTNAME
 losetup -d $LOOPFILE
 losetup $LOOPFILE $CRYPTFILE
 cryptsetup -v \
 	--key-size=256 \
 	--cipher=twofish-cbc-essiv:sha256 \
 	create \
 	$CRYPTNAME \
 	$LOOPFILE
 mount -o noatime /dev/mapper/$CRYPTNAME /mnt/$CRYPTNAME
 ls -la /mnt/$CRYPTNAME

=See Also=

* [http://wiki.blagblagblag.org/Encrypting_Root_Filesystem] - old, but lots of copying from my old page there.

Please note that all contributions to maemo.org wiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see maemo.org wiki:Copyrights for details). Do not submit copyrighted work without permission!

Summary:

Cancel | Editing help (opens in new window)

Retrieved from "http://wiki.maemo.org/User:Jebba/Cryptsetup"

@@ Line 73: / Line 73: @@
 =See Also=
-* http://wiki.blagblagblag.org/Encrypting_Root_Filesystem - old, but lots of copying from my old page there.
+* [http://wiki.blagblagblag.org/Encrypting_Root_Filesystem] - old, but lots of copying from my old page there.
-=TODO=
-May be possible, may not be possible:
-* Encrypted /home/user
-* Encrypted /home/user/MyDocs
-* Encrypted root
-* Encrypted swap
-* Way to prompt for password

Personal tools

Navigation

Views

Editing User:Jebba/Cryptsetup