This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
linux:filesystems:crypto_raid [2016/03/30 08:44] tkilla |
linux:filesystems:crypto_raid [2016/06/20 22:22] (current) tkilla [CryptFile] |
||
---|---|---|---|
Line 248: | Line 248: | ||
* http:// | * http:// | ||
* http:// | * http:// | ||
- | * | + | * https:// |
+ | |||
Line 257: | Line 259: | ||
create a file full of random data, setup loop device, luksFormat & format | create a file full of random data, setup loop device, luksFormat & format | ||
| | ||
- | dd if=/ | + | dd if=/ |
- | losetup /dev/loop32 cryptfile | + | losetup / |
cryptsetup luksFormat /dev/loop32 | cryptsetup luksFormat /dev/loop32 | ||
cryptsetup luksOpen /dev/loop32 cryptfs | cryptsetup luksOpen /dev/loop32 cryptfs | ||
mkfs.ext4 -L homecrypt / | mkfs.ext4 -L homecrypt / | ||
+ | |||
+ | |||
+ | ===== btrfs on top of luks ===== | ||
+ | |||
+ | Create a crypto partition as described above, then format the opened crypto container filesystem: | ||
+ | |||
+ | mkfs.btrfs / | ||
+ | | ||
+ | # recommended options for rotational discs (for ssds set ' | ||
+ | mount -o noatime, | ||
+ | |||
+ | |||
+ | ===== Recommended options for installing on a pendrive, a SD card or a slow SSD drive ===== | ||
+ | |||
+ | |||
+ | /dev/sdaX / btrfs x-systemd.device-timeout=0, | ||
+ | |||
+ | |||
+ | * https:// |