{"id":129,"date":"2012-03-12T18:41:13","date_gmt":"2012-03-12T17:41:13","guid":{"rendered":"http:\/\/zsteva.info\/?p=129"},"modified":"2012-03-12T18:42:34","modified_gmt":"2012-03-12T17:42:34","slug":"linux-encriptovan-block-device","status":"publish","type":"post","link":"http:\/\/zsteva.info\/blog\/2012\/03\/linux-encriptovan-block-device\/","title":{"rendered":"linux encriptovan block device"},"content":{"rendered":"<p>Enrktipovanje samo jedne particije (logi\u010dkog volumena na LVM):<\/p>\n<p>Prvo nam treba particija, mo\u017eda je ve\u0107 imamo ili napravimo jo\u0161 jedan logi\u010dki volumen:<\/p>\n<p><code>lvcreate -L +160G -n encpart vol01<\/code><\/p>\n<p>Refre\u0161ujemo LVM da se pojavi device:<\/p>\n<p><code>vgchange -a y<\/code><\/p>\n<p>Potreban nam je <strong>cryptsetup<\/strong> utils za inicijalizaciju, pa ga instaliramo ako ve\u0107 nije:<\/p>\n<p><code>apt-get install cryptsetup<\/code><\/p>\n<p>Inicijalizacija, pita\u0107e nas za passphase:<\/p>\n<p><code>cryptsetup --verbose --verify-passphrase luksFormat \/dev\/vol01\/encpart<\/code><\/p>\n<p>Ka\u010denje particije, time \u0107emo podesiti da nam kernel napravi novi block device koji virtualno enkriptuje\/decriptyje podatke koji su na particiji koja je enkriptovana:<\/p>\n<p><code>cryptsetup luksOpen \/dev\/vol01\/encpart vol01_encpart_descripted<\/code><\/p>\n<p>Rastavljanje ovakve veze se radi sa: <code>cryptsetup luksClose device<\/code> ali za sada nam to nije potrebno.<\/p>\n<p>Formatiranje particije, formatiramo &#8220;virtualni&#8221; block device a ne particiju koja je encriptovana:<\/p>\n<p><code>mkfs.ext3 \/dev\/mapper\/vol01_encpart_decripted<\/code><\/p>\n<p>I za svakodnevni rad nam ne potrebna mala scripta sa kojom \u0107emo lako mountovati i  unmountovati (raskidanje decripcije):<\/p>\n<p><code><br \/>\n#!\/bin\/bash<\/p>\n<p>ENCDEV=\/dev\/vol01\/encpart<br \/>\nDEVNAME=vol01_encpart_decripted<br \/>\nDEV=\/dev\/mapper\/${DEVNAME}<br \/>\nMNTDIR=\/mnt\/mountdir<\/p>\n<p>if [ \"x$1\" = \"xon\" ]; then<br \/>\n        echo \"luksOpen\"<br \/>\n        cryptsetup luksOpen \"${ENCDEV}\" \"${DEVNAME}\"<br \/>\n        echo \"please wait\"<br \/>\n        sleep 1<br \/>\n        echo \"pvscan\"<br \/>\n        pvscan<br \/>\n        echo \"please wait\"<br \/>\n        sleep 2<br \/>\n        echo \"fsck\"<br \/>\n        fsck.ext3 -p \"${DEV}\"<br \/>\n        echo \"mount\"<br \/>\n        mount \"${DEV}\" \"${MNTDIR}\"<br \/>\nelif [ \"x$1\" = xoff ]; then<br \/>\n        echo \"umount\"<br \/>\n        umount \"${MNTDIR}\"<br \/>\n        echo \"luksClose\"<br \/>\n        cryptsetup luksClose \"${DEV}\"<br \/>\nelse<br \/>\n        echo \"usage: $0 &lt;on|off&gt;\"<br \/>\nfi<br \/>\n<\/code><\/p>\n<p>Pozivanjem scripte sa on ili off parametrom mountuje se i unmountuje disk.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enrktipovanje samo jedne particije (logi\u010dkog volumena na LVM): Prvo nam treba particija, mo\u017eda je ve\u0107 imamo ili napravimo jo\u0161 jedan logi\u010dki volumen: lvcreate -L +160G -n encpart vol01 Refre\u0161ujemo LVM da se pojavi device: vgchange -a y Potreban nam je &hellip; <a href=\"http:\/\/zsteva.info\/blog\/2012\/03\/linux-encriptovan-block-device\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6],"tags":[54,53,55,56,130,52,51],"_links":{"self":[{"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/posts\/129"}],"collection":[{"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/comments?post=129"}],"version-history":[{"count":3,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/posts\/129\/revisions"}],"predecessor-version":[{"id":132,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/posts\/129\/revisions\/132"}],"wp:attachment":[{"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/media?parent=129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/categories?post=129"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/tags?post=129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}