View previous topic :: View next topic |
Author |
Message |
stobbsm Guru
Joined: 23 May 2004 Posts: 452
|
Posted: Wed Mar 03, 2010 11:01 am Post subject: auto-luks-scripts |
|
|
Hi All,
I've been learning a whole bunch about security lately, and just finished teaching myself luks.
I'm in the business of securing data on home and small business linux servers, and it's just a pain to type out all the commands over and over again.
So, I made a script package!
It's called auto-luks-scripts, and its currently at version 0.1.1
I'd appreciate any testing you can do for me.
Reqs are >=bash-4 >=cryptsetup-1.0.6-r2
I don't have an installer yet, but all the files behave pretty good.
Just extract the contents of the attached file to root, and it will be installed to /etc and /bin
the configuration file is /etc/auto-luks/luks-scripts.conf
I think I've documented it pretty well, so shouldn't be hard to figure out.
With the defaults on, you can create a key-file encrypted filesystem with the following commands:
Code: | luksCreate /path/to/dev
luksOpen <either the dev path, name (ie sda1), keyfile-name or default target (ie sda1_crypt)>
mkfs.<whateverfs> /dev/mapper/<crypt_target> |
When your done with it, you can close it with:
Code: | luksClose <dev or crypt_target> |
Files that get created on first run:
/etc/auto-luks/keys // directory that stores the key-files
/etc/auto-luks/luks.fs // stores information about your luks filesystem for luksOpen. You can edit this to change the target
Any comments, suggestions, patches, whatever, please leave them here for send me a PM.
stobbsm.
http://omploader.org/vM3EwOA _________________ Sysadmin of Ubuntu systems and servers....
Although my own server is gentoo.... |
|
Back to top |
|
|
stobbsm Guru
Joined: 23 May 2004 Posts: 452
|
Posted: Wed Mar 03, 2010 3:12 pm Post subject: |
|
|
Can nobody give me a hand with this? _________________ Sysadmin of Ubuntu systems and servers....
Although my own server is gentoo.... |
|
Back to top |
|
|
stobbsm Guru
Joined: 23 May 2004 Posts: 452
|
Posted: Thu Mar 04, 2010 7:59 pm Post subject: |
|
|
Just updated to version-0.2.0
http://omploader.org/vM3FndQ
Enhancements include:
luksOpen can now use the keyfile name, the partition name or the active name to activate a partition.
Added luksScriptsInfo to display information about the script package and active variables.
You can now suppress non-fatal errors, general notices and information messages (either all or 1/2 at a time)
Next update will include:
Commandline options for luksCreate to change the active name during creation.
luksModify which will be able to modify the keyfile (make a new one), or the active name.
luksMkfs which will apply a filesystem to the active partition for you, as well as labeling it with the active name.
luksPartInfo which will give you information about the partition (active or not) being managed by the luks scripts. _________________ Sysadmin of Ubuntu systems and servers....
Although my own server is gentoo.... |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|