Code: Select all
# !/bin/bash
/sbin/modprobe loop
/sbin/losetup /dev/loop0 /home/vault
/sbin/modprobe dm_crypt
/usr/bin/cryptsetup create secret /dev/loop0
/bin/mount /mnt/vault
Code: Select all
# echo '>=sys-fs/device-mapper-1.02.02' >> /etc/portage/package.mask && emerge device-mapper cryptsetup
Code: Select all
splig ~ # cryptsetup -c "aes" -h "ripemd160" -b `blockdev --getsize /dev/sdb6` create bak-sys2 /dev/sdb6
Command failed: Invalid argument
Code: Select all
echo "=sys-fs/cryptsetup-luks-1.0* ~x86" >> /etc/portage/package.keywords
emerge -C cryptsetup
emerge cryptsetup-luksCode: Select all
duck ~ # losetup /dev/loop0 /home/zach.encrypted
duck ~ # losetup /dev/loop0
/dev/loop0: [0304]:1354592 (/home/zach.encrypted)
duck ~ # /bin/cryptsetup isLuks /dev/loop0
/dev/loop0 is not a LUKS partition
duck ~ # KEY=`openssl aes-256-ecb -d -in /home/zach.key.encrypted`
enter aes-256-ecb decryption password:
duck ~ # echo "$KEY" | /bin/cryptsetup -c aes -h ripemd160 -s 256 create _home_zach.encrypted /dev/loop0
duck ~ # mount -o ro -t ext3 /dev/mapper/_home_zach.encrypted /home/zach
mount: wrong fs type, bad option, bad superblock on /dev/mapper/_home_zach.encrypted,
missing codepage or other error
..
duck linux # dd if=/dev/mapper/_home_zach.encrypted bs=1M count=1 | file -
1+0 records in
1+0 records out
1048576 bytes (1.0 MB) copied, 0.050551 seconds, 20.7 MB/s
/dev/stdin: data
vs
duck linux # dd if=/dev/hda4 bs=1M count=1 | file -
1+0 records in
1+0 records out
1048576 bytes (1.0 MB) copied, 0.005728 seconds, 183 MB/s
/dev/stdin: Linux rev 1.0 ext3 filesystem data (needs journal recovery) (large files)Code: Select all
--- SNIP ---
# Is something already mounted at $MOUNTPOINT?
if grep -q $MOUNTPOINT /etc/mtab
then
# Is the shell interactive?
if [ -z "$PS1" ]; then
echo
echo "A filesystem is already mounted on $MOUNTPOINT,"
echo "the mountpoint for the profile specified."
echo
echo "You must unmount it before dobackup can continue."
exit 1
else
echo
echo "A filesystem is already mounted on $MOUNTPOINT,"
echo "the mountpoint for the profile specified."
echo
echo "Shall I attempt to unmount it? (y/n)"
read USR_UMOUNT
if [ $USR_UMOUNT = "y" ]
then
if umount $MOUNTPOINT
then
echo "$MOUNTPOINT was succesfully unmounted."
echo "dobackup will now continue."
else
echo
echo "$MOUNTPOINT could not be unmounted."
echo "You must unmount it manually before dobackup can continue."
exit 1
fi
else
echo
echo "dobackup needs a clear mountpoint on $MOUNTPOINT"
echo "to run the $CRYPTNAME profile."
echo
echo "dobackup will now exit."
exit 1
fi
fi
fi
# Remove any previous device
if [ -b /dev/mapper/$CRYPTNAME ]
then
cryptsetup remove $CRYPTNAME
fi
# Create the new one
echo "Please enter the password for $CRYPTNAME."
cryptsetup -c "$CRYPT_CIPHER" -h "$CRYPT_HASH" -b `blockdev --getsize $BLOCKDEV` create $CRYPTNAME $BLOCKDEV
echo
# (Attempt to) mount it, and check the results
if mount /dev/mapper/$CRYPTNAME $MOUNTPOINT
then
echo "Backup partition $CRYPTNAME ready!"
echo
else
echo
echo "********************************************"
echo " $CRYPTNAME - ERROR! "
echo " The backup partition could not be mounted! "
echo " Did you type the right password? "
echo " "
echo " dobackup will now exit. "
echo "********************************************"
exit 1
fi
--- SNIP ---
