Debian Luke Setup

# see https://systemausfall.org/wikis/howto/CryptoPartitionHowTo
# for an full setup

Device Drivers -> Multi-device support (RAID and LVM)
  o Device mapper support
  o Crypt target support
Cryptographic options
  o AES cipher algorithms


export CP=/dev/sda...

apt-get install cryptsetup hashalot

badblocks -c 10240 -s -w -t random -v $CP
dd if=/dev/urandom of=$CP bs=10M

cryptsetup --verbose --verify-passphrase --cipher=aes --key-size=256 luksFormat $CP
cryptsetup luksOpen $CP cryptpartition
mkfs.ext3 -L cryptpartition -j -m 1 -O dir_index,filetype,sparse_super /dev/mapper/cryptpartition
tune2fs -c 100 -i 23w /dev/mapper/cryptpartition
mkdir /mnt/cryptpartition
mount /dev/mapper/cryptpartition /mnt/cryptpartition


# and start and stop scripts like the following
# (replace $CP)

# File: encrypt-mount
sudo cryptsetup -v luksOpen $CP cryptpartition
sudo mount /dev/mapper/cryptpartition /mnt/cryptpartition
cryptsetup status cryptpartition


# File: encrypt-umount
umount /mnt/cryptpartition
cryptsetup luksClose cryptpartition