Centos配置Crypt-disk

• Crypt-disk 创建 块新的磁盘，启用磁盘加密，解锁密码为“CSK2022!”;
• 映射到/dev/mapper/crypt 分区，并挂载到/mut/crypt 目录。

---

一、添加一块磁盘

[root@appsrv /]# echo "- - -">> /sys/class/scsi_host/host0/scan  
[root@appsrv /]# echo "- - -">> /sys/class/scsi_host/host1/scan  
[root@appsrv /]# echo "- - -">> /sys/class/scsi_host/host2/scan
#刷新磁盘

二、下载服务

[root@appsrv /]# yum install crypto-utils.x86_64  -y

三、磁盘加密

[root@appsrv /]# fdisk /dev/sda  #分区扩容
n q 4 
[root@appsrv /]# cryptosetup  luksFormat /dev/sda 对该磁盘进行加密注意此处一定是大写的YES
[root@appsrv /]# cryptoset up open /dev/sda crypt #解密了才能被挂载
mkfs.ext4 /dev/mapper/crtpt

四、挂载

[root@appsrv /]# mkdir -p /mut/crypt
[root@appsrv /]# mount /dev/mapper/crypt /mut/crypt
[root@appsrv /]# nano /etc/fstab
/dev/mapper/crypt /mut/crypt ext4 defaults 0 0

五、测试

[root@appsrv /]# cryptsetup status /dev/mapper/crypt  
/dev/mapper/crypt is active and is in use.
  type:    LUKS1
  cipher:  aes-xts-plain64
  keysize: 256 bits
  key location: dm-crypt
  device:  /dev/sda
  sector size:  512
  offset:  4096 sectors
  size:    4190208 sectors
  mode:    read/write