1.磁盘分区
fdisk -cu /dev/sda
n-p-1-+100M-w
2.加密
crypsetup luksFormat /dev/sda1
YES   \\确认加密
redhat \\输入密码
redhat  \\重复密码
3.创建磁盘映射
crypsetup luksOpen /dev/sda1 boxue
4.磁盘格式化
mkfs.ext4 /dev/mapper/boxue
5.手动挂载
mkdir /aaa
mount /dev/mapper/boxue /aaa
6.关闭加密盘
umount /aaa
crypsetup luksClose boxue
7.加密盘开机手动输入密码挂载
vim /etc/fstab
/dev/mapper/boxue /aaa ext4 defaults 0 0
vim /etc/crypttab
boxue /dev/sda1 none
8.加密盘开机自动挂载
vim /etc/fstab
/dev/mapper/boxue /aaa ext4 defaults 0 0
echo -n "redhat" > /root/rhce
vim /etc/crypttab
boxue /dev/sda1    /root/rhce
cryptsetup luksAddKey /dev/sda1 /root/rhce