scratch

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revisionBoth sides next revision
scratch [2019/03/09 14:47] – [LUKS] adminscratch [2019/03/09 15:07] – [LUKS] admin
Line 168: Line 168:
 ====== LUKS ====== ====== LUKS ======
   https://wiki.archlinux.org/index.php/dm-crypt/Device_encryption   https://wiki.archlinux.org/index.php/dm-crypt/Device_encryption
 +  
   #################################   #################################
   ########## Preparation ##########   ########## Preparation ##########
Line 197: Line 197:
   ===============================================================================   ===============================================================================
   # A) Using luksipc   # A) Using luksipc
-   +  
   #   #
   # Copy luksipc-master.zip to your home dir. If you have internet connection,   # Copy luksipc-master.zip to your home dir. If you have internet connection,
Line 210: Line 210:
   cp luksipc-master.zip ~   cp luksipc-master.zip ~
   cd ~   cd ~
-   +  
   # If you have no unzip, uncompress it with the GUI   # If you have no unzip, uncompress it with the GUI
   unzip luksipc-master.zip   unzip luksipc-master.zip
Line 228: Line 228:
   ===============================================================================    =============================================================================== 
   # B) or using cryptsetup-reencrypt:   # B) or using cryptsetup-reencrypt:
-  sudo cryptsetup-reencrypt --type=luks2 -N --reduce-device-size 8M $ROOTPART   # or --type=luks1+  sudo cryptsetup-reencrypt --type=luks2 --new --reduce-device-size 8M $ROOTPART   # or --type=luks1
      
   ===============================================================================    =============================================================================== 
Line 235: Line 235:
   sudo cryptsetup luksOpen $ROOTPART newcryptofs   sudo cryptsetup luksOpen $ROOTPART newcryptofs
   sudo resize2fs /dev/mapper/newcryptofs   sudo resize2fs /dev/mapper/newcryptofs
-    +   
-   +  
   ##########################################################   ##########################################################
   ### Make the system boot from the encrypted filesystem ###   ### Make the system boot from the encrypted filesystem ###
-   +  
   sudo mount /dev/mapper/newcryptofs /mnt   sudo mount /dev/mapper/newcryptofs /mnt
   sudo mount $BOOTPART /mnt/boot   sudo mount $BOOTPART /mnt/boot
-   +  
   # Edit /etc/mkinitcpio.conf   # Edit /etc/mkinitcpio.conf
   sudo nano /mnt/etc/mkinitcpio.conf   sudo nano /mnt/etc/mkinitcpio.conf
Line 249: Line 249:
   # set HOOKS to   # set HOOKS to
   HOOKS=(base systemd autodetect keyboard keymap sd-vconsole modconf block sd-encrypt filesystems fsck)   HOOKS=(base systemd autodetect keyboard keymap sd-vconsole modconf block sd-encrypt filesystems fsck)
-    +   
-   +  
   # Set the content of the file /boot/loader/loader.conf:   # Set the content of the file /boot/loader/loader.conf:
   echo -e "default arch\ntimeout 5\nconsole-mode max\n" | sudo dd of=/mnt/boot/loader/loader.conf   echo -e "default arch\ntimeout 5\nconsole-mode max\n" | sudo dd of=/mnt/boot/loader/loader.conf
Line 261: Line 261:
   /initramfs-linux-fallback.img\noptions rd.luks.name=$(lsblk $ROOTPART -o UUID -n -d)=cryptroot \   /initramfs-linux-fallback.img\noptions rd.luks.name=$(lsblk $ROOTPART -o UUID -n -d)=cryptroot \
   root=/dev/mapper/cryptroot" | sudo dd of=/mnt/boot/loader/entries/arch-fallback.conf   root=/dev/mapper/cryptroot" | sudo dd of=/mnt/boot/loader/entries/arch-fallback.conf
-   +  
   # You might want to delete all entries in /mnt/boot/loader/entries/ except   # You might want to delete all entries in /mnt/boot/loader/entries/ except
   # arch.conf and arch-fallback.conf as they won't boot anymore anyway.   # arch.conf and arch-fallback.conf as they won't boot anymore anyway.
   ls /mnt/boot/loader/entries   ls /mnt/boot/loader/entries
-    +   
-   +  
   sudo chroot /mnt   sudo chroot /mnt
   mount -t proc proc /proc   mount -t proc proc /proc
   mount -t sysfs sys /sys   mount -t sysfs sys /sys
   mount -t devtmpfs udev /dev   mount -t devtmpfs udev /dev
-   +  
   mkinitcpio -p linux   mkinitcpio -p linux
   exit  # leave chroot   exit  # leave chroot
-   +  
   # reboot   # reboot
   sudo reboot   sudo reboot
Line 280: Line 280:
  
  
-  Not sure if this works: 
   ===============================================================================    =============================================================================== 
   # change luks1 to luks2 (or vice versa)   # change luks1 to luks2 (or vice versa)
  • scratch.txt
  • Last modified: 2019/03/10 13:03
  • by admin