Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 443
  • Last Modified:

EXT4 volume encryption

I need a solution to encrypt a volume in a storage cluster.
We are using Ubuntu 10.04 and 12.04.
This will not be a hard disk level, it will be at volume level

I will not use truecrypt.

Is there a good encrypting file system, or application I can use for a data store?
This will not be on the /, and not be bootable.

I would prefer something like EXT4.

I can clarify this if needed.


Thank you very much!

Brian Holcomb.
0
Orcatec Operations Team
Asked:
Orcatec Operations Team
  • 3
  • 2
1 Solution
 
Dave HoweCommented:
sounds like what you want is LUKS.
there is a walkthough here but the potted version is, to encrypt a partition such as /dev/sdb2 you could run:
cryptsetup luksFormat -c aes-xts-plain64 s- 512 -h sha512 /dev/sdb2
cryptsetup luksOpen /dev/sdb2 sdb2_luks

this will format the partition and unlock it - prompting for the passphrase both times.

once you have unlocked it, you should have a block object /dev/mapper/sdb2_luks which you can use mkfs on (to format as ext4) then mount.

lots more options, just read the cryptsetup manpage in ubuntu :)
0
 
Orcatec Operations TeamAuthor Commented:
Very, Very cool, Dave. Thank you very much. I will check LUKS out.

Cheers,
Brian Holcomb
0
 
Orcatec Operations TeamAuthor Commented:
Very helpful comment with direct command line references and link to walkthrough.

Pinpoint accuracy.
0
 
Dave HoweCommented:
You are welcome. There is also a way to make LUKS TC compatible, but as you are using EXT4 within the volume, that seems a bit pointless.

you should also investigate the cryptsetup "luksHeaderBackup" command - this is vital for recovery if you should experience disk corruption in the future, so should be exported to other media in case of future need :)
0
 
Orcatec Operations TeamAuthor Commented:
Will do!
Thanks for all your help Dave.

We can now offer one of 2 proper solutions for some of our potential government contracts.

Cheers,
Bri...


Brian Holcomb
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now