Skapa partitionen som ska krypteras (/dev/sda2 i detta exempel)
Använd Gparted, cfdisk, fdisk eller liknande.
Kryptera partitionen /dev/sda2
cryptsetup luksFormat /dev/sda2
WARNING!
This will overwrite data on /dev/sda2 irrevocably.
Are you sure? (Type uppercase yes): YES
(Ange valfritt lösenord)
Enter passphrase:
Verify passphrase:
Avkryptera partitionen och mappa mot valfri tagg (exempelvis encrypted)
cryptsetup open /dev/sda2 encrypted
(Skriv samma lösenord som angavs tidigare)
Enter passphrase for /dev/sda2:
Skapa ett filsystem på partitionen
mkfs.ext4 /dev/mapper/encrypted
mke2fs 1.43.4 (31-Jan-2017)
Creating filesystem with 9883648 4k blocks and 2473984 inodes
Filesystem UUID: c6629598-4f80-4435-9732-7118562ef7d3
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624
Allocating group tables: done
Writing inode tables: done
Creating journal (65536 blocks): done
Writing superblocks and filesystem accounting information: done
Montera filsystemet (på valfritt ställe, exempelvis /mnt)
cryptsetup –type luks open /dev/sda2 encrypted
mount -t ext4 /dev/mapper/encrypted /mnt
root@devuan:~# df -h /mnt
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/encrypted 37G 49M 35G 1% /mnt
Avmontera filsystemet
umount /mnt
cryptsetup close encrypted
Referenser
https://gitlab.com/cryptsetup/cryptsetup/
https://www.cyberciti.biz/hardware/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/
https://linuxconfig.org/basic-guide-to-encrypting-linux-partitions-with-luks