Cryptmount允許你加密文件系統和交換空間，一個加密的文件系統能象一個正常的文件系統一樣存儲在一個塊設備上—例如，使用/dev/sda2—或者在另一個文件系統中的一個正常文件。后一種方法在你使用一個加密文件系統工作而不改變分區表或使用邏輯卷管理（LVM）時顯得特別順手。
Cryptmount設置是Linux內核在設備映射層完成的，這就意味著你可以在加密設備映射塊文件上創建任意受支持的文件系統類型。Cryptmount處理設備映射加密并掛載文件系統，Cryptmount的簡單用法不需要你知道任何細節。
Cryptmount打包在Ubuntu Gutsy Universe中，在一些Slackware和Gentoo社區中也可下載，在Cryptmount的項目主頁（http://sourceforge.net/projects/cryptmount/）上也可以下載到RPM包。默認情況下，cryptmount-setup傾向于在/home目錄下創建一個目錄用于存放加密內容。
# cryptmount-setup
********************************
* cryptmount setup script
*
* This program will allow you to setup a secure filing-system that will
* be managed by "cryptmount". You will be able to select basic features
* such as the location and size of the filesystem - if you want more
* advanced features, you should consult the cryptmount manual page.
*
...
Please enter a target name for your filesystem
[opaque]: my-encrypted-files
Which user should own the filesystem (leave blank for root)
[]:
Please specify where "my-encrypted-files" should be mounted
[/home/crypt]:
Enter the filesystem size (in MB)
[64]: 256
Enter a filename for your encrypted container
[/home/crypto.fs]:
Enter a location for the keyfile
[/etc/cryptmount/my-encrypted-files.key]:
...
enter new password for target "my-encrypted-files":
confirm password:
Formatting encrypted filesystem...
enter password for target "my-encrypted-files":
Your new encrypted filesystem is now ready for use.
To access, try:
cryptmount my-encrypted-files
cd /home/crypt
After you have finished using the filesystem, try:
cd
cryptmount --unmount my-encrypted-files
# cryptmount my-encrypted-files
enter password for target "my-encrypted-files":
e2fsck 1.40.2 (12-Jul-2007)
/dev/mapper/my-encrypted-files: clean, 11/65536 files, 18561/262144 blocks
# df /home/crypt
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/mapper/my-encrypted-files
253871 10288 230476 5% /home/crypt
|
注意cryptmount --unmount消息，盡管Linux內核會把/home/crypt看做另外一個文件系統，但你仍然不能umount /home/crypt，因為Cryptmount仍然認為它是激活的，如果你那樣做了，內核文件系統將不能卸載，但是Cryptmount可以讓你重新掛載它，并給你一個消息“create ioctl failed: Device or resource busy”。
| 共4頁: 1 [2] [3] [4] 下一頁 | ||||||
|
