如何应用dm-crypt构建加密文件系统(efs)(（How to build an encrypted file system (EFS) using dm-crypt）.docVIP

如何应用dm-crypt构建加密文件系统(efs)(（How to build an encrypted file system (EFS) using dm-crypt） Compared with other methods to create an encrypted file system, dm-crypt system is superior to the There is nothing comparable to this its faster and more ease of use. In addition, it is also very wide, can run in various pieces of equipment, even if these devices use the RAID and LVM are no obstacles. The dm-crypt system has these advantages, mainly due to the above characteristics of device-mapper technology is built on 2.6 version of the kernel. Device-mapper is designed to provide a general method for flexible add virtual block device layer on the actual implementation, mirror, snapshot, cascade and encryption processing to facilitate the development of staff. In addition, the use of dm-crypt kernel cryptographic application programming interface to achieve a transparent encryption, and is compatible with the cryptloop system. The first step: to the kernel DM -crypt using cryptographic application programming interface to complete kernel cryptographic operations. Generally speaking, the kernel will usually be encryption procedure in the form of the module loading. For AES, its strength has been very high, even for the protection of confidential data is enough. In order to ensure that the user kernel has loaded AES password module, please check according to the following command: #cat /proc/crypto Otherwise, you can use modprobe to manually load the AES module, the command is as follows: #modprobe AES Next, the user to install the dmsetup software package, the software contains device-mapper configuration tools required the following commands shown: #yum install dmsetup cryptsetup To check the dmsetup software package has been established equipment mapping program, type the following command: #ls -l /dev/mapper/control Then, use the following command to load the dm-crypt kernel module: #modprobe dm-crypt Dm-crypt is loaded, it will automatically register with evice-mapper. If t