Robin Röper robin-rpr

huyanhvn / enable-luks-howto

Created July 25, 2016 18:12

Enable LUKS disk encryption with a key file

	# Create strong LUKS key
	openssl genrsa -out /root/luks.key 4096
	chmod 400 /root/luks.key

	# Fill random data to the device
	shred -v --iterations=1 /dev/xvdb

	# Format device
	echo "YES" \| cryptsetup luksFormat /dev/xvdb --key-file /root/luks.key