blob: d65e21d0d9415bd14da6096085e8aec8e8a864bc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
install -m0600 /dev/null /etc/homefs.key
head -c512 /dev/urandom >/etc/homefs.key
cryptsetup luksFormat --batch-mode \
--key-file=/etc/homefs.key \
--type=luks2 \
--pbkdf=argon2id \
--pbkdf-force-iterations=4 \
--pbkdf-memory=32 \
-- /dev/vda3
cryptsetup luksOpen --key-file=/etc/homefs.key --allow-discards \
-- /dev/vda3 "vda3_crypt"
mke2fs -Ft ext4 /dev/mapper/vda3_crypt
cryptsetup close "vda3_crypt"
# vim: set filetype=sh :
|
