使用eCryptfs加密文件系统

(1)安装
[root@ECS iclound]# tar zxvf ecryptfs-utils_111.orig.tar.gz
[root@ECS ecryptfs-utils-111]# ./configure --prefix=/usr/local/ecryptfs
[root@ECS ecryptfs-utils-111]# make
[root@ECS ecryptfs-utils-111]# make install
 
(2)创建目录
 
[root@ECS]#mkdir -pv /data                          //真实目录
[root@ECS]#mkdir -pv /iclound                     //挂载目录
 
(3)使用ecryptfs初始化目录
 
[root@ECS]#mount -t ecryptfs /data /iclound
Passphrase:
Select cipher:
1) aes: blocksize = 16; min keysize = 16; max keysize = 32
2) blowfish: blocksize = 8; min keysize = 16; max keysize = 56
3) des3_ede: blocksize = 8; min keysize = 24; max keysize = 24
4) twofish: blocksize = 16; min keysize = 16; max keysize = 32
5) cast6: blocksize = 16; min keysize = 16; max keysize = 32
6) cast5: blocksize = 8; min keysize = 5; max keysize = 16
Selection [aes]:
Select key bytes:
1) 16
2) 32
3) 24
Selection [16]: 32
Enable plaintext passthrough (y/n) [n]:
Enable filename encryption (y/n) [n]: y
Filename Encryption Key (FNEK) Signature [048b231563eb2ad0]:
Attempting to mount with the following options:
  ecryptfs_unlink_sigs
  ecryptfs_fnek_sig=048b231563eb2ad0
  ecryptfs_key_bytes=32
  ecryptfs_cipher=aes
  ecryptfs_sig=048b231563eb2ad0
Mounted eCryptfs
(4)测试
 
上传测试文件
 
[root@ECS]# ls -l
-rw-r--r-- 1 root root 49085020 Nov 14  2017  思科《BGP设计与实现》.pdf
-rw-r--r-- 1 root root 32611945 Nov 14  2017  思科《网络安全性设计(第二版)》.pdf
-rw-r--r-- 1 root root 25114337 Nov  2  2017  思科《高级MPLS设计与实施》.pdf
-rw-r--r-- 1 root root  2109379 Mar 19  2018  红茶三杯BGP.pdf
-rw-r--r-- 1 root root  2944231 Mar 19  2018  红茶三杯IProuting.pdf
-rw-r--r-- 1 root root  2228116 Mar 19  2018  红茶三杯IPv6.pdf
-rw-r--r-- 1 root root  1675721 Mar 19  2018  红茶三杯MPLS.pdf
-rw-r--r-- 1 root root  2485151 Mar 19  2018  红茶三杯MPLSTE.pdf
-rw-r--r-- 1 root root  5276538 Mar 19  2018  红茶三杯MPLSVPN.pdf
-rw-r--r-- 1 root root  1834720 Mar 19  2018  红茶三杯OSPF.pdf
-rw-r--r-- 1 root root  2811654 Mar 19  2018  红茶三杯Switching.pdf
 
卸载挂载目录
 
[root@ECS]#umount /iclound
 
查看加密目录
 
[root@ECS]# ls -l
total 281136
-rw-r--r-- 1 root root  2822144 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj4b5uZtdfAASWROMrSKu1dYvuBvODnW8kswp5.6DgfH2-
-rw-r--r-- 1 root root  2953216 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj4b5uZtdfAASWROMrSKu1dcUDczSbM-WqQCuMj-XlXCU-
-rw-r--r-- 1 root root  2236416 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj8WKFoOWx3b7MDQbco9Zn-ZXSSJePKzUBt34rK68ohto-
-rw-r--r-- 1 root root  1843200 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj8WKFoOWx3b7MDQbco9Zn-e0zcVLKZHKpwzXjtbKJcqY-
-rw-r--r-- 1 root root  1687552 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj8WKFoOWx3b7MDQbco9Zn-jfsSFHWNHxP3tMmuIi899w-
-rw-r--r-- 1 root root  5287936 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjK30hBKmgcUD3Z58xyq-YFoGAjtYn4FOMaO6OzSbx5h2-
-rw-r--r-- 1 root root  2117632 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjTId.ryt0v0Lpx5jPNx-M29MPUOHSL8Y61Or18XPpmVM-
-rw-r--r-- 1 root root  2494464 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjfa8BsuHd-EtzGyd0CMz6mGm4yKAm1mboJRhDoU-RjSI-
-rw-r--r-- 1 root root  2494464 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYDN8vcm6G1zHEAopbl8Ef15haMtzMicskNMIznSiDFCU-
-rw-r--r-- 1 root root  2953216 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYUKKNbHUe3ixo0BHAZx0upZ.hW7xZ9InVWjShKdmWfzY-
-rw-r--r-- 1 root root  2822144 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYUKKNbHUe3ixo0BHAZx0upZgAD5cBM6KtXCzTUcCSvyM-
-rw-r--r-- 1 root root  5287936 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYfqkOfzHA.PY1fyHfeexeAVJdaHzU-OSNKJ4ucisWOfY-
-rw-r--r-- 1 root root  1843200 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYvA6.qJ6XPdqYgjqeu2rys42.JCQkdvTcQNDfQaGIVE--
-rw-r--r-- 1 root root  2236416 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYvA6.qJ6XPdqYgjqeu2rys5YFK6Jc4VDBbOEAcxuOsA--
-rw-r--r-- 1 root root  1687552 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYvA6.qJ6XPdqYgjqeu2rysDxh33jT3CKV.5sTo.X.fXQ-
-rw-r--r-- 1 root root  2117632 Mar 19  2018 ECRYPTFS_FNEK_ENCRYPTED.FXY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYy-WhpglOyqyt0YRXEySFN8l60EhexRBuS.Gm7mx.4sc-
-rw-r--r-- 1 root root 15572992 Nov  2  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjDx-E304294o0uITpWFBOnrXddINc4qKvGPIH.ACTZUDQJbFv3ApxchEUpb7xaTD9
-rw-r--r-- 1 root root 49094656 Nov 14  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjMc93GPummUvYhtAVddSXI8xzqwAFt40Qp0xXlnDd8uUOfYfllc2jj7ClpmLhcJYA
-rw-r--r-- 1 root root 25124864 Nov  2  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojjSVYfd1xkdNweRx3Zvex41ql3QrPbwLXncjM0hnV3vRZv78bbh533Oas37m.m7OLX
-rw-r--r-- 1 root root 25124864 Nov  2  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYIhzUEQQB8D20wB-y.4VNLhizE27wBQw-H5IeBjXk5F97LZoCKwt0nowZQt605FR6
-rw-r--r-- 1 root root 49094656 Nov 14  2017 ECRYPTFS_FNEK_ENCRYPTED.FYY2WmAJMygeo-ak2C7IpJLHpdZSqnV-5ylYd8yBkkIOmaH8oX0HIHmLGc77uJfKtcTWKTlDakTmTCTq8ty-B2KoU7XxGJMECoru
-rw-r--r-- 1 root root 32620544 Nov 14  2017 ECRYPTFS_FNEK_ENCRYPTED.FZY2WmAJMygeo-Q-KoqU3Jl7TwGGOiEnrojj.2N17GkDXCdtWS3bHy1Vw2DYaD67EsGuE5.OMvwz-tWTIu3SgpGS6LBzg3TBLAbjSShr1OmDe0rc2RLCzTb0yE--
 
挂载目录
 
[root@ECS]#mount -t ecryptfs /data /iclound
原文地址:https://www.cnblogs.com/networking/p/14162918.html