fallocate -l 6.5T ${FILE}
sudo cryptsetup -q -s 512 luksFormat ${FILE} ${KEY_PATH}
sudo cryptsetup --allow-discards luksOpen -d ${KEY_PATH} ${FILE} ${ENCRYPTED_DISK}
sudo mkfs.ext4 /dev/mapper/${ENCRYPTED_DISK}
sudo tune2fs -e remount-ro /dev/mapper/${ENCRYPTED_DISK}
FSTAB_ENTRY="/dev/mapper/${ENCRYPTED_DISK} $TARGET ext4 defaults 0 0"
echo "Successfully encrypted $DISK => $ENCRYPTED_DISK !"
echo "modify /etc/fstab to your needs."
echo "it should most likely look like:"
echo $FSTAB_ENTRY
echo "do you want me to add it? (y/n)"
read input
input=$(echo "$input" | tr '[:upper:]' '[:lower:]')
if [ "$input" == "y" ]; then
sudo mkdir -p $TARGET
echo $FSTAB_ENTRY | sudo tee -a /etc/fstab
else
echo "Not making changes"
fiFILE=./cryptfile.img KEY_PATH=$HOME/apps/.key ENCRYPTED_DISK=dm-data2 TARGET=/data2 bash ./encrypt.sh
DONT FORGET TO UPDATE CRYPTTAB!