FAQ/Howto - Revision history

Kafran: /* Create udev rules */

2017-06-21T00:23:41Z

‎Create udev rules

Kafran: /* Add an encryption key to the flashdrive */

2017-06-21T00:22:35Z

‎Add an encryption key to the flashdrive

Kafran: /* Create the script to mount the drive */

2017-06-21T00:17:29Z

‎Create the script to mount the drive

Kafran: /* Create systemd service */

2017-06-21T00:15:05Z

‎Create systemd service

Kafran: /* Move your /home to a flash drive */

2017-06-21T00:09:01Z

‎Move your /home to a flash drive

Kafran: /* Move your /home to a flash drive [this is a work in progress, please do not edit yet] */

2017-06-21T00:08:19Z

‎Move your /home to a flash drive [this is a work in progress, please do not edit yet]

Kafran: /* Move your /home to a flash drive */

2017-06-20T23:47:01Z

‎Move your /home to a flash drive

Kafran: /* Move your /home to a flash drive */

2017-06-20T20:25:54Z

‎Move your /home to a flash drive

Kafran: /* Generate an encryption key */

2017-06-20T20:17:47Z

‎Generate an encryption key

Kafran: /* Move your /home to a flash drive */

2017-06-20T19:54:22Z

‎Move your /home to a flash drive

@@ Line 53: / Line 53: @@
 ==== Create udev rules ====
-    ## /etc/udev/rules.d/10-usbdrive.rules
+<pre>
-    KERNEL=="sd*", ATTRS{serial}=="4C530001300414107405", ATTRS{idVendor}=="0781", ATTRS{idProduct}=="5590", SYMLINK+="usb/sandisk", ENV{SYSTEMD_WANTS}="auto-mount-flash-drive.service"
+## /etc/udev/rules.d/10-usbdrive.rules
 You can get the values for serial, idVendor, and idProduct with dmesg output; type before inserting USB drive:
-    $ dmesg -w
+ $ dmesg -w
 Sources: (a) https://paste.ubuntu.com/24558174/ (b) http://jasonwryan.com/blog/2014/01/20/udev/

@@ Line 41: / Line 41: @@
 '''Step 2: Make the keyfile read-only to root:'''
-     $ sudo chmod 0400 /root/keyfile
+     $ sudo chmod 0400 /etc/keys/GaOS-Home.key
 Alternatively you can chown your keyfile to root:root and move it into the /root folder or other place.
@@ Line 47: / Line 47: @@
 '''Step 3: Add the keyfile to LUKS'''
-     $ sudo cryptsetup luksAddKey /dev/sdX /etc/keys/keyfile
+     $ sudo cryptsetup luksAddKey /dev/sdX /etc/keys/GaOS-Home.key
 Source: https://www.howtoforge.com/automatically-unlock-luks-encrypted-drives-with-a-keyfile

@@ Line 75: / Line 75: @@
 ==== Create the script to mount the drive ====
-    #/usr/local/bin/auto-mount/auto-mount.sh
+<pre>
-    #!/bin/bash
+#/usr/local/bin/auto-mount/auto-mount.sh
-    cryptsetup luksOpen --key-file /etc/keys/GaOS-Home.key /dev/usb/sandisk HomeGaOS
+cryptsetup luksOpen --key-file /etc/keys/GaOS-Home.key /dev/usb/sandisk HomeGaOS
-    if [[ ! -e /mnt/HomeGaOS ]]; then
+if [[ ! -e /mnt/HomeGaOS ]]; then
-	mkdir /mnt/HomeGaOS
+  mkdir /mnt/HomeGaOS
-    fi
+fi
-    if [[ -e /dev/mapper/HomeGaOS ]]; then
+if [[ -e /dev/mapper/HomeGaOS ]]; then
-	mount /dev/mapper/HomeGaOS /mnt/HomeGaOS
+  mount /dev/mapper/HomeGaOS /mnt/HomeGaOS
-    else
+else
-	echo "not ready"
+  echo "not ready"
-    fi
+fi
 ==== Move the /home folders to the flashdrive and create symlinks ====

@@ Line 64: / Line 64: @@
 ==== Create systemd service ====
-    #/etc/systemd/system/auto-mount-flash-drive.service
+<pre>
-    [Unit]
+#/etc/systemd/system/auto-mount-flash-drive.service
-    Description=Auto mount encryted flash drive
+[Unit]
-    [Service]
+[Service]
-    ExecStart=/usr/local/bin/auto-mount/auto-mount.sh
+ExecStart=/usr/local/bin/auto-mount/auto-mount.sh
 ==== Create the script to mount the drive ====

@@ Line 1: / Line 1: @@
 Some frequently useful configuration options:
-== Move your /home to a flash drive ==
+== Expand your Home to a flash drive ==
 It is not recommended to mount your /home to an external USB Flash Drive because if you loose it you gonna be in trouble. However you can move your /home folders to an external place and free some storage.

@@ Line 3: / Line 3: @@
 == Move your /home to a flash drive ==
-It is not recommended to mount your /home to an external USB Flash Drive or a SD Card because if you loose it you gonna be in trouble. However you can move your /home folders to a external place and free some storage.
+It is not recommended to mount your /home to an external USB Flash Drive because if you loose it you gonna be in trouble. However you can move your /home folders to an external place and free some storage.
 ==== Encrypt your flash drive ====
@@ Line 9: / Line 9: @@
 Flash drives are easy to loose. If you don't want anyone looking around your data, you should encrypt your flash drive. I will not detail this part, as data encryption are complex and you have better and complete information at https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system
-To encrypt the entire flash drive, do this:
+'''Step 1: Encrypt the entire flash drive:'''
-     $ sudo cryptsetup -v --cipher aes-xts-plain64 --key-size 512 --hash sha512 --use-random luksFormat /dev/sda
+     $ sudo cryptsetup -v -c aes-xts-plain64 -s 512 -h sha512 --use-random luksFormat /dev/sdX
-You should change /dev/sda for your device location. Be carefully, this may lead to data damage.
+You should change /dev/sdX for your flashdrive/sdcard. Be carefully, this may lead to data damage.
 ===== Add an encryption key to the flashdrive =====
@@ Line 23: / Line 33: @@
      $ sudo dd if=/dev/urandom of=/etc/keys/GaOS-Home.key bs=1024 count=4
-This will create a file with random content with the size of 4096 bits. You can use any file to act as keyfile. A 4kb file with random content is good enough.
+I'm assuming the keyfile gonna be stored at /etc/keys folder. This will create a file with random content with the size of 4096 bits. You can use any file to act as keyfile. A 4kb file with random content is good enough.
 '''Step 2: Make the keyfile read-only to root:'''
@@ Line 29: / Line 39: @@
      $ sudo chmod 0400 /root/keyfile
-I'm assuming the keyfile gonna be stored at /etc/keys folder. Alternatively you can chown your keyfile to root:root and move it into the /root folder or other place.
+ Alternatively you can chown your keyfile to root:root and move it into the /root folder or other place.
 '''Step 3: Add the keyfile to LUKS'''