Prerequisites
- Root access
- Unused disk or partition (e.g., /dev/sdb1)
Step 1: Install cryptsetup
sudo apt install cryptsetup -y
Step 2: Initialize LUKS Partition
sudo cryptsetup luksFormat /dev/sdb1
Step 3: Open the Encrypted Partition
sudo cryptsetup open /dev/sdb1 secret_volume
Step 4: Create Filesystem
sudo mkfs.ext4 /dev/mapper/secret_volume
Step 5: Mount
sudo mkdir /mnt/encrypted
sudo mount /dev/mapper/secret_volume /mnt/encrypted
Step 6: Auto-mount at Boot (Keyfile)
dd if=/dev/urandom of=/etc/luks-keyfile bs=1024 count=4
sudo cryptsetup luksAddKey /dev/sdb1 /etc/luks-keyfile
sudo nano /etc/crypttab
