https://drive.google.com/file/d/1ixaTJisfMEYjuNN7bmfzE8niYlMCjfOg/view?usp=sharing

1. Understanding LUKS (Linux Unified Key Setup)

Key Concepts

• Full-disk encryption: Encrypts entire block device (not just files).
• Multiple passphrases: Up to 8 keys can unlock the same volume.
• Key files: Passwordless unlock using secure key files.
• Use Cases:
  • Laptops with sensitive data
  • External drives
  • Compliance requirements (HIPAA, GDPR)

⚠️ Critical Warning:

Lost passphrase = permanently lost data! Always backup keys.

2. Installing LUKS Tools

Prerequisites

# Enable repositories
sudo dnf repolist all

# Install cryptsetup (RHEL/CentOS 8+)
sudo dnf install cryptsetup -y

# Verify
cryptsetup --version

💡 Note:

Package name is cryptsetup (not crypsetup).

3. Creating LUKS Encrypted Volume

Encrypt Raw Disk

# WARNING: This erases ALL data on /dev/sdb!
sudo cryptsetup luksFormat /dev/sdb

# Confirm with "YES" (uppercase)
# Enter passphrase twice (min 8 chars)

⚠️ Critical:

• Use dedicated disk/partition (not system disk)
• Passphrase is case-sensitive

Open Encrypted Volume