Skip to content

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.
  • Labs icon Lab
  • A Cloud Guru
Google Cloud Platform icon

Creating and Mounting an Encrypted Filesystem

Understanding the steps needed to create and mount an encrypted filesystem is valuable, in order to keep data secure. In this hands-on lab, we will work with filesystem utilities to create a partition, encrypt it, and format it to make it available for mounting as an encrypted filesystem. At the conclusion, we will verify that the encrypted filesystem is ready for daily use by decrypting it, mounting it, using it, unmounting it, and then encrypting it again.

Google Cloud Platform icon

Path Info

Clock icon Intermediate
Clock icon 30m
Clock icon Jan 17, 2020

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.

Table of Contents

  1. Challenge

    Install cryptsetup Software Package

    Use yum to install the cryptsetup package:

    sudo -i
    yum -y install cryptsetup
  2. Challenge

    Create a Partition Using All Space on the /dev/xvdg Device

    Use fdisk to create a new default partition:

    fdisk /dev/nvme1n1

    Press n and use all the defaults to create a new partition:

    Command (m for help): n
    Partition Type: p
    Partition number (1-4, default 1): Press Enter to accept the default
    First sector: Press Enter to accept the default
    Last sector: Press Enter to accept the default

    Press w to write the changes to the partition table and exit:

    Command (m for help): w
  3. Challenge

    Use cryptsetup luksFormat to Format the Partition to be Encrypted

    Format the /dev/nvme1n1p1 partition to be encrypted with the passphrase TALK3nkrpTED:

    cryptsetup -y luksFormat /dev/nvme1n1p1
  4. Challenge

    Open the Encrypted Device, Create an ext4 Filesystem, Close the Encrypted Device, and then Create the /mnt/keys Directory

    Use cryptsetup luksOpen to decrypt the device and view its symlink in the /dev/mapper directory with the ls command. Use mkfs to create an ext4 filesystem, and mkdir to create the /mnt/keys directory:

    cryptsetup luksOpen /dev/nvme1n1p1 cryptvol

    Use the passphrase TALK3nkrpTED:

    ls -l /dev/mapper
    mkfs -t ext4 /dev/mapper/cryptvol
    cryptsetup luksClose cryptvol
    mkdir /mnt/keys/
  5. Challenge

    Demonstrate the Daily Use of the Encrypted Partition by Opening, Mounting, Accessing, Unmounting, and Closing It

    For daily use, run cryptsetup (using luksOpen) to decrypt the partition and luksClose to encrypt it. When the partition is decrypted, it can be mounted, and it should be unmounted before it is closed or encrypted. Use touch to create an /mnt/keys/access file, and ls to display it:

    cryptsetup luksOpen /dev/nvme1n1p1 cryptvol

    Use the passphrase TALK3nkrpTED, then:

    mount /dev/mapper/cryptvol /mnt/keys
    touch /mnt/keys/access
    ls -l /mnt/keys/
    umount /mnt/keys
    cryptsetup luksClose cryptvol

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Provided environment for hands-on practice

We will provide the credentials and environment necessary for you to practice right within your browser.

Guided walkthrough

Follow along with the author’s guided walkthrough and build something new in your provided environment!

Did you know?

On average, you retain 75% more of your learning if you get time for practice.

Start learning by doing today

View Plans