Primary Use Case

This tool is designed for users who need to easily create and manage encrypted containers using DM-Crypt, especially in environments like LiveCDs where quick mounting is essential. It streamlines multiple commands into a single script, making encryption management accessible for system administrators and security-conscious users.

Key Features

Create and mount DM-Crypt containers with a single command

Supports encrypted swap creation

Safety checks to prevent overwriting existing files or mounted devices

Supports creation on files, raw drives, partitions, LVM slices, and RAID devices

Interactive CLI dialogs for container creation

Supports multiple filesystem types (ext2/3/4, btrfs, ntfs, xfs, fat, etc.)

Option to configure sudo rules for non-privileged user execution

Automates loop device creation and management

Insights & Recommendations

The tool requires root or sudo privileges to manage encrypted containers. It is recommended to configure sudoers rules for safer non-root usage. The script performs multiple safety checks to avoid data loss by preventing operations on mounted or RAID/LVM/ZFS devices. Users should ensure all dependencies are installed and use strong passphrases for encryption security.

Installation

Ensure required programs are installed: cryptsetup, sed, basename, realpath, losetup, dd, mkfs*, shred, touch, bash
On some systems, manually install cryptsetup (e.g., 'apt-get install cryptsetup-bin' on Ubuntu 18 minimal)
Optionally install sudo and filesystem support tools (btrfs, xfs, ntfs, exfat, reiserfs)
Download the script to a local directory, e.g., '/opt' using wget or curl: 'wget https://github.com/Aminuxer/DM-Crypt-Helper-Scripts/raw/master/_dmc.sh'
Make the script executable: 'chmod +x _dmc.sh'
Optionally create sudoers rules to allow non-root users to run the script without password
Run the script with sudo: 'sudo /opt/_dmc.sh'

Usage

./_dmc.sh <Path to Dm-Crypt container> create

Creates a new DM-Crypt container in a file or block device with interactive prompts

./_dmc.sh <Path to Dm-Crypt container>

Mounts or switches to the specified DM-Crypt container

./_dmc.sh <Path to Dm-Crypt container> stop

Forces unmounting and stopping of the specified DM-Crypt container

./_dmc.sh make_loops

Creates new loop devices in /dev for container use

sudo /opt/_dmc.sh

Runs the script with sudo privileges, showing mini-help if no parameters are given

Smart Usage Notes

Integrate with configuration management tools to automate encrypted container deployment and lifecycle.Use in incident response playbooks to quickly isolate and secure sensitive data on compromised hosts.Combine with backup automation to ensure encrypted backups are created and recoverable.Leverage sudoers configuration to delegate encryption management to non-privileged users securely.Incorporate safety checks into custom scripts to prevent accidental data loss during encryption operations.

OpenSec Atlas

DM-Crypt-Helper-Scripts

About This Tool

Primary Use Case

Key Features

Insights & Recommendations

Installation

Usage

Smart Usage Notes

Security Capability Profile

Tags

You Might Also Like