{"id":4829,"date":"2026-05-31T00:03:19","date_gmt":"2026-05-30T15:03:19","guid":{"rendered":"https:\/\/blog.id774.net\/entry\/?p=4829"},"modified":"2026-05-30T19:10:55","modified_gmt":"2026-05-30T10:10:55","slug":"%e6%9a%97%e5%8f%b7%e5%8c%96%e3%83%87%e3%82%a3%e3%82%b9%e3%82%af%e9%81%8b%e7%94%a8%e6%89%8b%e9%a0%86%e3%82%92%e6%95%b4%e7%90%86%e3%81%99%e3%82%8b","status":"publish","type":"post","link":"https:\/\/blog.id774.net\/entry\/2026\/05\/31\/4829\/","title":{"rendered":"\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u904b\u7528\u624b\u9806\u3092\u6574\u7406\u3059\u308b"},"content":{"rendered":"<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u306f\u3001\u6697\u53f7\u5316\u9818\u57df\u3092\u4e00\u5ea6\u4f5c\u6210\u3057\u3066\u7d42\u308f\u308b\u4f5c\u696d\u3067\u306f\u306a\u3044\u3002\u6697\u53f7\u5316\u9818\u57df\u306f\u3001\u4f5c\u6210\u3057\u305f\u77ac\u9593\u306b\u306f\u6b63\u3057\u304f\u898b\u3048\u3066\u3082\u3001\u6642\u9593\u304c\u7d4c\u3064\u306b\u3064\u308c\u3066\u3001\u5a92\u4f53\u306e\u52a3\u5316\u3001 OS \u306e\u66f4\u65b0\u3001 cryptsetup \u306e\u4ed5\u69d8\u5909\u66f4\u3001\u6697\u53f7\u65b9\u5f0f\u306e\u4e16\u4ee3\u4ea4\u4ee3\u3001\u9375\u7ba1\u7406\u306e\u5909\u66f4\u3001\u62c5\u5f53\u8005\u3084\u4f5c\u696d\u8a18\u61b6\u306e\u55aa\u5931\u306b\u3088\u3063\u3066\u3001\u958b\u3051\u308b\u304b\u3069\u3046\u304b\u304c\u4e0d\u78ba\u304b\u306b\u306a\u308b\u3002\u6697\u53f7\u5316\u3055\u308c\u3066\u3044\u306a\u3044\u30c7\u30a3\u30b9\u30af\u3067\u3042\u308c\u3070\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u8aad\u3081\u308b\u9650\u308a\u3001\u90e8\u5206\u7684\u306a\u6551\u51fa\u304c\u3067\u304d\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u3057\u304b\u3057\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u3001 LUKS \u30d8\u30c3\u30c0\u30fc\u3001 key slot\u3001 keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001 crypttab\u3001 fstab\u3001 LVM \u69cb\u6210\u3001\u30de\u30a6\u30f3\u30c8\u624b\u9806\u306e\u3069\u308c\u304b\u304c\u5931\u308f\u308c\u308b\u3060\u3051\u3067\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u304c\u6b8b\u3063\u3066\u3044\u3066\u3082\u5fa9\u5143\u3067\u304d\u306a\u3044\u72b6\u614b\u306b\u306a\u308a\u5f97\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u3068\u306f\u3001\u6697\u53f7\u5316\u9818\u57df\u3092\u4f5c\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u5c06\u6765\u306e\u6642\u70b9\u3067\u3082\u6b63\u3057\u304f\u958b\u304d\u3001\u8aad\u307f\u53d6\u308a\u3001\u70b9\u691c\u3057\u3001\u79fb\u884c\u3057\u3001\u9000\u5f79\u3067\u304d\u308b\u6761\u4ef6\u3092\u7dad\u6301\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<p>\u524d\u7a3f\u3067\u306f\u3001\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u306e\u9577\u671f\u904b\u7528\u3092\u3001 LUKS1 \/ LUKS2\u3001 CBC-ESSIV \/ XTS\u3001 PBKDF2 \/ Argon2id\u3001 TrueCrypt \u65e7\u8cc7\u7523\u3001\u5a92\u4f53\u4fdd\u5168\u3001\u79fb\u884c\u3001\u9000\u5f79\u3092\u542b\u3080\u30ec\u30b8\u30ea\u30a8\u30f3\u30b9\u306e\u554f\u984c\u3068\u3057\u3066\u6574\u7406\u3057\u305f<a class=\"ref\" href=\"#ref1\">[1]<\/a>\u3002\u305d\u3053\u3067\u78ba\u8a8d\u3057\u305f\u306e\u306f\u3001\u53e4\u3044\u6697\u53f7\u5316\u65b9\u5f0f\u3092\u5358\u7d14\u306b\u5371\u967a\u3068\u307f\u306a\u3059\u306e\u3067\u3082\u3001\u3059\u3079\u3066\u3092\u6700\u65b0\u65b9\u5f0f\u3078\u7f6e\u304d\u63db\u3048\u308c\u3070\u5b89\u5168\u3068\u8003\u3048\u308b\u306e\u3067\u3082\u4e0d\u5341\u5206\u3060\u3068\u3044\u3046\u70b9\u3067\u3042\u308b\u3002\u53e4\u3044\u69cb\u6210\u306b\u306f\u904e\u53bb\u306e\u5fa9\u5143\u7d4c\u8def\u304c\u6b8b\u3063\u3066\u3044\u308b\u5834\u5408\u304c\u3042\u308a\u3001\u73fe\u5728\u306e\u6a19\u6e96\u3082\u5c06\u6765\u306f\u30ec\u30ac\u30b7\u30fc\u306b\u306a\u308b\u3002\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u306e\u9577\u671f\u904b\u7528\u3067\u306f\u3001\u6697\u53f7\u65b9\u5f0f\u306e\u5f37\u5ea6\u3060\u3051\u3067\u306a\u304f\u3001\u89e3\u9664\u624b\u6bb5\u3001\u30d8\u30c3\u30c0\u30fc\u4fdd\u5168\u3001\u5a92\u4f53\u8b58\u5225\u3001\u8d77\u52d5\u8a2d\u5b9a\u3001\u70b9\u691c\u5468\u671f\u3001\u79fb\u884c\u6761\u4ef6\u3001\u9000\u5f79\u6761\u4ef6\u3092\u542b\u3081\u3066\u7ba1\u7406\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u672c\u7a3f\u3067\u306f\u3001\u305d\u306e\u8a2d\u8a08\u8ad6\u3092\u5177\u4f53\u7684\u306a\u64cd\u4f5c\u624b\u9806\u3078\u843d\u3068\u3057\u8fbc\u307f\u3001\u521d\u671f\u751f\u6210\u3001\u901a\u5e38\u904b\u7528\u3001\u60c5\u5831\u78ba\u8a8d\u3001 key slot \u7ba1\u7406\u3001 keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u30d8\u30c3\u30c0\u30fc\u4fdd\u5168\u3001 crypttab\u3001 fstab\u3001 LVM\u3001\u70b9\u691c\u3001\u5fa9\u65e7\u3001\u9000\u5f79\u307e\u3067\u3092\u4e00\u3064\u306e\u4f5c\u696d\u4f53\u7cfb\u3068\u3057\u3066\u6574\u7406\u3059\u308b\u3002<\/p>\n<p>cryptsetup \u306f\u3001 dm-crypt \u3092\u4e2d\u5fc3\u3068\u3059\u308b Linux \u306e\u6697\u53f7\u5316\u30d6\u30ed\u30c3\u30af\u30c7\u30d0\u30a4\u30b9\u3092\u6271\u3046\u305f\u3081\u306e\u4e3b\u8981\u306a\u30e6\u30fc\u30b6\u30fc\u7a7a\u9593\u30c4\u30fc\u30eb\u3067\u3042\u308b\u3002cryptsetup project \u306f\u3001 LUKS\u3001 plain dm-crypt\u3001 loop-AES\u3001 TrueCrypt \/ VeraCrypt \u7cfb\u3001 BitLocker\u3001 FileVault2 \u306a\u3069\u8907\u6570\u5f62\u5f0f\u3092\u6271\u3046\u30c4\u30fc\u30eb\u7fa4\u3068\u3057\u3066 cryptsetup \u3092\u8aac\u660e\u3057\u3066\u3044\u308b<a class=\"ref\" href=\"#ref2\">[2]<\/a>\u3002\u4e00\u65b9\u3001 Linux \u30ab\u30fc\u30cd\u30eb\u5074\u306e dm-crypt \u306f\u3001 device-mapper \u306e crypt target \u3068\u3057\u3066\u3001 block device \u3092\u900f\u904e\u7684\u306b\u6697\u53f7\u5316\u3059\u308b\u6a5f\u69cb\u3067\u3042\u308b<a class=\"ref\" href=\"#ref3\">[3]<\/a>\u3002\u3064\u307e\u308a\u3001\u5229\u7528\u8005\u304c\u5b9f\u884c\u3059\u308b\u306e\u306f cryptsetup \u306e\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308a\u3001\u305d\u306e\u7d50\u679c\u3068\u3057\u3066\u30ab\u30fc\u30cd\u30eb\u5074\u3067\u306f dm-crypt \u306b\u3088\u308b mapper device \u304c\u4f5c\u3089\u308c\u308b\u3002\u3053\u306e\u9055\u3044\u3092\u5206\u3051\u3066\u7406\u89e3\u3057\u3066\u304a\u304b\u306a\u3044\u3068\u3001 LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u64cd\u4f5c\u3057\u3066\u3044\u308b\u306e\u304b\u3001 mapper \u3092\u958b\u3044\u3066\u3044\u308b\u306e\u304b\u3001 filesystem \u3092\u30de\u30a6\u30f3\u30c8\u3057\u3066\u3044\u308b\u306e\u304b\u3001 LVM \u306e\u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3092\u898b\u3066\u3044\u308b\u306e\u304b\u304c\u66d6\u6627\u306b\u306a\u308b\u3002<\/p>\n<p>\u672c\u7a3f\u3067\u306f\u3001\u30b3\u30de\u30f3\u30c9\u3060\u3051\u3092\u307e\u3068\u3081\u3066\u5217\u6319\u3057\u306a\u3044\u3002\u5404\u64cd\u4f5c\u306b\u3064\u3044\u3066\u3001\u4f55\u3092\u76ee\u7684\u306b\u5b9f\u884c\u3059\u308b\u306e\u304b\u3001\u5b9f\u884c\u524d\u306b\u4f55\u3092\u78ba\u8a8d\u3059\u308b\u306e\u304b\u3001\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u4f55\u304b\u3001\u5931\u6557\u3057\u305f\u5834\u5408\u306b\u3069\u306e\u5c64\u3092\u7591\u3046\u3079\u304d\u304b\u3001\u5b9f\u884c\u5f8c\u306b\u4f55\u3092\u53f0\u5e33\u3078\u6b8b\u3059\u3079\u304d\u304b\u3092\u8aac\u660e\u3059\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u64cd\u4f5c\u3067\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e\u53d6\u308a\u9055\u3048\u3001\u6700\u5f8c\u306e key slot \u306e\u524a\u9664\u3001\u30d8\u30c3\u30c0\u30fc\u5fa9\u5143\u306e\u8aa4\u7528\u3001 keyfile \u306e\u55aa\u5931\u3001 crypttab \u3068 fstab \u306e\u4e0d\u6574\u5408\u3001 LVM \u3068 LUKS \u306e\u4e0a\u4e0b\u95a2\u4fc2\u306e\u8aa4\u8a8d\u304c\u3001\u76f4\u63a5\u7684\u306a\u5fa9\u65e7\u4e0d\u80fd\u306b\u3064\u306a\u304c\u308b\u3002man page \u306f cryptsetup \u306e\u5404 action \u3092\u5b9a\u7fa9\u3057\u3066\u3044\u308b\u304c\u3001\u5b9f\u904b\u7528\u3067\u306f action \u306e\u610f\u5473\u3092\u3001\u624b\u9806\u9806\u5e8f\u3001\u53f0\u5e33\u3001\u5fa9\u65e7\u6761\u4ef6\u3068\u7d50\u3073\u4ed8\u3051\u3066\u6271\u3046\u5fc5\u8981\u304c\u3042\u308b<a class=\"ref\" href=\"#ref4\">[4]<\/a>\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u672c\u7a3f\u306e\u76ee\u7684\u306f\u3001 cryptsetup \u306e\u4f7f\u3044\u65b9\u3092\u65ad\u7247\u7684\u306b\u899a\u3048\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u9577\u671f\u306b\u308f\u305f\u3063\u3066\u5b89\u5168\u306b\u6271\u3046\u305f\u3081\u306e\u904b\u7528\u624b\u9806\u3092\u660e\u6587\u5316\u3059\u308b\u3053\u3068\u306b\u3042\u308b\u3002<\/p>\n<hr>\n<h2>1. \u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306f\u4f5c\u6210\u30b3\u30de\u30f3\u30c9\u3067\u306f\u306a\u304f\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u3067\u7ba1\u7406\u3059\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u6271\u3046\u3068\u304d\u3001\u6700\u521d\u306b\u56fa\u5b9a\u3059\u3079\u304d\u8003\u3048\u65b9\u306f\u3001 luksFormat \u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u30b4\u30fc\u30eb\u3067\u306f\u306a\u3044\u3068\u3044\u3046\u70b9\u3067\u3042\u308b\u3002luksFormat \u306f\u6697\u53f7\u5316\u9818\u57df\u306e\u59cb\u70b9\u3067\u3042\u308a\u3001\u305d\u306e\u5f8c\u306b open\u3001 filesystem \u4f5c\u6210\u3001 mount\u3001 key slot \u7ba1\u7406\u3001 header backup\u3001 crypttab \/ fstab \u9023\u643a\u3001\u5b9a\u671f\u70b9\u691c\u3001\u79fb\u884c\u3001\u5fa9\u65e7\u3001\u9000\u5f79\u304c\u7d9a\u304f\u3002Arch \u3084 Debian \u306e man page \u3067\u3082 cryptsetup \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u4f5c\u6210\u3060\u3051\u3067\u306a\u304f\u7ba1\u7406\u5168\u4f53\u3092\u6271\u3046\u30b3\u30de\u30f3\u30c9\u3068\u3057\u3066\u6574\u7406\u3055\u308c\u3066\u3044\u308b<a class=\"ref\" href=\"#ref5\">[5]<\/a><a class=\"ref\" href=\"#ref6\">[6]<\/a>\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u672c\u7a3f\u3067\u306f\u30b3\u30de\u30f3\u30c9\u3092\u5358\u767a\u64cd\u4f5c\u3067\u306f\u306a\u304f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5bff\u547d\u3092\u901a\u3057\u305f\u7ba1\u7406\u5358\u4f4d\u3068\u3057\u3066\u4e26\u3079\u308b\u3002<\/p>\n<p>\u3053\u306e\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u306e\u8003\u3048\u65b9\u304c\u5fc5\u8981\u306b\u306a\u308b\u7406\u7531\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u3001\u4f5c\u6210\u6642\u70b9\u306e\u6210\u529f\u3068\u5c06\u6765\u306e\u5fa9\u5143\u53ef\u80fd\u6027\u304c\u540c\u3058\u3067\u306f\u306a\u3044\u304b\u3089\u3067\u3042\u308b\u3002\u4f5c\u6210\u76f4\u5f8c\u306b mount \u3067\u304d\u3066\u3082\u3001 keyfile \u3092\u5931\u3048\u3070\u958b\u3051\u306a\u304f\u306a\u308b\u3002\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u8a2d\u5b9a\u3057\u3066\u3082\u3001\u3069\u306e key slot \u306b\u5bfe\u5fdc\u3059\u308b\u304b\u3092\u8a18\u9332\u3057\u306a\u3051\u308c\u3070\u3001\u6574\u7406\u6642\u306b\u8aa4\u3063\u3066\u524a\u9664\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u5f97\u3057\u3066\u3082\u3001\u5bfe\u8c61 UUID \u3084\u53d6\u5f97\u65e5\u3092\u8a18\u9332\u3057\u306a\u3051\u308c\u3070\u3001\u5fa9\u65e7\u6642\u306b\u3069\u306e\u5a92\u4f53\u3078\u623b\u3059\u3079\u304d\u304b\u5224\u65ad\u3067\u304d\u306a\u3044\u3002crypttab \u3068 fstab \u3092\u8a2d\u5b9a\u3057\u3066\u3082\u3001 LUKS UUID\u3001 mapper \u540d\u3001 filesystem UUID\u3001 mount point \u306e\u95a2\u4fc2\u3092\u5206\u3051\u3066\u8a18\u9332\u3057\u306a\u3051\u308c\u3070\u3001\u8d77\u52d5\u6642\u306e\u5931\u6557\u3092\u5207\u308a\u5206\u3051\u306b\u304f\u3044\u3002\u3064\u307e\u308a\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u3067\u306f\u3001\u30b3\u30de\u30f3\u30c9\u306e\u6210\u529f\u3060\u3051\u3067\u306a\u304f\u3001\u5f8c\u304b\u3089\u540c\u3058\u72b6\u614b\u3092\u518d\u73fe\u3067\u304d\u308b\u3053\u3068\u304c\u91cd\u8981\u306b\u306a\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6bb5\u968e<\/th>\n<th>\u4e3b\u306a\u64cd\u4f5c<\/th>\n<th>\u904b\u7528\u4e0a\u306e\u610f\u5473<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u521d\u671f\u751f\u6210<\/td>\n<td>\u5bfe\u8c61\u78ba\u8a8d\u3001 luksFormat\u3001 open\u3001 mkfs\u3001 mount \u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u5b89\u5168\u306b\u4f5c\u6210\u3057\u3001\u5b9f\u969b\u306b\u4f7f\u3048\u308b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3078\u63a5\u7d9a\u3059\u308b\u6bb5\u968e\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u901a\u5e38\u904b\u7528<\/td>\n<td>open\u3001 mount\u3001\u540c\u671f\u3001 umount\u3001 close \u3092\u56fa\u5b9a\u624b\u9806\u3068\u3057\u3066\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>\u65e5\u5e38\u5229\u7528\u3067\u6697\u53f7\u5316\u9818\u57df\u3092\u958b\u9589\u3057\u3001\u672a\u540c\u671f\u30c7\u30fc\u30bf\u3084 mapper \u306e\u6b8b\u5b58\u3092\u9632\u3050\u6bb5\u968e\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u60c5\u5831\u78ba\u8a8d<\/td>\n<td>luksDump\u3001 status\u3001 lsblk\u3001 blkid \u3092\u4f7f\u3046\u3002<\/td>\n<td>\u5b9f\u4f53\u3001 UUID\u3001 LUKS version\u3001 cipher\u3001 key slot\u3001 mapper \u540d\u3092\u53f0\u5e33\u3068\u7167\u5408\u3059\u308b\u6bb5\u968e\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u9375\u7ba1\u7406<\/td>\n<td>luksAddKey\u3001 luksRemoveKey\u3001 luksKillSlot\u3001 test-passphrase \u3092\u4f7f\u3046\u3002<\/td>\n<td>\u89e3\u9664\u5165\u53e3\u3092\u8ffd\u52a0\u3001\u524a\u9664\u3001\u78ba\u8a8d\u3057\u3001\u4e0d\u8981\u306a\u5165\u53e3\u3092\u6b8b\u3055\u306a\u3044\u6bb5\u968e\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4fdd\u5168\u3068\u5fa9\u65e7<\/td>\n<td>luksHeaderBackup\u3001 luksHeaderRestore\u3001 e2fsck\u3001 fsck\u3001 SMART \u78ba\u8a8d\u3092\u6271\u3046\u3002<\/td>\n<td>\u7834\u640d\u3001\u8a2d\u5b9a\u55aa\u5931\u3001\u5a92\u4f53\u52a3\u5316\u306b\u5099\u3048\u3001\u5fa9\u5143\u6761\u4ef6\u3092\u7dad\u6301\u3059\u308b\u6bb5\u968e\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u79fb\u884c\u3068\u9000\u5f79<\/td>\n<td>\u65b0\u5a92\u4f53\u4f5c\u6210\u3001\u30c7\u30fc\u30bf\u540c\u671f\u3001\u5fa9\u5143\u78ba\u8a8d\u3001\u65e7\u5a92\u4f53\u306e\u5f79\u5272\u5909\u66f4\u3001\u6d88\u53bb\u3092\u884c\u3046\u3002<\/td>\n<td>\u53e4\u3044\u65b9\u5f0f\u3092\u7121\u671f\u9650\u306b\u6b8b\u3055\u305a\u3001\u5fa9\u5143\u7d4c\u8def\u3092\u4fdd\u3061\u306a\u304c\u3089\u7ba1\u7406\u5bfe\u8c61\u304b\u3089\u5916\u3059\u6bb5\u968e\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u8868\u306e\u5404\u6bb5\u968e\u306f\u3001\u72ec\u7acb\u3057\u305f\u4f5c\u696d\u3067\u306f\u306a\u304f\u76f8\u4e92\u306b\u63a5\u7d9a\u3057\u3066\u3044\u308b\u3002\u521d\u671f\u751f\u6210\u3067\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u53d6\u308a\u9055\u3048\u308c\u3070\u3001\u305d\u306e\u5f8c\u306e\u3059\u3079\u3066\u306e\u624b\u9806\u304c\u7834\u7dbb\u3059\u308b\u3002\u901a\u5e38\u904b\u7528\u3067 open \u3068 mount \u306e\u95a2\u4fc2\u3092\u7406\u89e3\u3057\u3066\u3044\u306a\u3051\u308c\u3070\u3001\u5fa9\u65e7\u6642\u306b mapper \u304c\u4f5c\u3089\u308c\u3066\u3044\u308b\u306e\u304b\u3001 filesystem \u304c\u58ca\u308c\u3066\u3044\u308b\u306e\u304b\u3092\u5207\u308a\u5206\u3051\u3089\u308c\u306a\u3044\u3002\u60c5\u5831\u78ba\u8a8d\u3092\u53f0\u5e33\u3068\u7d50\u3073\u4ed8\u3051\u306a\u3051\u308c\u3070\u3001 LUKS UUID\u3001 filesystem UUID\u3001 mapper \u540d\u3001\u7269\u7406\u5a92\u4f53\u306e\u95a2\u4fc2\u304c\u6642\u9593\u3068\u3068\u3082\u306b\u5206\u304b\u3089\u306a\u304f\u306a\u308b\u3002\u9375\u7ba1\u7406\u3092\u8aa4\u308c\u3070\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u304c\u7121\u50b7\u3067\u3082\u89e3\u9664\u3067\u304d\u306a\u304f\u306a\u308b\u3002\u79fb\u884c\u3068\u9000\u5f79\u3092\u8a2d\u8a08\u3057\u306a\u3051\u308c\u3070\u3001\u53e4\u3044\u69cb\u6210\u3092\u653e\u7f6e\u3059\u308b\u304b\u3001\u5fc5\u8981\u306a\u5fa9\u5143\u7d4c\u8def\u3092\u8aa4\u3063\u3066\u6d88\u3059\u304b\u306e\u3069\u3061\u3089\u304b\u306b\u306a\u308a\u3084\u3059\u3044\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306f\u3001\u3053\u306e\u3088\u3046\u306a\u9023\u9396\u3092\u524d\u63d0\u306b\u3001\u4f5c\u6210\u304b\u3089\u9000\u5f79\u307e\u3067\u3092\u4e00\u3064\u306e\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u3068\u3057\u3066\u7ba1\u7406\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<hr>\n<h2>2. \u4f5c\u696d\u524d\u306b\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u53d6\u308a\u9055\u3048\u306a\u3044<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u521d\u671f\u751f\u6210\u3084\u9000\u5f79\u3067\u6700\u3082\u91cd\u5927\u306a\u4e8b\u6545\u306f\u3001\u6697\u53f7\u65b9\u5f0f\u306e\u9078\u629e\u30df\u30b9\u3067\u306f\u306a\u304f\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e\u53d6\u308a\u9055\u3048\u3067\u3042\u308b\u3002\u7279\u306b luksFormat\u3001 mkfs\u3001 erase \u306e\u3088\u3046\u306a\u64cd\u4f5c\u306f\u3001\u5bfe\u8c61\u3092\u8aa4\u308b\u3068\u65e2\u5b58\u30c7\u30fc\u30bf\u3092\u5931\u3046\u3002\u3053\u3053\u3067\u91cd\u8981\u306a\u306e\u306f\u3001\/dev\/sdX \u3068\u3044\u3046\u540d\u524d\u3092\u4fe1\u7528\u3057\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\/dev\/sda\u3001 \/dev\/sdb\u3001 \/dev\/sdc \u306e\u3088\u3046\u306a\u540d\u524d\u306f\u63a5\u7d9a\u9806\u3084\u8d77\u52d5\u9806\u3067\u5909\u308f\u308b\u305f\u3081\u3001\u6628\u65e5 \/dev\/sdb \u3060\u3063\u305f\u5916\u4ed8\u3051\u30c7\u30a3\u30b9\u30af\u304c\u4eca\u65e5\u3082 \/dev\/sdb \u3067\u3042\u308b\u3068\u306f\u9650\u3089\u306a\u3044\u3002Red Hat \u306e LUKS \u6587\u66f8\u3067\u3082\u3001\u6697\u53f7\u5316\u5bfe\u8c61\u3092\u7279\u5b9a\u3057\u3001 UUID \u306a\u3069\u3092\u4f7f\u3063\u3066\u6c38\u7d9a\u7684\u306b\u53c2\u7167\u3059\u308b\u3053\u3068\u304c\u91cd\u8981\u306b\u306a\u308b<a class=\"ref\" href=\"#ref7\">[7]<\/a>\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u7834\u58ca\u7684\u64cd\u4f5c\u306b\u9032\u3080\u524d\u306b\u306f\u3001\u307e\u305a\u5bfe\u8c61\u5019\u88dc\u3092\u4e00\u89a7\u3057\u3001\u6b21\u306b\u7269\u7406\u5a92\u4f53\u3068\u3057\u3066\u306e\u8b58\u5225\u5b50\u3092\u78ba\u8a8d\u3057\u3001\u6700\u5f8c\u306b\u300c\u3053\u306e\u30c7\u30d0\u30a4\u30b9\u3067\u9593\u9055\u3044\u306a\u3044\u300d\u3068\u5224\u65ad\u3067\u304d\u308b\u72b6\u614b\u3092\u4f5c\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u6700\u521d\u306b\u4f7f\u3046\u3079\u304d\u78ba\u8a8d\u30b3\u30de\u30f3\u30c9\u306f lsblk -f \u3067\u3042\u308b\u3002\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306f\u3001\u30d6\u30ed\u30c3\u30af\u30c7\u30d0\u30a4\u30b9\u3001\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u7a2e\u5225\u3001 UUID\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3092\u968e\u5c64\u69cb\u9020\u3067\u8868\u793a\u3059\u308b\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u308b\u306e\u306f\u3001\u5bfe\u8c61\u5019\u88dc\u306e\u5bb9\u91cf\u3001\u65e2\u5b58\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u3059\u3067\u306b\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u3001\u65e2\u5b58\u306e LUKS \u9818\u57df\u3084 LVM \u69cb\u6210\u304c\u898b\u3048\u3066\u3044\u308b\u304b\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u4f5c\u696d\u5bfe\u8c61\u306b\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u30c7\u30a3\u30b9\u30af\u307e\u305f\u306f\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u304c\u4e00\u89a7\u4e0a\u3067\u660e\u78ba\u306b\u8b58\u5225\u3067\u304d\u3001\u304b\u3064\u65e2\u5b58\u306e\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3084\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u8aa4\u3063\u3066\u6d88\u305d\u3046\u3068\u3057\u3066\u3044\u306a\u3044\u3068\u5224\u65ad\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">lsblk -f<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>lsblk -f \u306e\u7d50\u679c\u3092\u898b\u308b\u3068\u304d\u306f\u3001\u30c7\u30a3\u30b9\u30af\u5168\u4f53\u3068\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092\u533a\u5225\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u305f\u3068\u3048\u3070 \/dev\/sdb \u306f\u30c7\u30a3\u30b9\u30af\u5168\u4f53\u3092\u6307\u3057\u3001\/dev\/sdb1 \u306f\u305d\u306e\u4e2d\u306e\u7b2c 1 \u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092\u6307\u3059\u3002\u6697\u53f7\u5316\u5bfe\u8c61\u304c\u30c7\u30a3\u30b9\u30af\u5168\u4f53\u306a\u306e\u304b\u3001\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u306a\u306e\u304b\u3092\u66d6\u6627\u306b\u3057\u305f\u307e\u307e luksFormat \u3092\u5b9f\u884c\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002\u307e\u305f\u3001MOUNTPOINTS \u306b\u5024\u304c\u51fa\u3066\u3044\u308b\u5834\u5408\u3001\u305d\u306e\u9818\u57df\u306f\u73fe\u5728\u5229\u7528\u4e2d\u3067\u3042\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3002\u4f5c\u696d\u5bfe\u8c61\u306b\u898b\u3048\u308b\u30c7\u30d0\u30a4\u30b9\u304c\u3059\u3067\u306b\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u6697\u53f7\u5316\u3084\u521d\u671f\u5316\u306b\u9032\u307e\u305a\u3001\u306a\u305c\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3066\u3044\u308b\u306e\u304b\u3092\u5148\u306b\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u78ba\u8a8d\u9805\u76ee<\/th>\n<th>\u898b\u308b\u5834\u6240<\/th>\n<th>\u5224\u65ad\u5185\u5bb9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u5bb9\u91cf<\/td>\n<td>SIZE \u5217\u3092\u898b\u308b\u3002<\/td>\n<td>\u60f3\u5b9a\u3057\u3066\u3044\u308b\u30c7\u30a3\u30b9\u30af\u5bb9\u91cf\u3068\u4e00\u81f4\u3059\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0<\/td>\n<td>FSTYPE \u5217\u3092\u898b\u308b\u3002<\/td>\n<td>\u65e2\u5b58\u306e ext4\u3001vfat\u3001crypto_LUKS\u3001LVM2_member \u306a\u3069\u304c\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>UUID<\/td>\n<td>UUID \u5217\u3092\u898b\u308b\u3002<\/td>\n<td>fstab\u3001crypttab\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3059\u3079\u304d\u8b58\u5225\u5b50\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30de\u30a6\u30f3\u30c8\u72b6\u614b<\/td>\n<td>MOUNTPOINTS \u5217\u3092\u898b\u308b\u3002<\/td>\n<td>\u73fe\u5728\u5229\u7528\u4e2d\u306e\u9818\u57df\u3092\u8aa4\u3063\u3066\u521d\u671f\u5316\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u6b21\u306b\u3001\u7269\u7406\u5a92\u4f53\u3068\u3057\u3066\u306e\u8b58\u5225\u5b50\u3092\u78ba\u8a8d\u3059\u308b\u3002\u540c\u3058\u5bb9\u91cf\u306e\u5916\u4ed8\u3051 HDD \u3084 SSD \u304c\u8907\u6570\u3042\u308b\u5834\u5408\u3001\u5bb9\u91cf\u3060\u3051\u3067\u306f\u533a\u5225\u3067\u304d\u306a\u3044\u3002\/dev\/disk\/by-id \u306b\u306f\u3001\u30c7\u30a3\u30b9\u30af\u306e\u30e2\u30c7\u30eb\u540d\u3001\u30b7\u30ea\u30a2\u30eb\u756a\u53f7\u3001\u63a5\u7d9a\u65b9\u5f0f\u306b\u57fa\u3065\u304f\u6c38\u7d9a\u7684\u306a\u30ea\u30f3\u30af\u304c\u4e26\u3076\u3002\u3053\u3053\u3067\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/sdX \u3068\u3044\u3046\u4e00\u6642\u7684\u306a\u540d\u524d\u3068\u3001\u7269\u7406\u5a92\u4f53\u306b\u8fd1\u3044 by-id \u540d\u3092\u5bfe\u5fdc\u3065\u3051\u3089\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u4ee5\u5f8c\u306e\u53f0\u5e33\u3067\u306f\u3001\/dev\/sdX \u3060\u3051\u3067\u306a\u304f\u3001by-id \u540d\u3001LUKS UUID\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID\u3001\u5f79\u5272\u540d\u3092\u4f75\u8a18\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">ls -l \/dev\/disk\/by-id\/<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\/dev\/disk\/by-id \u306e\u51fa\u529b\u3067\u306f\u3001\u30ea\u30f3\u30af\u5148\u304c ..\/..\/sdb \u3084 ..\/..\/sdb1 \u306e\u3088\u3046\u306b\u8868\u793a\u3055\u308c\u308b\u3002\u3053\u306e\u5bfe\u5fdc\u3092\u898b\u308b\u3053\u3068\u3067\u3001\u73fe\u5728 \/dev\/sdb \u3068\u3057\u3066\u898b\u3048\u3066\u3044\u308b\u30c7\u30d0\u30a4\u30b9\u304c\u3001\u3069\u306e\u7269\u7406\u5a92\u4f53\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002\u3053\u3053\u3067 by-id \u540d\u306b\u60f3\u5b9a\u5916\u306e\u30e2\u30c7\u30eb\u540d\u3084\u30b7\u30ea\u30a2\u30eb\u304c\u51fa\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u4f5c\u696d\u3092\u6b62\u3081\u308b\u3079\u304d\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u624b\u9806\u3067\u306f\u3001\u30b3\u30de\u30f3\u30c9\u3092\u899a\u3048\u308b\u3053\u3068\u3088\u308a\u3082\u3001\u5bfe\u8c61\u3092\u78ba\u5b9a\u3059\u308b\u3053\u3068\u306e\u307b\u3046\u304c\u91cd\u8981\u3067\u3042\u308b\u3002\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304c\u78ba\u5b9a\u3057\u3066\u3044\u306a\u3044\u72b6\u614b\u3067\u306f\u3001luksFormat\u3001mkfs\u3001erase\u3001luksHeaderRestore \u306e\u3088\u3046\u306a\u64cd\u4f5c\u306b\u306f\u9032\u307e\u306a\u3044\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u8b58\u5225\u5b50<\/th>\n<th>\u610f\u5473<\/th>\n<th>\u4f7f\u3044\u3069\u3053\u308d<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\/dev\/sdX<\/td>\n<td>\u73fe\u5728\u306e\u8d77\u52d5\u72b6\u614b\u3067\u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u4e00\u6642\u7684\u306a\u30c7\u30d0\u30a4\u30b9\u540d\u3067\u3042\u308b\u3002<\/td>\n<td>\u4e00\u6642\u7684\u306a\u78ba\u8a8d\u306b\u306f\u4f7f\u3048\u308b\u304c\u3001\u9577\u671f\u8a18\u9332\u3084\u8a2d\u5b9a\u306e\u6839\u62e0\u306b\u306f\u3057\u306a\u3044\u3002<\/td>\n<\/tr>\n<tr>\n<td>\/dev\/disk\/by-id<\/td>\n<td>\u30e2\u30c7\u30eb\u540d\u3084\u30b7\u30ea\u30a2\u30eb\u756a\u53f7\u306b\u57fa\u3065\u304f\u7269\u7406\u5a92\u4f53\u5bc4\u308a\u306e\u8b58\u5225\u5b50\u3067\u3042\u308b\u3002<\/td>\n<td>\u540c\u5bb9\u91cf\u5a92\u4f53\u3092\u533a\u5225\u3057\u3001\u53f0\u5e33\u306b\u7269\u7406\u5a92\u4f53\u3068\u3057\u3066\u8a18\u9332\u3059\u308b\u305f\u3081\u306b\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS UUID<\/td>\n<td>LUKS \u30d8\u30c3\u30c0\u30fc\u306b\u4ed8\u4e0e\u3055\u308c\u305f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u8b58\u5225\u5b50\u3067\u3042\u308b\u3002<\/td>\n<td>crypttab \u3084\u53f0\u5e33\u3067\u3001\u6697\u53f7\u5316\u9818\u57df\u3092\u8b58\u5225\u3059\u308b\u305f\u3081\u306b\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID<\/td>\n<td>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3044\u305f\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b\u4ed8\u4e0e\u3055\u308c\u308b\u8b58\u5225\u5b50\u3067\u3042\u308b\u3002<\/td>\n<td>fstab \u3084\u30de\u30a6\u30f3\u30c8\u7ba1\u7406\u3067\u3001\u958b\u3044\u305f\u5f8c\u306e\u9818\u57df\u3092\u8b58\u5225\u3059\u308b\u305f\u3081\u306b\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u3067\u5b9f\u65bd\u3059\u3079\u304d\u78ba\u8a8d\u306f\u3001lsblk -f \u3068 \/dev\/disk\/by-id \u306e 2 \u3064\u306b\u7d5e\u3063\u3066\u3088\u3044\u3002blkid \u3084 fdisk -l \u3082\u6709\u7528\u3060\u304c\u3001\u6700\u521d\u304b\u3089\u591a\u304f\u306e\u30b3\u30de\u30f3\u30c9\u3092\u4e26\u3079\u308b\u3068\u3001\u3069\u308c\u304c\u4f55\u3092\u5224\u65ad\u3059\u308b\u305f\u3081\u306e\u3082\u306e\u304b\u5206\u304b\u308a\u306b\u304f\u304f\u306a\u308b\u3002\u901a\u5e38\u306e\u4f5c\u696d\u3067\u306f\u3001\u307e\u305a lsblk -f \u3067\u5168\u4f53\u50cf\u3092\u78ba\u8a8d\u3057\u3001\u6b21\u306b \/dev\/disk\/by-id \u3067\u7269\u7406\u5a92\u4f53\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u306e 2 \u3064\u3067\u5bfe\u8c61\u304c\u78ba\u5b9a\u3057\u306a\u3044\u5834\u5408\u3060\u3051\u3001blkid \u3067 UUID \u3092\u518d\u78ba\u8a8d\u3057\u3001fdisk -l \u3067\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u69cb\u9020\u3092\u8a73\u3057\u304f\u78ba\u8a8d\u3059\u308b\u3002\u6700\u521d\u304b\u3089\u7834\u58ca\u7684\u64cd\u4f5c\u3078\u9032\u3080\u306e\u3067\u306f\u306a\u304f\u3001\u5bfe\u8c61\u3092\u8907\u6570\u306e\u8b58\u5225\u5b50\u3067\u78ba\u8a8d\u3067\u304d\u308b\u72b6\u614b\u3092\u4f5c\u308b\u3053\u3068\u304c\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u904b\u7528\u306e\u6700\u521d\u306e\u5b89\u5168\u7b56\u3067\u3042\u308b\u3002<\/p>\n<p>\u6b21\u306e\u624b\u9806\u3078\u9032\u3093\u3067\u3088\u3044\u6761\u4ef6\u306f\u660e\u78ba\u3067\u3042\u308b\u3002\u4f5c\u696d\u5bfe\u8c61\u306e\u5bb9\u91cf\u3001\u7269\u7406\u5a92\u4f53\u3001\u30c7\u30d0\u30a4\u30b9\u540d\u3001\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3001\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u72b6\u614b\u304c\u8aac\u660e\u3067\u304d\u308b\u3053\u3068\u3002\u53f0\u5e33\u306b\u8a18\u9332\u3059\u308b by-id \u540d\u3001LUKS UUID \u307e\u305f\u306f\u4f5c\u6210\u4e88\u5b9a\u306e\u5f79\u5272\u540d\u304c\u6c7a\u307e\u3063\u3066\u3044\u308b\u3053\u3068\u3002\u73fe\u5728\u5229\u7528\u4e2d\u306e\u30b7\u30b9\u30c6\u30e0\u30c7\u30a3\u30b9\u30af\u3001\u30c7\u30fc\u30bf\u30c7\u30a3\u30b9\u30af\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30c7\u30a3\u30b9\u30af\u3092\u8aa4\u3063\u3066\u5bfe\u8c61\u306b\u3057\u3066\u3044\u306a\u3044\u3053\u3068\u3002\u3053\u306e\u6761\u4ef6\u3092\u6e80\u305f\u3057\u3066\u521d\u3081\u3066\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u521d\u671f\u751f\u6210\u3084\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u306b\u9032\u3080\u3053\u3068\u304c\u3067\u304d\u308b\u3002<\/p>\n<hr>\n<h2>3. \u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u521d\u671f\u751f\u6210\u3059\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u521d\u671f\u751f\u6210\u3067\u6700\u521d\u306b\u6c7a\u3081\u308b\u3079\u304d\u3053\u3068\u306f\u3001\u6697\u53f7\u5316\u5bfe\u8c61\u3092\u3069\u306e\u5f62\u5f0f\u3067\u4f5c\u308b\u304b\u3067\u3042\u308b\u3002\u65b0\u898f\u306b\u4f5c\u6210\u3059\u308b\u4e3b\u7cfb\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u3001\u73fe\u5728\u306e\u6a19\u6e96\u3068\u3057\u3066 LUKS2 \u3092\u660e\u793a\u3059\u308b\u306e\u304c\u81ea\u7136\u3067\u3042\u308b\u3002cryptsetup FAQ \u3068 LUKS \u4ed5\u69d8\u306f\u3001 LUKS \u304c\u30d8\u30c3\u30c0\u30fc\u3001 key slot\u3001\u30de\u30b9\u30bf\u30fc\u30ad\u30fc\u7ba1\u7406\u3092\u6301\u3064\u5f62\u5f0f\u3067\u3042\u308b\u3053\u3068\u3092\u8aac\u660e\u3057\u3066\u3044\u308b<a class=\"ref\" href=\"#ref8\">[8]<\/a><a class=\"ref\" href=\"#ref9\">[9]<\/a>\u3002LUKS2 \u306f JSON \u30e1\u30bf\u30c7\u30fc\u30bf\u3084\u62e1\u5f35\u53ef\u80fd\u306a\u69cb\u9020\u3092\u6301\u3064\u305f\u3081\u3001\u65b0\u898f\u4f5c\u6210\u3067\u306f LUKS2 \u3092\u660e\u793a\u3057\u3001\u53e4\u3044 LUKS1 \u3068\u6df7\u5728\u3057\u305f\u3068\u304d\u306b\u3082\u300c\u3053\u308c\u306f\u610f\u56f3\u3057\u3066\u65b0\u5f62\u5f0f\u3067\u4f5c\u3063\u305f\u300d\u3068\u3044\u3046\u8a18\u9332\u3092\u6b8b\u3059\u307b\u3046\u304c\u3088\u3044<a class=\"ref\" href=\"#ref10\">[10]<\/a>\u3002<\/p>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u521d\u671f\u751f\u6210\u3059\u308b\u57fa\u672c\u30b3\u30de\u30f3\u30c9\u306f luksFormat \u3067\u3042\u308b\u3002\u3053\u306e\u64cd\u4f5c\u306f\u78ba\u8a8d\u30b3\u30de\u30f3\u30c9\u3067\u306f\u306a\u304f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306b LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u4f5c\u6210\u3059\u308b\u7834\u58ca\u7684\u64cd\u4f5c\u3067\u3042\u308b\u3002\u5bfe\u8c61\u304c\u65e2\u5b58\u30c7\u30fc\u30bf\u3092\u542b\u3080\u30c7\u30a3\u30b9\u30af\u3084\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3067\u3042\u308c\u3070\u3001\u305d\u306e\u30c7\u30fc\u30bf\u306f\u901a\u5e38\u306e\u624b\u6bb5\u3067\u306f\u5229\u7528\u3067\u304d\u306a\u304f\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306f\u3001\u524d\u7ae0\u3067\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001\u5bb9\u91cf\u3001\u7269\u7406\u5a92\u4f53\u3001\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u72b6\u614b\u3092\u78ba\u8a8d\u3057\u3001\u521d\u671f\u5316\u3057\u3066\u3088\u3044\u5bfe\u8c61\u3060\u3068\u5224\u65ad\u3057\u305f\u5f8c\u306b\u3060\u3051\u5b9f\u884c\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksFormat --type luks2 \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u3067\u306f\u3001\/dev\/sdX \u306e\u90e8\u5206\u3092\u5b9f\u969b\u306e\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u307e\u305f\u306f\u5bfe\u8c61\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u306b\u7f6e\u304d\u63db\u3048\u308b\u3002\u3053\u3053\u3067 \/dev\/sdX \u306f\u8aac\u660e\u7528\u306e\u4eee\u540d\u3067\u3042\u308a\u3001\u305d\u306e\u307e\u307e\u5b9f\u884c\u3057\u3066\u3088\u3044\u540d\u524d\u3067\u306f\u306a\u3044\u3002\u30c7\u30a3\u30b9\u30af\u5168\u4f53\u3092\u6697\u53f7\u5316\u3059\u308b\u306a\u3089 \/dev\/sdb \u306e\u3088\u3046\u306a\u30c7\u30a3\u30b9\u30af\u540d\u3092\u5bfe\u8c61\u306b\u3059\u308b\u5834\u5408\u304c\u3042\u308a\u3001\u65e2\u5b58\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092\u6697\u53f7\u5316\u3059\u308b\u306a\u3089 \/dev\/sdb1 \u306e\u3088\u3046\u306a\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u540d\u3092\u5bfe\u8c61\u306b\u3059\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u3069\u3061\u3089\u3092\u9078\u3076\u304b\u3067\u5f8c\u7d9a\u306e\u53f0\u5e33\u3001crypttab\u3001fstab\u3001\u5fa9\u65e7\u624b\u9806\u304c\u5909\u308f\u308b\u305f\u3081\u3001\u4f5c\u696d\u524d\u306b\u300c\u30c7\u30a3\u30b9\u30af\u5168\u4f53\u3092\u6697\u53f7\u5316\u3059\u308b\u306e\u304b\u300d\u300c\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092\u6697\u53f7\u5316\u3059\u308b\u306e\u304b\u300d\u3092\u660e\u78ba\u306b\u3059\u308b\u3002<\/p>\n<p>luksFormat \u3092\u5b9f\u884c\u3059\u308b\u3068\u3001\u5bfe\u8a71\u5f0f\u3067\u78ba\u8a8d\u3092\u6c42\u3081\u3089\u308c\u3001\u521d\u671f\u89e3\u9664\u7528\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u5165\u529b\u3092\u6c42\u3081\u3089\u308c\u308b\u3002\u3053\u3053\u3067\u5165\u529b\u3057\u305f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306f\u3001LUKS \u306e\u6700\u521d\u306e key slot \u306b\u767b\u9332\u3055\u308c\u308b\u3002key slot \u306f\u3001\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u672c\u4f53\u3092\u76f4\u63a5\u8868\u3059\u3082\u306e\u3067\u306f\u306a\u304f\u3001\u540c\u3058\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u305f\u3081\u306e\u89e3\u9664\u5165\u53e3\u3067\u3042\u308b\u3002\u3064\u307e\u308a\u3001\u521d\u671f\u751f\u6210\u76f4\u5f8c\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306f\u3001\u5c11\u306a\u304f\u3068\u3082 1 \u3064\u306e\u89e3\u9664\u5165\u53e3\u3092\u6301\u3064\u3002\u901a\u5e38\u904b\u7528\u3067 keyfile \u3092\u4f7f\u3046\u5834\u5408\u3067\u3082\u3001\u521d\u671f\u6bb5\u968e\u3067\u306f\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092 1 \u3064\u767b\u9332\u3057\u3066\u304a\u304f\u3068\u3001keyfile \u306e\u55aa\u5931\u3084\u8d77\u52d5\u8a2d\u5b9a\u306e\u7834\u640d\u306b\u5099\u3048\u305f\u624b\u52d5\u89e3\u9664\u7d4c\u8def\u3092\u6b8b\u305b\u308b\u3002<\/p>\n<p>\u521d\u671f\u751f\u6210\u5f8c\u306f\u3001\u4f5c\u6210\u3055\u308c\u305f LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u4f7f\u3046\u30b3\u30de\u30f3\u30c9\u306f luksDump \u3067\u3042\u308b\u3002luksDump \u306f\u30c7\u30fc\u30bf\u3092\u958b\u304f\u64cd\u4f5c\u3067\u306f\u306a\u304f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u306b\u8a18\u9332\u3055\u308c\u305f\u5f62\u5f0f\u3001UUID\u3001\u6697\u53f7\u65b9\u5f0f\u3001key slot\u3001KDF \u306a\u3069\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306e\u60c5\u5831\u78ba\u8a8d\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001Version \u304c 2 \u3067\u3042\u308a\u3001UUID \u304c\u8868\u793a\u3055\u308c\u3001\u5c11\u306a\u304f\u3068\u3082 1 \u3064\u306e key slot \u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>luksDump \u306e\u7d50\u679c\u3067\u306f\u3001\u307e\u305a Version \u3092\u898b\u308b\u3002\u65b0\u898f\u4e3b\u7cfb\u3068\u3057\u3066 LUKS2 \u3092\u610f\u56f3\u3057\u305f\u5834\u5408\u3001\u3053\u3053\u304c 2 \u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u6b21\u306b UUID \u3092\u898b\u308b\u3002\u3053\u306e UUID \u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u8b58\u5225\u3059\u308b\u305f\u3081\u306e\u91cd\u8981\u306a\u60c5\u5831\u3067\u3042\u308a\u3001\u5f8c\u3067 crypttab \u3084\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b\u3002\u3055\u3089\u306b Keyslots \u3092\u898b\u3066\u3001\u6709\u52b9\u306a key slot \u304c\u3044\u304f\u3064\u3042\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u521d\u671f\u751f\u6210\u76f4\u5f8c\u306b 1 \u3064\u3060\u3051\u6709\u52b9\u3067\u3042\u308c\u3070\u3001\u901a\u5e38\u306f\u521d\u671f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u7528\u306e\u89e3\u9664\u5165\u53e3\u3060\u3051\u304c\u5b58\u5728\u3057\u3066\u3044\u308b\u72b6\u614b\u3067\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u78ba\u8a8d\u9805\u76ee<\/th>\n<th>\u671f\u5f85\u3055\u308c\u308b\u72b6\u614b<\/th>\n<th>\u610f\u5473<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Version<\/td>\n<td>2 \u3068\u8868\u793a\u3055\u308c\u308b\u3002<\/td>\n<td>LUKS2 \u3068\u3057\u3066\u4f5c\u6210\u3067\u304d\u3066\u3044\u308b\u3053\u3068\u3092\u793a\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>UUID<\/td>\n<td>LUKS UUID \u304c\u8868\u793a\u3055\u308c\u308b\u3002<\/td>\n<td>crypttab \u3084\u53f0\u5e33\u3067\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u8b58\u5225\u3059\u308b\u305f\u3081\u306b\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>Data segments<\/td>\n<td>crypt segment \u304c\u8868\u793a\u3055\u308c\u308b\u3002<\/td>\n<td>\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u9818\u57df\u304c\u5b9a\u7fa9\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u793a\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>Keyslots<\/td>\n<td>\u5c11\u306a\u304f\u3068\u3082 1 \u3064\u306e key slot \u304c\u6709\u52b9\u3067\u3042\u308b\u3002<\/td>\n<td>\u89e3\u9664\u5165\u53e3\u304c\u5b58\u5728\u3057\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3051\u308b\u72b6\u614b\u3067\u3042\u308b\u3053\u3068\u3092\u793a\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>PBKDF<\/td>\n<td>Argon2id \u306a\u3069\u306e KDF \u304c\u8868\u793a\u3055\u308c\u308b\u3002<\/td>\n<td>\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304b\u3089\u89e3\u9664\u7528\u306e\u9375\u6750\u6599\u3092\u5c0e\u51fa\u3059\u308b\u65b9\u5f0f\u3092\u793a\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u6642\u70b9\u3067\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b\u3079\u304d\u60c5\u5831\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001LUKS UUID\u3001LUKS version\u3001\u6697\u53f7\u65b9\u5f0f\u3001KDF\u3001\u6709\u52b9\u306a key slot\u3001\u521d\u671f\u751f\u6210\u65e5\u3067\u3042\u308b\u3002\u521d\u671f\u751f\u6210\u306f\u4e00\u5ea6\u5b9f\u884c\u3059\u308c\u3070\u7d42\u308f\u308a\u3067\u306f\u306a\u3044\u3002\u5f8c\u7d9a\u306e keyfile \u767b\u9332\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u8ffd\u52a0\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001crypttab \u767b\u9332\u3001fstab \u767b\u9332\u3001\u30de\u30a6\u30f3\u30c8\u78ba\u8a8d\u3001\u5fa9\u65e7\u78ba\u8a8d\u306e\u57fa\u6e96\u70b9\u306b\u306a\u308b\u305f\u3081\u3001\u4f5c\u6210\u76f4\u5f8c\u306e\u72b6\u614b\u3092\u8a18\u9332\u3057\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<h3>3.1 keyfile \u3092\u4f7f\u3046\u521d\u671f\u8a2d\u8a08<\/h3>\n<p>\u30b5\u30fc\u30d0\u30fc\u3084\u81ea\u52d5\u30de\u30a6\u30f3\u30c8\u69cb\u6210\u3067\u306f\u3001\u6bce\u56de\u4eba\u9593\u304c\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\u3059\u308b\u306e\u3067\u306f\u306a\u304f\u3001keyfile \u3092\u89e3\u9664\u624b\u6bb5\u306b\u3059\u308b\u5834\u5408\u304c\u3042\u308b\u3002keyfile \u306f\u3001\u4eba\u9593\u304c\u899a\u3048\u308b\u6587\u5b57\u5217\u3067\u306f\u306a\u304f\u3001\u5341\u5206\u306a\u4e71\u6570\u3067\u751f\u6210\u3057\u305f\u30d0\u30a4\u30c8\u5217\u3067\u3042\u308b\u3002\u305f\u3068\u3048\u3070 32 byte \u306e keyfile \u306f 256 bit \u306e\u79d8\u5bc6\u60c5\u5831\u3067\u3042\u308a\u3001\u30e9\u30f3\u30c0\u30e0\u751f\u6210\u3055\u308c\u3066\u3044\u308c\u3070\u77ed\u3044\u4eba\u9593\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3088\u308a\u5f37\u3044\u3002\u305f\u3060\u3057\u3001keyfile \u306f\u5931\u308f\u308c\u308b\u3068\u958b\u3051\u306a\u304f\u306a\u308a\u3001\u6f0f\u6d29\u3059\u308b\u3068\u958b\u3051\u3089\u308c\u308b\u305f\u3081\u3001\u4fdd\u5168\u5bfe\u8c61\u3067\u3042\u308a\u540c\u6642\u306b\u6a5f\u5fae\u60c5\u5831\u3067\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001keyfile \u3092\u4f7f\u3046\u5834\u5408\u306f\u3001\u4f5c\u6210\u3001\u6a29\u9650\u8a2d\u5b9a\u3001LUKS \u3078\u306e\u767b\u9332\u3001\u89e3\u9664\u78ba\u8a8d\u3001\u53f0\u5e33\u8a18\u9332\u3092 1 \u3064\u306e\u624b\u9806\u3068\u3057\u3066\u6271\u3046\u3002<\/p>\n<p>\u672c\u7a3f\u306e\u4f8b\u3067\u306f\u3001LVM \u5c02\u7528\u306b\u898b\u3048\u308b\u540d\u79f0\u3067\u306f\u306a\u304f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u7528\u9014\u306b\u5bfe\u5fdc\u3059\u308b\u4e2d\u7acb\u7684\u306a\u4f8b\u3068\u3057\u3066 \/etc\/cryptsetup-keys\/crypt_name.key \u3092\u7528\u3044\u308b\u3002\u5b9f\u904b\u7528\u3067\u306f\u3001\u65e2\u5b58\u74b0\u5883\u306e keyfile \u540d\u3092\u305d\u306e\u307e\u307e\u4f7f\u3063\u3066\u3088\u3044\u304c\u3001\u30d5\u30a1\u30a4\u30eb\u540d\u304b\u3089\u5bfe\u8c61\u3084\u7528\u9014\u304c\u5206\u304b\u308b\u3053\u3068\u3001\u8907\u6570\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u8aa4\u7528\u3057\u306a\u3044\u3053\u3068\u3001\u53f0\u5e33\u4e0a\u3067\u5bfe\u8c61 LUKS UUID \u3068\u5bfe\u5fdc\u4ed8\u3051\u3089\u308c\u308b\u3053\u3068\u3092\u512a\u5148\u3059\u308b\u3002<\/p>\n<p>\u307e\u305a keyfile \u3092\u751f\u6210\u3059\u308b\u3002\u6b21\u306e\u30b3\u30de\u30f3\u30c9\u306f\u3001\/dev\/urandom \u304b\u3089 32 byte \u306e\u4e71\u6570\u3092\u8aad\u307f\u51fa\u3057\u3001\/etc\/cryptsetup-keys\/crypt_name.key \u3078\u4fdd\u5b58\u3059\u308b\u3002\u3053\u3053\u3067\u4f5c\u6210\u3055\u308c\u308b\u30d5\u30a1\u30a4\u30eb\u306f\u901a\u5e38\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3067\u306f\u306a\u304f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u305f\u3081\u306e\u79d8\u5bc6\u60c5\u5831\u3067\u3042\u308b\u3002\u65e2\u306b\u540c\u540d\u306e keyfile \u304c\u5b58\u5728\u3059\u308b\u74b0\u5883\u3067\u306f\u4e0a\u66f8\u304d\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002\u65e2\u5b58\u904b\u7528\u3067\u4f7f\u308f\u308c\u3066\u3044\u308b keyfile \u3092\u4e0a\u66f8\u304d\u3059\u308b\u3068\u3001\u305d\u306e keyfile \u306b\u4f9d\u5b58\u3057\u3066\u3044\u308b\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3051\u306a\u304f\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mkdir -p \/etc\/cryptsetup-keys<br \/>\nsudo dd if=\/dev\/urandom of=\/etc\/cryptsetup-keys\/crypt_name.key bs=32 count=1<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u6b21\u306b\u3001keyfile \u306e\u6240\u6709\u8005\u3068\u6a29\u9650\u3092\u8a2d\u5b9a\u3059\u308b\u3002\u6240\u6709\u8005\u306f root:root \u3068\u3057\u3001\u6a29\u9650\u306f 0400 \u3068\u3059\u308b\u3002\u3053\u308c\u306f\u3001root \u3060\u3051\u304c\u8aad\u307f\u53d6\u308c\u308b\u72b6\u614b\u306b\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002keyfile \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u89e3\u9664\u60c5\u5831\u305d\u306e\u3082\u306e\u306a\u306e\u3067\u3001\u4e00\u822c\u30e6\u30fc\u30b6\u30fc\u304b\u3089\u8aad\u3081\u308b\u72b6\u614b\u306b\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002\u671f\u5f85\u3055\u308c\u308b\u72b6\u614b\u306f\u3001\u6240\u6709\u8005\u304c root\u3001\u30b0\u30eb\u30fc\u30d7\u304c root\u3001\u8aad\u307f\u53d6\u308a\u6a29\u9650\u304c root \u306e\u307f\u306b\u9650\u5b9a\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo chown root:root \/etc\/cryptsetup-keys\/crypt_name.key<br \/>\nsudo chmod 0400 \/etc\/cryptsetup-keys\/crypt_name.key<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u6a29\u9650\u8a2d\u5b9a\u5f8c\u3001keyfile \u306e\u30b5\u30a4\u30ba\u3068\u8b58\u5225\u7528\u30cf\u30c3\u30b7\u30e5\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u308b\u306e\u306f\u3001keyfile \u306e\u4e2d\u8eab\u305d\u306e\u3082\u306e\u3067\u306f\u306a\u3044\u3002\u4e2d\u8eab\u3092\u8868\u793a\u3059\u308b\u5fc5\u8981\u306f\u306a\u304f\u3001\u3080\u3057\u308d\u8868\u793a\u3059\u3079\u304d\u3067\u306f\u306a\u3044\u3002\u78ba\u8a8d\u3059\u3079\u304d\u3053\u3068\u306f\u3001\u30b5\u30a4\u30ba\u304c\u610f\u56f3\u3069\u304a\u308a 32 byte \u3067\u3042\u308b\u3053\u3068\u3001\u5f8c\u3067\u540c\u3058 keyfile \u304b\u3069\u3046\u304b\u3092\u7167\u5408\u3067\u304d\u308b\u3088\u3046\u306b\u30cf\u30c3\u30b7\u30e5\u3092\u8a18\u9332\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo wc -c \/etc\/cryptsetup-keys\/crypt_name.key<br \/>\nsudo sha256sum \/etc\/cryptsetup-keys\/crypt_name.key<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>wc -c \u306e\u7d50\u679c\u304c 32 \u3067\u3042\u308c\u3070\u300132 byte \u306e keyfile \u3068\u3057\u3066\u4f5c\u6210\u3055\u308c\u3066\u3044\u308b\u3002sha256sum \u306e\u7d50\u679c\u306f\u3001keyfile \u672c\u4f53\u3092\u53f0\u5e33\u3078\u8cbc\u308b\u305f\u3081\u3067\u306f\u306a\u304f\u3001\u5c06\u6765\u300c\u3053\u306e\u30d5\u30a1\u30a4\u30eb\u306f\u5f53\u6642\u8a18\u9332\u3057\u305f keyfile \u3068\u540c\u3058\u304b\u300d\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306b\u8a18\u9332\u3059\u308b\u3002keyfile \u306e\u30cf\u30c3\u30b7\u30e5\u306f keyfile \u305d\u306e\u3082\u306e\u3067\u306f\u306a\u3044\u304c\u3001\u904b\u7528\u4e0a\u306e\u8b58\u5225\u60c5\u5831\u3068\u3057\u3066\u6271\u3044\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3059\u308b\u3002<\/p>\n<p>\u6b21\u306b\u3001\u4f5c\u6210\u3057\u305f keyfile \u3092 LUKS \u30c7\u30d0\u30a4\u30b9\u3078\u8ffd\u52a0\u3059\u308b\u3002\u3053\u3053\u3067\u4f7f\u3046\u30b3\u30de\u30f3\u30c9\u306f luksAddKey \u3067\u3042\u308b\u3002luksAddKey \u306f\u3001\u65e2\u5b58\u306e\u6709\u52b9\u306a\u89e3\u9664\u624b\u6bb5\u3067\u8a8d\u8a3c\u3057\u305f\u3046\u3048\u3067\u3001\u65b0\u3057\u3044\u89e3\u9664\u5165\u53e3\u3092 key slot \u3068\u3057\u3066\u8ffd\u52a0\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u6b21\u306e\u30b3\u30de\u30f3\u30c9\u3067\u306f\u3001\u65b0\u3057\u3044\u89e3\u9664\u624b\u6bb5\u3068\u3057\u3066 \/etc\/cryptsetup-keys\/crypt_name.key \u3092\u767b\u9332\u3059\u308b\u3002\u5b9f\u884c\u6642\u306b\u306f\u3001\u65e2\u5b58\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u5165\u529b\u3092\u6c42\u3081\u3089\u308c\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u3053\u308c\u306f\u3001\u6b63\u5f53\u306a\u7ba1\u7406\u8005\u3060\u3051\u304c key slot \u3092\u8ffd\u52a0\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksAddKey \/dev\/sdX \/etc\/cryptsetup-keys\/crypt_name.key<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>keyfile \u3092\u8ffd\u52a0\u3057\u305f\u5f8c\u306f\u3001keyfile \u3067\u5b9f\u969b\u306b\u89e3\u9664\u3067\u304d\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u306f open &#8211;test-passphrase \u3092\u4f7f\u3046\u3002\u3053\u308c\u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u5b9f\u969b\u306b \/dev\/mapper \u4ee5\u4e0b\u3078\u958b\u304f\u306e\u3067\u306f\u306a\u304f\u3001\u6307\u5b9a\u3057\u305f\u89e3\u9664\u624b\u6bb5\u3067\u958b\u3051\u308b\u304b\u3060\u3051\u3092\u78ba\u8a8d\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u30a8\u30e9\u30fc\u306a\u304f\u7d42\u4e86\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u30a8\u30e9\u30fc\u304c\u51fa\u308b\u5834\u5408\u306f\u3001keyfile \u304c\u767b\u9332\u3055\u308c\u3066\u3044\u306a\u3044\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304c\u9055\u3046\u3001keyfile \u306e\u30d1\u30b9\u304c\u9055\u3046\u3001\u307e\u305f\u306f\u6a29\u9650\u3084\u8aad\u307f\u53d6\u308a\u6761\u4ef6\u306b\u554f\u984c\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u6700\u5f8c\u306b\u3001luksDump \u3067 key slot \u304c\u5897\u3048\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u521d\u671f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3060\u3051\u306e\u72b6\u614b\u3067\u306f\u6709\u52b9 key slot \u304c 1 \u3064\u3060\u3063\u305f\u3082\u306e\u304c\u3001keyfile \u3092\u8ffd\u52a0\u3059\u308b\u3068\u6709\u52b9 key slot \u304c\u5897\u3048\u308b\u3002\u3053\u3053\u3067\u91cd\u8981\u306a\u306e\u306f\u3001key slot \u306e\u6570\u304c\u5897\u3048\u305f\u3053\u3068\u3060\u3051\u3067\u306f\u306a\u304f\u3001\u3069\u306e slot \u304c\u901a\u5e38\u904b\u7528\u7528\u306e keyfile \u3067\u3001\u3069\u306e slot \u304c\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306a\u306e\u304b\u3092\u53f0\u5e33\u5316\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002LUKS \u306e key slot \u306f\u81ea\u52d5\u7684\u306b\u7528\u9014\u540d\u3092\u6301\u3064\u308f\u3051\u3067\u306f\u306a\u3044\u305f\u3081\u3001\u904b\u7528\u5074\u304c\u610f\u5473\u3092\u8a18\u9332\u3057\u306a\u3051\u308c\u3070\u3001\u6570\u5e74\u5f8c\u306b\u306f\u3069\u306e\u89e3\u9664\u5165\u53e3\u3092\u6b8b\u3059\u3079\u304d\u304b\u5224\u65ad\u3067\u304d\u306a\u304f\u306a\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<table>\n<thead>\n<tr>\n<th>\u9805\u76ee<\/th>\n<th>\u8a18\u9332\u3059\u308b\u5185\u5bb9<\/th>\n<th>\u76ee\u7684<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>keyfile path<\/td>\n<td>\/etc\/cryptsetup-keys\/crypt_name.key \u306e\u3088\u3046\u306a\u5b9f\u969b\u306e\u4fdd\u5b58\u5834\u6240\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u901a\u5e38\u904b\u7528\u3067\u3069\u306e\u89e3\u9664\u60c5\u5831\u3092\u4f7f\u3046\u304b\u3092\u660e\u78ba\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>keyfile size<\/td>\n<td>32 byte \u306a\u3069\u306e\u30d5\u30a1\u30a4\u30eb\u30b5\u30a4\u30ba\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u610f\u56f3\u3057\u305f\u9577\u3055\u306e keyfile \u304c\u7dad\u6301\u3055\u308c\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>owner and mode<\/td>\n<td>root:root\u30010400 \u306a\u3069\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>keyfile \u304c\u4e0d\u7528\u610f\u306b\u8aad\u307e\u308c\u306a\u3044\u72b6\u614b\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>sha256<\/td>\n<td>sha256sum \u306e\u5024\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5c06\u6765\u3001\u540c\u3058 keyfile \u304b\u3069\u3046\u304b\u3092\u7167\u5408\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>key slot<\/td>\n<td>keyfile \u306b\u5bfe\u5fdc\u3059\u308b key slot \u756a\u53f7\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u4e0d\u8981 slot \u524a\u9664\u6642\u306b\u901a\u5e38\u904b\u7528\u7528\u306e\u89e3\u9664\u5165\u53e3\u3092\u8aa4\u3063\u3066\u6d88\u3055\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>keyfile \u3092\u4f7f\u3046\u521d\u671f\u8a2d\u8a08\u3067\u306f\u3001\u901a\u5e38\u904b\u7528\u3068\u975e\u5e38\u6642\u306e\u89e3\u9664\u7d4c\u8def\u3092\u5206\u3051\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3042\u308b\u3002\u901a\u5e38\u904b\u7528\u3067\u306f keyfile \u3092\u4f7f\u3063\u3066\u81ea\u52d5\u89e3\u9664\u3059\u308b\u3002\u975e\u5e38\u6642\u306b\u306f\u9577\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u624b\u52d5\u89e3\u9664\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u3002\u3053\u306e\u3088\u3046\u306b 2 \u7cfb\u7d71\u306e\u89e3\u9664\u5165\u53e3\u3092\u610f\u56f3\u7684\u306b\u6b8b\u3057\u3066\u304a\u3051\u3070\u3001keyfile \u306e\u55aa\u5931\u3001\u8d77\u52d5\u8a2d\u5b9a\u306e\u7834\u640d\u3001crypttab \u306e\u8aa4\u8a2d\u5b9a\u3001initramfs \u306e\u554f\u984c\u304c\u8d77\u304d\u305f\u5834\u5408\u3067\u3082\u3001\u624b\u52d5\u3067\u5fa9\u65e7\u3067\u304d\u308b\u53ef\u80fd\u6027\u3092\u6b8b\u305b\u308b\u3002\u4e00\u65b9\u3001\u7528\u9014\u4e0d\u660e\u306e\u53e4\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba slot \u3092\u6b8b\u3057\u7d9a\u3051\u308b\u3068\u3001\u89e3\u9664\u5165\u53e3\u304c\u5897\u3048\u3001\u7ba1\u7406\u4e0d\u80fd\u306b\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u521d\u671f\u751f\u6210\u306e\u6642\u70b9\u304b\u3089\u3001\u901a\u5e38\u904b\u7528\u7528 keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u524a\u9664\u5bfe\u8c61\u306e\u65e7 slot \u3092\u533a\u5225\u3057\u3066\u7ba1\u7406\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<hr>\n<h2>4. \u521d\u671f\u751f\u6210\u5f8c\u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3059\u308b<\/h2>\n<p>\u3053\u306e\u7ae0\u3067\u6271\u3046\u306e\u306f\u3001luksFormat \u304c\u5b8c\u4e86\u3057\u305f\u76f4\u5f8c\u306b\u4e00\u5ea6\u3060\u3051\u5b9f\u65bd\u3059\u308b\u521d\u671f\u5316\u624b\u9806\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304d\u3001\u5fa9\u53f7\u5f8c\u306b\u73fe\u308c\u308b mapper device \u306e\u4e0a\u3078\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3057\u3001\u521d\u56de\u30de\u30a6\u30f3\u30c8\u307e\u3067\u78ba\u8a8d\u3059\u308b\u3002\u3053\u308c\u306f\u65e5\u5e38\u7684\u306a\u901a\u5e38\u904b\u7528\u624b\u9806\u3067\u306f\u306a\u3044\u3002\u7279\u306b mkfs.ext4 \u306f\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u308a\u76f4\u3059\u7834\u58ca\u7684\u64cd\u4f5c\u3067\u3042\u308b\u305f\u3081\u3001\u901a\u5e38\u904b\u7528\u6642\u306b\u7e70\u308a\u8fd4\u3057\u5b9f\u884c\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002<\/p>\n<p>luksFormat \u5f8c\u306e \/dev\/sdX \u306f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u6301\u3064\u6697\u53f7\u5316\u30d6\u30ed\u30c3\u30af\u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308a\u3001\u305d\u306e\u307e\u307e\u901a\u5e38\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3068\u3057\u3066\u4f7f\u3046\u3053\u3068\u306f\u3067\u304d\u306a\u3044\u3002\u307e\u305a cryptsetup open \u306b\u3088\u3063\u3066\u3001\u6697\u53f7\u5316\u3055\u308c\u305f block device \u3092\u5fa9\u53f7\u53ef\u80fd\u306a mapper device \u3068\u3057\u3066 \/dev\/mapper \u4ee5\u4e0b\u306b\u4f5c\u6210\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002cryptsetup-open \u306e man page \u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3044\u3066 device mapping \u3092\u4f5c\u308b action \u3068\u3057\u3066 open \u3092\u8aac\u660e\u3057\u3066\u3044\u308b<a class=\"ref\" href=\"#ref11\">[11]<\/a>\u3002\u3053\u3053\u3067\u6307\u5b9a\u3059\u308b mapper \u540d\u306f\u3001\u5f8c\u7d9a\u306e mkfs\u3001mount\u3001fstab\u3001\u53f0\u5e33\u3067\u4f7f\u3046\u904b\u7528\u4e0a\u306e\u540d\u524d\u306b\u306a\u308b\u305f\u3081\u3001crypt_name \u306e\u3088\u3046\u306a\u4e00\u6642\u540d\u3067\u306f\u306a\u304f\u3001\u7528\u9014\u306b\u5fdc\u3058\u305f\u5b89\u5b9a\u3057\u305f\u540d\u524d\u3092\u4ed8\u3051\u308b\u306e\u304c\u3088\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306e\u76ee\u7684\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u5fa9\u53f7\u3057\u3001\/dev\/mapper\/crypt_name \u3068\u3044\u3046\u64cd\u4f5c\u5bfe\u8c61\u3092\u4f5c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u30b3\u30de\u30f3\u30c9\u304c\u30a8\u30e9\u30fc\u306a\u304f\u7d42\u4e86\u3057\u3001\/dev\/mapper\/crypt_name \u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067 \/dev\/sdX \u306f\u6697\u53f7\u5316\u6e08\u307f\u306e LUKS \u30c7\u30d0\u30a4\u30b9\u3001crypt_name \u306f mapper \u540d\u3067\u3042\u308b\u3002\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u8aa4\u308b\u3068\u5225\u306e LUKS \u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3053\u3046\u3068\u3059\u308b\u305f\u3081\u3001\u5b9f\u884c\u524d\u306b\u306f\u524d\u7ae0\u306e\u78ba\u8a8d\u624b\u9806\u3067\u5bfe\u8c61\u3092\u78ba\u5b9a\u3057\u3066\u304a\u304f\u3002<\/p>\n<p>\u4e0a\u306e\u4f8b\u306f keyfile \u904b\u7528\u306e\u5834\u5408\u3067\u3042\u308b\u3002\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u307f\u3067\u904b\u7528\u3059\u308b\u5834\u5408\u306f &#8211;key-file \/etc\/cryptsetup-keys\/crypt_name.key \u3092\u6307\u5b9a\u305b\u305a\u3001sudo cryptsetup open \/dev\/sdX crypt_name \u306e\u3088\u3046\u306b\u5b9f\u884c\u3057\u3001\u5bfe\u8a71\u5f0f\u3067\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\u3059\u308b\u3002keyfile \u3092\u4f7f\u3046\u304b\u3001\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u4f7f\u3046\u304b\u306f\u89e3\u9664\u624b\u6bb5\u306e\u9055\u3044\u3067\u3042\u308a\u3001\u5fa9\u53f7\u5f8c\u306b\u4f5c\u6210\u3055\u308c\u308b mapper device \u306e\u5f79\u5272\u306f\u540c\u3058\u3067\u3042\u308b\u3002<\/p>\n<p>mapper device \u304c\u4f5c\u6210\u3055\u308c\u305f\u3089\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3059\u308b\u3002\u3053\u3053\u3067\u91cd\u8981\u306a\u306e\u306f\u3001mkfs.ext4 \u306e\u5bfe\u8c61\u304c\u6697\u53f7\u5316\u524d\u306e \/dev\/sdX \u3067\u306f\u306a\u304f\u3001\u5fa9\u53f7\u5f8c\u306e \/dev\/mapper\/crypt_name \u3067\u3042\u308b\u3053\u3068\u3060\u3002mke2fs \u306f ext \u7cfb\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3059\u308b\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308a\u3001\u6697\u53f7\u5316\u305d\u306e\u3082\u306e\u3067\u306f\u306a\u304f\u3001\u5fa9\u53f7\u5f8c\u306e\u30d6\u30ed\u30c3\u30af\u30c7\u30d0\u30a4\u30b9\u4e0a\u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u308b\u6bb5\u968e\u3067\u4f7f\u3046<a class=\"ref\" href=\"#ref12\">[12]<\/a>\u3002\u3053\u306e\u64cd\u4f5c\u306f\u521d\u671f\u5316\u3067\u3042\u308a\u3001\u65e2\u5b58\u30c7\u30fc\u30bf\u304c\u3042\u308b\u9818\u57df\u306b\u5bfe\u3057\u3066\u5b9f\u884c\u3059\u308b\u3068\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u308a\u76f4\u3057\u3066\u3057\u307e\u3046\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mkfs.ext4 \/dev\/mapper\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306e\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/crypt_name \u4e0a\u306b ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u5b9f\u884c\u5f8c\u3001\u3053\u306e mapper device \u306f\u901a\u5e38\u306e ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3068\u3057\u3066\u30de\u30a6\u30f3\u30c8\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u308b\u3002\u9006\u306b\u3001\u3053\u3053\u3067\u8aa4\u3063\u3066 \/dev\/sdX \u306b\u5bfe\u3057\u3066 mkfs.ext4 \u3092\u5b9f\u884c\u3059\u308b\u3068\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3084\u6697\u53f7\u5316\u69cb\u9020\u3092\u7834\u58ca\u3059\u308b\u5371\u967a\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001mkfs.ext4 \u306e\u5bfe\u8c61\u306f\u5fc5\u305a \/dev\/mapper \u4ee5\u4e0b\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<p>\u6b21\u306b\u3001\u521d\u56de\u30de\u30a6\u30f3\u30c8\u7528\u306e\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3092\u4f5c\u6210\u3059\u308b\u3002\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u306f\u3001\u5fa9\u53f7\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30c4\u30ea\u30fc\u4e0a\u306e\u3069\u3053\u306b\u63a5\u7d9a\u3059\u308b\u304b\u3092\u793a\u3059\u5834\u6240\u3067\u3042\u308b\u3002\u3053\u308c\u306f\u6697\u53f7\u5316\u51e6\u7406\u3067\u306f\u306a\u304f\u3001Linux \u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u904b\u7528\u4e0a\u306e\u6e96\u5099\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mkdir -p \/mnt\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306e\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/crypt_name \u3068\u3044\u3046\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u304c\u5b58\u5728\u3059\u308b\u72b6\u614b\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3059\u3067\u306b\u5b58\u5728\u3057\u3066\u3044\u308b\u5834\u5408\u3067\u3082 -p \u306b\u3088\u308a\u30a8\u30e9\u30fc\u306b\u306a\u3089\u306a\u3044\u3002\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u540d\u306f mapper \u540d\u3068\u5bfe\u5fdc\u3055\u305b\u308b\u3068\u53f0\u5e33\u5316\u3057\u3084\u3059\u3044\u304c\u3001\u5b9f\u904b\u7528\u3067\u306f \/mnt\/disk1\u3001\/mnt\/backup\u3001\/srv\/data \u306e\u3088\u3046\u306b\u7528\u9014\u304c\u5206\u304b\u308b\u540d\u524d\u3092\u4f7f\u3046\u307b\u3046\u304c\u3088\u3044\u3002<\/p>\n<p>\u6700\u5f8c\u306b\u3001\u4f5c\u6210\u3057\u305f ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002\u3053\u3053\u3067\u3082\u5bfe\u8c61\u306f \/dev\/mapper\/crypt_name \u3067\u3042\u308b\u3002\u30de\u30a6\u30f3\u30c8\u306b\u6210\u529f\u3059\u308c\u3070\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304d\u3001\u5fa9\u53f7\u5f8c\u306e\u9818\u57df\u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3057\u3001\u305d\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u5229\u7528\u53ef\u80fd\u306b\u3059\u308b\u3068\u3053\u308d\u307e\u3067\u78ba\u8a8d\u3067\u304d\u305f\u3053\u3068\u306b\u306a\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mount \/dev\/mapper\/crypt_name \/mnt\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306e\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/crypt_name \u4ee5\u4e0b\u306b\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u3081\u308b\u72b6\u614b\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u521d\u671f\u751f\u6210\u624b\u9806\u3068\u3057\u3066\u306f\u3001\u3053\u3053\u3067\u7c21\u5358\u306a\u8aad\u307f\u66f8\u304d\u78ba\u8a8d\u3092\u884c\u3044\u3001\u305d\u306e\u5f8c\u306b sync\u3001umount\u3001cryptsetup close \u307e\u3067\u5b9f\u65bd\u3057\u3066\u3001\u958b\u304f\u3001\u4f7f\u3046\u3001\u9589\u3058\u308b\u6d41\u308c\u304c\u6210\u7acb\u3059\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u305f\u3060\u3057\u3001mkfs.ext4 \u306f\u521d\u56de\u3060\u3051\u306e\u64cd\u4f5c\u3067\u3042\u308a\u3001\u6b21\u7ae0\u306e\u901a\u5e38\u904b\u7528\u3067\u306f\u5b9f\u884c\u3057\u306a\u3044\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6bb5\u968e<\/th>\n<th>\u30b3\u30de\u30f3\u30c9\u306e\u5f79\u5272<\/th>\n<th>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>open<\/td>\n<td>LUKS \u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304d\u3001\/dev\/mapper \u4ee5\u4e0b\u306b\u5fa9\u53f7\u5f8c\u306e\u64cd\u4f5c\u5bfe\u8c61\u3092\u4f5c\u308b\u3002<\/td>\n<td>\/dev\/mapper\/crypt_name \u304c\u4f5c\u6210\u3055\u308c\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>mkfs.ext4<\/td>\n<td>\u5fa9\u53f7\u5f8c\u306e mapper device \u4e0a\u306b ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u308b\u3002<\/td>\n<td>\/dev\/mapper\/crypt_name \u3092 ext4 \u3068\u3057\u3066\u5229\u7528\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>mkdir<\/td>\n<td>\u30de\u30a6\u30f3\u30c8\u5148\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u4f5c\u6210\u3059\u308b\u3002<\/td>\n<td>\/mnt\/crypt_name \u304c\u5b58\u5728\u3059\u308b\u72b6\u614b\u306b\u306a\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>mount<\/td>\n<td>\u5fa9\u53f7\u5f8c\u306e ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3078\u63a5\u7d9a\u3059\u308b\u3002<\/td>\n<td>\/mnt\/crypt_name \u4ee5\u4e0b\u3067\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u66f8\u304d\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u4f5c\u696d\u304c\u5b8c\u4e86\u3057\u305f\u3089\u3001\u4ee5\u5f8c\u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u300c\u4f5c\u6210\u6e08\u307f\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u6301\u3064 LUKS \u30c7\u30d0\u30a4\u30b9\u300d\u3068\u3057\u3066\u6271\u3046\u3002\u901a\u5e38\u904b\u7528\u3067\u5fc5\u8981\u306a\u306e\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304d\u3001\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3057\u3001\u4f5c\u696d\u5f8c\u306b\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3057\u3066\u9589\u3058\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u521d\u671f\u751f\u6210\u624b\u9806\u3068\u901a\u5e38\u904b\u7528\u624b\u9806\u3092\u6df7\u540c\u3059\u308b\u3068\u3001\u901a\u5e38\u904b\u7528\u4e2d\u306b\u8aa4\u3063\u3066 mkfs \u3092\u5b9f\u884c\u3059\u308b\u3088\u3046\u306a\u91cd\u5927\u4e8b\u6545\u306b\u3064\u306a\u304c\u308b\u3002<\/p>\n<hr>\n<h2>5. \u901a\u5e38\u904b\u7528\u3067\u306f open\u3001mount\u3001sync\u3001umount\u3001close \u3092\u56fa\u5b9a\u3059\u308b<\/h2>\n<p>\u3053\u306e\u7ae0\u3067\u6271\u3046\u306e\u306f\u3001\u3059\u3067\u306b LUKS \u5f62\u5f0f\u3067\u521d\u671f\u751f\u6210\u3055\u308c\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3082\u4f5c\u6210\u6e08\u307f\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u65e5\u5e38\u7684\u306b\u4f7f\u3046\u624b\u9806\u3067\u3042\u308b\u3002\u901a\u5e38\u904b\u7528\u3067\u306f\u3001mkfs.ext4 \u306f\u5b9f\u884c\u3057\u306a\u3044\u3002\u5b9f\u65bd\u3059\u308b\u306e\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u3001\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3001\u5fc5\u8981\u306a\u4f5c\u696d\u3092\u884c\u3046\u3001\u672a\u66f8\u304d\u8fbc\u307f\u30c7\u30fc\u30bf\u3092\u540c\u671f\u3059\u308b\u3001\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3001\u6700\u5f8c\u306b mapper device \u3092\u9589\u3058\u308b\u3001\u3068\u3044\u3046\u4e00\u9023\u306e\u6d41\u308c\u3067\u3042\u308b\u3002cryptsetup-close \u306f mapper device \u3092\u9589\u3058\u308b action \u3067\u3042\u308a\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e umount \u3068\u306f\u5225\u306e\u6bb5\u968e\u3067\u3042\u308b<a class=\"ref\" href=\"#ref13\">[13]<\/a>\u3002<\/p>\n<p>\u6700\u521d\u306b\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u3002\u3053\u306e\u64cd\u4f5c\u306f\u3001\u6697\u53f7\u5316\u3055\u308c\u305f \/dev\/sdX \u304b\u3089\u3001\u5fa9\u53f7\u5f8c\u306e \/dev\/mapper\/crypt_name \u3092\u4f5c\u308b\u6bb5\u968e\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u306f keyfile \u3092\u4f7f\u3046\u4f8b\u3092\u793a\u3057\u3066\u3044\u308b\u304c\u3001\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u904b\u7528\u306e\u5834\u5408\u306f &#8211;key-file \u3092\u4ed8\u3051\u305a\u306b\u5b9f\u884c\u3057\u3001\u5bfe\u8a71\u5f0f\u3067\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/crypt_name \u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e\u6642\u70b9\u3067\u306f\u3001\u307e\u3060\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3078\u63a5\u7d9a\u3057\u3066\u3044\u306a\u3044\u305f\u3081\u3001\u901a\u5e38\u306e\u30d5\u30a1\u30a4\u30eb\u64cd\u4f5c\u306f\u3067\u304d\u306a\u3044\u3002open \u306f\u6697\u53f7\u5316\u5c64\u3092\u958b\u304f\u64cd\u4f5c\u3067\u3042\u308a\u3001mount \u306f\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u3092\u63a5\u7d9a\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u3053\u306e 2 \u3064\u3092\u5206\u3051\u3066\u7406\u89e3\u3059\u308b\u3053\u3068\u304c\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u904b\u7528\u306e\u57fa\u672c\u306b\u306a\u308b\u3002<\/p>\n<p>\u6b21\u306b\u3001\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002\u3053\u3053\u3067\u306f\u3001\u521d\u671f\u751f\u6210\u6642\u306b\u4f5c\u6210\u6e08\u307f\u306e ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092 \/mnt\/crypt_name \u3078\u63a5\u7d9a\u3059\u308b\u3002\u901a\u5e38\u904b\u7528\u3067\u306f\u3001\/dev\/mapper\/crypt_name \u306b\u5bfe\u3057\u3066 mkfs.ext4 \u3092\u5b9f\u884c\u3057\u306a\u3044\u3002\u65e2\u306b\u3042\u308b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f7f\u3046\u3060\u3051\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mount \/dev\/mapper\/crypt_name \/mnt\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/crypt_name \u4ee5\u4e0b\u3067\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u3081\u308b\u72b6\u614b\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u30de\u30a6\u30f3\u30c8\u306b\u5931\u6557\u3059\u308b\u5834\u5408\u306f\u3001mapper \u540d\u304c\u9055\u3046\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u304c\u5b58\u5728\u3057\u306a\u3044\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u7834\u640d\u3057\u3066\u3044\u308b\u3001\u65e2\u306b\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3066\u3044\u308b\u3001\u6a29\u9650\u3084\u30c7\u30d0\u30a4\u30b9\u72b6\u614b\u306b\u554f\u984c\u304c\u3042\u308b\u3001\u3068\u3044\u3063\u305f\u539f\u56e0\u3092\u5207\u308a\u5206\u3051\u308b\u3002\u3053\u3053\u3067\u6697\u53f7\u5316\u306e\u554f\u984c\u3068\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u554f\u984c\u3092\u6df7\u540c\u3057\u306a\u3044\u3053\u3068\u304c\u91cd\u8981\u3067\u3042\u308b\u3002open \u306b\u6210\u529f\u3057\u3066 mount \u306b\u5931\u6557\u3059\u308b\u5834\u5408\u3001\u5c11\u306a\u304f\u3068\u3082 keyfile \u3084\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306b\u3088\u308b LUKS \u89e3\u9664\u306f\u6210\u529f\u3057\u3066\u304a\u308a\u3001\u554f\u984c\u306f\u305d\u306e\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u306b\u3042\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3002<\/p>\n<p>\u4f5c\u696d\u304c\u7d42\u308f\u3063\u305f\u3089\u3001\u672a\u66f8\u304d\u8fbc\u307f\u30c7\u30fc\u30bf\u3092\u30b9\u30c8\u30ec\u30fc\u30b8\u3078\u53cd\u6620\u3059\u308b\u3002sync \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u9589\u3058\u308b\u30b3\u30de\u30f3\u30c9\u3067\u306f\u306a\u3044\u3002\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3084\u30ab\u30fc\u30cd\u30eb\u306e\u30d0\u30c3\u30d5\u30a1\u306b\u6b8b\u3063\u3066\u3044\u308b\u66f8\u304d\u8fbc\u307f\u3092\u3001\u5b9f\u969b\u306e\u30b9\u30c8\u30ec\u30fc\u30b8\u3078\u53cd\u6620\u3055\u305b\u308b\u305f\u3081\u306e\u6bb5\u968e\u3067\u3042\u308b\u3002\u7279\u306b\u5916\u4ed8\u3051\u5a92\u4f53\u3001\u9577\u6642\u9593\u540c\u671f\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u96fb\u6e90\u65ad\u524d\u306e\u4f5c\u696d\u3067\u306f\u3001\u660e\u793a\u7684\u306b sync \u3092\u5165\u308c\u308b\u3053\u3068\u3067\u3001\u4f5c\u696d\u624b\u9806\u4e0a\u306e\u533a\u5207\u308a\u304c\u660e\u78ba\u306b\u306a\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sync<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>sync \u304c\u30a8\u30e9\u30fc\u306a\u304f\u7d42\u308f\u3063\u305f\u3089\u3001\u6b21\u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002umount \u306f\u3001\/mnt\/crypt_name \u306b\u63a5\u7d9a\u3055\u308c\u3066\u3044\u308b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u5207\u308a\u96e2\u3059\u64cd\u4f5c\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u5bfe\u8c61\u306b\u3059\u308b\u306e\u306f mapper device \u3067\u306f\u306a\u304f\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3067\u3042\u308b\u3002\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u3044\u305f\u307e\u307e\u306e\u30d7\u30ed\u30bb\u30b9\u304c\u3042\u308b\u5834\u5408\u3001umount \u306f\u5931\u6557\u3059\u308b\u3053\u3068\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo umount \/mnt\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/crypt_name \u304c\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3066\u3044\u306a\u3044\u72b6\u614b\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002umount \u304c\u6210\u529f\u3059\u308b\u3068\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u3068\u3057\u3066\u306f\u5229\u7528\u7d42\u4e86\u72b6\u614b\u306b\u306a\u308b\u3002\u3057\u304b\u3057\u3001\u3053\u306e\u6642\u70b9\u3067\u3082 \/dev\/mapper\/crypt_name \u306f\u307e\u3060\u5b58\u5728\u3057\u3066\u3044\u308b\u3002\u3064\u307e\u308a\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306f\u958b\u3044\u305f\u307e\u307e\u3067\u3042\u308a\u3001\u6700\u5f8c\u306b cryptsetup close \u306b\u3088\u3063\u3066 mapper device \u3092\u9589\u3058\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup close crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>cryptsetup close \u306e\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/crypt_name \u304c\u6d88\u3048\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092 mount \u3057\u305f\u307e\u307e close \u3057\u3088\u3046\u3068\u3057\u3066\u3082\u5931\u6557\u3059\u308b\u305f\u3081\u3001\u9806\u5e8f\u306f\u5fc5\u305a sync\u3001umount\u3001close \u306e\u9806\u306b\u3059\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u3001mapper \u5c64\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u5c64\u3092\u9806\u756a\u306b\u9589\u3058\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6bb5\u968e<\/th>\n<th>\u5bfe\u8c61<\/th>\n<th>\u5f79\u5272<\/th>\n<th>\u901a\u5e38\u904b\u7528\u3067\u306e\u610f\u5473<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>open<\/td>\n<td>LUKS \u30c7\u30d0\u30a4\u30b9<\/td>\n<td>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304d\u3001mapper device \u3092\u4f5c\u308b\u3002<\/td>\n<td>\u6697\u53f7\u5316\u5c64\u3092\u5229\u7528\u53ef\u80fd\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>mount<\/td>\n<td>mapper device<\/td>\n<td>\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3078\u63a5\u7d9a\u3059\u308b\u3002<\/td>\n<td>\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u66f8\u304d\u3067\u304d\u308b\u72b6\u614b\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>sync<\/td>\n<td>\u30b7\u30b9\u30c6\u30e0\u5168\u4f53\u306e\u672a\u66f8\u304d\u8fbc\u307f\u30c7\u30fc\u30bf<\/td>\n<td>\u30d0\u30c3\u30d5\u30a1\u4e0a\u306e\u66f8\u304d\u8fbc\u307f\u3092\u30b9\u30c8\u30ec\u30fc\u30b8\u3078\u53cd\u6620\u3059\u308b\u3002<\/td>\n<td>\u4f5c\u696d\u7d42\u4e86\u524d\u306e\u540c\u671f\u70b9\u3092\u660e\u78ba\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>umount<\/td>\n<td>\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8<\/td>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u5207\u308a\u96e2\u3059\u3002<\/td>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u306e\u5229\u7528\u3092\u7d42\u4e86\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>close<\/td>\n<td>mapper \u540d<\/td>\n<td>\u5fa9\u53f7\u5f8c\u306e mapper device \u3092\u9589\u3058\u308b\u3002<\/td>\n<td>\u6697\u53f7\u5316\u5c64\u306e\u5229\u7528\u3092\u7d42\u4e86\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u901a\u5e38\u904b\u7528\u306e\u8981\u70b9\u306f\u3001\u5404\u30b3\u30de\u30f3\u30c9\u304c\u64cd\u4f5c\u3057\u3066\u3044\u308b\u5c64\u3092\u6df7\u540c\u3057\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002open \u306f\u6697\u53f7\u5316\u5c64\u3001mount \u306f\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u3001sync \u306f\u672a\u66f8\u304d\u8fbc\u307f\u30c7\u30fc\u30bf\u306e\u53cd\u6620\u3001umount \u306f\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u5207\u65ad\u3001close \u306f mapper device \u306e\u524a\u9664\u3067\u3042\u308b\u3002\u3053\u306e\u9806\u5e8f\u3092\u56fa\u5b9a\u3057\u3066\u304a\u3051\u3070\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5229\u7528\u958b\u59cb\u3068\u5229\u7528\u7d42\u4e86\u3092\u518d\u73fe\u53ef\u80fd\u306a\u624b\u9806\u3068\u3057\u3066\u6271\u3048\u308b\u3002\u9006\u306b\u3001\u901a\u5e38\u904b\u7528\u306e\u4e2d\u306b mkfs.ext4 \u306e\u3088\u3046\u306a\u521d\u671f\u5316\u30b3\u30de\u30f3\u30c9\u3092\u6df7\u305c\u308b\u3068\u3001\u4f5c\u6210\u624b\u9806\u3068\u5229\u7528\u624b\u9806\u306e\u5883\u754c\u304c\u5d29\u308c\u3001\u8aa4\u64cd\u4f5c\u306e\u5371\u967a\u304c\u9ad8\u307e\u308b\u3002<\/p>\n<hr>\n<h2>6. \u72b6\u614b\u78ba\u8a8d\u3067\u306f\u76ee\u7684\u3054\u3068\u306b\u898b\u308b\u5834\u6240\u3092\u5206\u3051\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u72b6\u614b\u78ba\u8a8d\u3067\u91cd\u8981\u306a\u306e\u306f\u3001\u78ba\u8a8d\u30b3\u30de\u30f3\u30c9\u3092\u307e\u3068\u3081\u3066\u6697\u8a18\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u300c\u3044\u307e\u4f55\u3092\u77e5\u308a\u305f\u3044\u306e\u304b\u300d\u306b\u5fdc\u3058\u3066\u898b\u308b\u5c64\u3092\u5206\u3051\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u306b\u306f\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001\u5fa9\u53f7\u5f8c\u306e mapper device\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3068\u3044\u3046\u8907\u6570\u306e\u5c64\u304c\u3042\u308b\u3002LUKS \u5f62\u5f0f\u304b\u3069\u3046\u304b\u3092\u78ba\u8a8d\u3057\u305f\u3044\u5834\u5408\u3001key slot \u3092\u78ba\u8a8d\u3057\u305f\u3044\u5834\u5408\u3001\u3059\u3067\u306b\u958b\u3044\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3057\u305f\u3044\u5834\u5408\u3001\u3069\u3053\u306b\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3057\u305f\u3044\u5834\u5408\u3067\u306f\u3001\u4f7f\u3046\u30b3\u30de\u30f3\u30c9\u304c\u7570\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u3053\u306e\u7ae0\u3067\u306f\u3001\u5404\u30b3\u30de\u30f3\u30c9\u3092\u300c\u3069\u3046\u3044\u3046\u3068\u304d\u306b\u4f7f\u3046\u306e\u304b\u300d\u300c\u4f55\u304c\u5206\u304b\u308c\u3070\u6b63\u5e38\u306a\u306e\u304b\u300d\u3068\u3044\u3046\u5358\u4f4d\u3067\u6574\u7406\u3059\u308b\u3002<\/p>\n<h3>6.1 \u5bfe\u8c61\u304c LUKS \u30c7\u30d0\u30a4\u30b9\u304b\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u6700\u521d\u306b\u78ba\u8a8d\u3057\u305f\u3044\u306e\u306f\u3001\u5bfe\u8c61\u304c\u672c\u5f53\u306b LUKS \u30c7\u30d0\u30a4\u30b9\u304b\u3069\u3046\u304b\u3067\u3042\u308b\u3002\u3053\u306e\u78ba\u8a8d\u306b\u306f isLuks \u3092\u4f7f\u3046\u3002\u3053\u308c\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306b LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u3042\u308b\u304b\u3069\u3046\u304b\u3092\u5224\u5b9a\u3059\u308b\u305f\u3081\u306e\u78ba\u8a8d\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u524d\u3001key slot \u3092\u5909\u66f4\u3059\u308b\u524d\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u308b\u524d\u306b\u3001\u5bfe\u8c61\u304c LUKS \u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u7528\u9014\u306b\u5411\u3044\u3066\u3044\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup isLuks \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306f\u3001\u6b63\u5e38\u6642\u306b\u8a73\u7d30\u306a\u60c5\u5831\u3092\u5927\u91cf\u306b\u8868\u793a\u3059\u308b\u305f\u3081\u306e\u3082\u306e\u3067\u306f\u306a\u3044\u3002\u4e3b\u306b\u7d42\u4e86\u30b9\u30c6\u30fc\u30bf\u30b9\u3067\u5224\u5b9a\u3059\u308b\u3002\u30a8\u30e9\u30fc\u306a\u304f\u7d42\u4e86\u3059\u308c\u3070\u3001\u5bfe\u8c61\u306f LUKS \u30c7\u30d0\u30a4\u30b9\u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u3066\u3044\u308b\u3002\u30a8\u30e9\u30fc\u306b\u306a\u308b\u5834\u5408\u306f\u3001\u5bfe\u8c61\u304c LUKS \u3067\u306f\u306a\u3044\u3001\u30c7\u30d0\u30a4\u30b9\u540d\u3092\u9593\u9055\u3048\u3066\u3044\u308b\u3001\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3067\u306f\u306a\u304f\u30c7\u30a3\u30b9\u30af\u5168\u4f53\u3092\u6307\u5b9a\u3059\u3079\u304d\u3068\u3053\u308d\u3092\u53d6\u308a\u9055\u3048\u3066\u3044\u308b\u3001\u3042\u308b\u3044\u306f\u30d8\u30c3\u30c0\u30fc\u304c\u7834\u640d\u3057\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u3053\u3053\u3067\u5931\u6557\u3059\u308b\u72b6\u614b\u306e\u307e\u307e luksDump\u3001open\u3001luksKillSlot \u306e\u3088\u3046\u306a\u64cd\u4f5c\u3078\u9032\u3093\u3067\u306f\u306a\u3089\u306a\u3044\u3002<\/p>\n<h3>6.2 LUKS \u30d8\u30c3\u30c0\u30fc\u3068 key slot \u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u5bfe\u8c61\u304c LUKS \u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u3089\u3001\u6b21\u306b luksDump \u3067 LUKS \u30d8\u30c3\u30c0\u30fc\u306e\u5185\u5bb9\u3092\u898b\u308b\u3002luksDump \u306f\u3001LUKS version\u3001UUID\u3001cipher\u3001data segment\u3001key slot\u3001KDF\u3001salt\u3001digest \u306a\u3069\u3092\u8868\u793a\u3059\u308b\u3002\u3053\u308c\u306f\u5358\u306a\u308b\u8a73\u7d30\u60c5\u5831\u306e\u8868\u793a\u3067\u306f\u306a\u3044\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5f62\u5f0f\u304c LUKS1 \u306a\u306e\u304b LUKS2 \u306a\u306e\u304b\u3001\u73fe\u5728\u3069\u306e\u6697\u53f7\u65b9\u5f0f\u3067\u4f5c\u3089\u308c\u3066\u3044\u308b\u306e\u304b\u3001\u3069\u306e key slot \u304c\u6709\u52b9\u306a\u306e\u304b\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3055\u308c\u305f\u5185\u5bb9\u3068\u5b9f\u4f53\u304c\u4e00\u81f4\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306e\u57fa\u672c\u64cd\u4f5c\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001LUKS header information \u304c\u8868\u793a\u3055\u308c\u3001Version\u3001UUID\u3001\u6697\u53f7\u65b9\u5f0f\u3001\u6709\u52b9\u306a key slot \u304c\u78ba\u8a8d\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002LUKS1 \u3067\u306f Key Slot 0\u3001Key Slot 1 \u306e\u3088\u3046\u306b ENABLED \u307e\u305f\u306f DISABLED \u304c\u8868\u793a\u3055\u308c\u308b\u3002LUKS2 \u3067\u306f Keyslots\u3001Tokens\u3001Digests \u306a\u3069\u306e\u69cb\u9020\u304c\u8868\u793a\u3055\u308c\u308b\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u3079\u304d\u4e2d\u5fc3\u306f\u3001\u3059\u3079\u3066\u306e\u7d30\u304b\u3044\u5024\u3092\u8aad\u3080\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u53f0\u5e33\u4e0a\u306e LUKS UUID \u3068\u4e00\u81f4\u3059\u308b\u304b\u3001\u60f3\u5b9a\u3057\u305f LUKS version \u304b\u3001\u6709\u52b9\u306a key slot \u304c\u60f3\u5b9a\u3069\u304a\u308a\u304b\u3001\u4e0d\u8981\u306a\u89e3\u9664\u5165\u53e3\u304c\u6b8b\u3063\u3066\u3044\u306a\u3044\u304b\u3067\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u78ba\u8a8d\u9805\u76ee<\/th>\n<th>\u898b\u308b\u5834\u6240<\/th>\n<th>\u5224\u65ad\u5185\u5bb9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Version<\/td>\n<td>Version \u884c\u3092\u898b\u308b\u3002<\/td>\n<td>LUKS1 \u304b LUKS2 \u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS UUID<\/td>\n<td>UUID \u884c\u3092\u898b\u308b\u3002<\/td>\n<td>\u53f0\u5e33\u3084 crypttab \u306b\u8a18\u9332\u3057\u305f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3068\u4e00\u81f4\u3059\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6697\u53f7\u65b9\u5f0f<\/td>\n<td>Cipher\u3001Cipher mode\u3001Data segments \u3092\u898b\u308b\u3002<\/td>\n<td>AES-CBC-ESSIV \u306a\u306e\u304b AES-XTS \u306a\u306e\u304b\u306a\u3069\u3001\u6697\u53f7\u5316\u65b9\u5f0f\u306e\u4e16\u4ee3\u3068\u69cb\u6210\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>key slot<\/td>\n<td>Key Slot \u307e\u305f\u306f Keyslots \u3092\u898b\u308b\u3002<\/td>\n<td>\u6709\u52b9\u306a\u89e3\u9664\u5165\u53e3\u304c\u3044\u304f\u3064\u3042\u308a\u3001\u305d\u308c\u304c\u60f3\u5b9a\u3069\u304a\u308a\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>KDF<\/td>\n<td>PBKDF\u3001Iterations\u3001Memory\u3001Threads \u306a\u3069\u3092\u898b\u308b\u3002<\/td>\n<td>\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084 keyfile \u304b\u3089\u89e3\u9664\u7528\u306e\u9375\u6750\u6599\u3092\u4f5c\u308b\u65b9\u5f0f\u3068\u5f37\u5ea6\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>luksDump \u306f\u3001key slot \u3092\u8ffd\u52a0\u3057\u305f\u5f8c\u3001\u4e0d\u8981\u306a key slot \u3092\u524a\u9664\u3057\u305f\u5f8c\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u308b\u524d\u5f8c\u3001\u79fb\u884c\u5bfe\u8c61\u3092\u8abf\u67fb\u3059\u308b\u3068\u304d\u306b\u5fc5\u305a\u4f7f\u3046\u3002\u7279\u306b luksKillSlot \u306e\u524d\u306b\u306f\u3001\u6709\u52b9\u306a key slot \u306e\u6570\u3068\u7528\u9014\u3092\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u6700\u5f8c\u306e\u6709\u52b9 key slot \u3092\u524a\u9664\u3059\u308b\u3068\u3001\u305d\u306e LUKS \u30c7\u30d0\u30a4\u30b9\u306f\u958b\u3051\u306a\u304f\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001luksDump \u306f\u300c\u72b6\u614b\u3092\u898b\u308b\u30b3\u30de\u30f3\u30c9\u300d\u3067\u3042\u308b\u3068\u540c\u6642\u306b\u3001\u300c\u7834\u58ca\u7684\u64cd\u4f5c\u3078\u9032\u3093\u3067\u3088\u3044\u304b\u3092\u5224\u65ad\u3059\u308b\u305f\u3081\u306e\u5b89\u5168\u78ba\u8a8d\u300d\u3067\u3042\u308b\u3002<\/p>\n<h3>6.3 \u3059\u3067\u306b\u958b\u3044\u3066\u3044\u308b mapper device \u306e\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092 open \u3057\u305f\u5f8c\u306f\u3001\u5143\u306e \/dev\/sdX \u3068\u306f\u5225\u306b \/dev\/mapper\/crypt_name \u304c\u4f5c\u3089\u308c\u308b\u3002\u3053\u306e\u5fa9\u53f7\u5f8c\u306e mapper device \u304c\u73fe\u5728\u3069\u3046\u3044\u3046\u72b6\u614b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u306b\u306f\u3001cryptsetup status \u3092\u4f7f\u3046\u3002\u3053\u308c\u306f LUKS \u30d8\u30c3\u30c0\u30fc\u306e\u8a73\u7d30\u3092\u898b\u308b\u305f\u3081\u306e\u30b3\u30de\u30f3\u30c9\u3067\u306f\u306a\u304f\u3001\u3059\u3067\u306b\u958b\u304b\u308c\u3066\u3044\u308b mapper \u540d\u306b\u3064\u3044\u3066\u3001\u5143\u30c7\u30d0\u30a4\u30b9\u3001\u6697\u53f7\u65b9\u5f0f\u3001offset\u3001sector size \u306a\u3069\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306e\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup status crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/crypt_name \u304c active \u3068\u3057\u3066\u8868\u793a\u3055\u308c\u3001\u5143\u30c7\u30d0\u30a4\u30b9\u3084\u6697\u53f7\u8a2d\u5b9a\u304c\u78ba\u8a8d\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067 crypt_name \u306b\u306f \/dev\/mapper\/ \u3092\u4ed8\u3051\u305a\u3001mapper \u540d\u3060\u3051\u3092\u6307\u5b9a\u3059\u308b\u3002status \u304c\u300cinactive\u300d\u307e\u305f\u306f\u898b\u3064\u304b\u3089\u306a\u3044\u3068\u3044\u3046\u7d50\u679c\u306b\u306a\u308b\u5834\u5408\u3001\u305d\u306e mapper device \u306f\u958b\u304b\u308c\u3066\u3044\u306a\u3044\u3002mount \u306b\u5931\u6557\u3057\u305f\u3068\u304d\u3001\u307e\u305a open \u305d\u306e\u3082\u306e\u304c\u6210\u529f\u3057\u3066\u3044\u308b\u304b\u3092\u5207\u308a\u5206\u3051\u308b\u306b\u306f\u3001\u3053\u306e\u78ba\u8a8d\u304c\u6709\u52b9\u3067\u3042\u308b\u3002<\/p>\n<p>status \u3067 active \u3068\u8868\u793a\u3055\u308c\u308b\u306e\u306b mount \u3067\u304d\u306a\u3044\u5834\u5408\u3001\u554f\u984c\u306f LUKS \u306e\u89e3\u9664\u3067\u306f\u306a\u304f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3001fstab\u3001\u6a29\u9650\u3001\u7834\u640d\u306a\u3069\u306e\u5c64\u306b\u3042\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3002\u9006\u306b status \u3067 mapper \u304c\u5b58\u5728\u3057\u306a\u3044\u5834\u5408\u306f\u3001\u305d\u3082\u305d\u3082\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u304c\u958b\u3051\u3066\u3044\u306a\u3044\u3002\u72b6\u614b\u78ba\u8a8d\u3067\u306f\u3001\u3053\u306e\u3088\u3046\u306b\u6697\u53f7\u5316\u5c64\u3068\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u3092\u5207\u308a\u5206\u3051\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3042\u308b\u3002<\/p>\n<h3>6.4 \u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001mapper\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u306e\u5bfe\u5fdc\u3092\u898b\u308b<\/h3>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3044\u305f\u5f8c\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS\u3001mapper device\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u304c\u3069\u3046\u3064\u306a\u304c\u3063\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u306b\u306f lsblk -f \u3092\u4f7f\u3046\u3002\u3053\u308c\u306f\u3001\u3069\u306e\u30c7\u30d0\u30a4\u30b9\u304c\u3069\u306e\u4e0b\u4f4d\u5c64\u307e\u305f\u306f\u4e0a\u4f4d\u5c64\u306b\u63a5\u7d9a\u3055\u308c\u3066\u3044\u308b\u304b\u3092\u968e\u5c64\u69cb\u9020\u3067\u898b\u308b\u305f\u3081\u306e\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092 open \u3057\u305f\u5f8c\u3001mount \u3057\u305f\u5f8c\u3001close \u3057\u305f\u5f8c\u306b\u5b9f\u884c\u3059\u308b\u3068\u3001\u72b6\u614b\u9077\u79fb\u304c\u78ba\u8a8d\u3057\u3084\u3059\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">lsblk -f<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u306e\u4e0b\u306b crypto_LUKS \u304c\u3042\u308a\u3001open \u6e08\u307f\u3067\u3042\u308c\u3070 \/dev\/mapper \u5074\u306e\u540d\u524d\u304c\u8868\u793a\u3055\u308c\u3001\u305d\u306e\u4e0a\u306b ext4 \u306a\u3069\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3068\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u304c\u898b\u3048\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u308b\u306e\u306f\u3001\u5358\u306b\u8868\u793a\u304c\u3042\u308b\u304b\u3069\u3046\u304b\u3067\u306f\u306a\u3044\u3002\/dev\/sdX\u3001mapper \u540d\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u304c\u3001\u53f0\u5e33\u3068\u4e00\u81f4\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u904b\u7528\u3067\u306f\u3001\u3069\u306e\u5c64\u3092\u64cd\u4f5c\u3057\u3066\u3044\u308b\u306e\u304b\u3092\u898b\u5931\u3046\u3068\u3001mkfs \u3084 umount \u3084 close \u306e\u5bfe\u8c61\u3092\u8aa4\u308b\u3002<\/p>\n<h3>6.5 UUID \u3084 TYPE \u3092\u6a5f\u68b0\u7684\u306b\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>UUID \u3084 TYPE \u3092\u78ba\u8a8d\u3059\u308b\u306b\u306f blkid \u3092\u4f7f\u3046\u3002lsblk -f \u3067\u3082 UUID \u306f\u898b\u3048\u308b\u304c\u3001blkid \u306f\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3084\u53f0\u5e33\u3078\u8ee2\u8a18\u3059\u308b\u8b58\u5225\u5b50\u3092\u78ba\u8a8d\u3059\u308b\u7528\u9014\u306b\u5411\u3044\u3066\u3044\u308b\u3002\u7279\u306b crypttab \u3067\u306f LUKS \u30c7\u30d0\u30a4\u30b9\u306e UUID\u3001fstab \u3067\u306f\u5fa9\u53f7\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID \u3092\u4f7f\u3046\u3053\u3068\u304c\u3042\u308b\u305f\u3081\u3001\u3069\u306e UUID \u304c\u3069\u306e\u5c64\u306b\u5c5e\u3059\u308b\u3082\u306e\u304b\u3092\u533a\u5225\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b<a class=\"ref\" href=\"#ref14\">[14]<\/a><a class=\"ref\" href=\"#ref15\">[15]<\/a>\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo blkid<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u5404\u30c7\u30d0\u30a4\u30b9\u306b\u3064\u3044\u3066 UUID\u3001TYPE\u3001PARTUUID \u306a\u3069\u304c\u8868\u793a\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002TYPE=&#8221;crypto_LUKS&#8221; \u3068\u8868\u793a\u3055\u308c\u308b UUID \u306f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u6301\u3064\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u5074\u306e\u8b58\u5225\u5b50\u3067\u3042\u308b\u3002\u4e00\u65b9\u3001\/dev\/mapper\/crypt_name \u306b ext4 \u306e UUID \u304c\u8868\u793a\u3055\u308c\u308b\u5834\u5408\u3001\u305d\u308c\u306f\u5fa9\u53f7\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5074\u306e\u8b58\u5225\u5b50\u3067\u3042\u308b\u3002\u3053\u306e 2 \u3064\u3092\u6df7\u540c\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002crypttab \u3067\u5fc5\u8981\u306a UUID \u3068 fstab \u3067\u5fc5\u8981\u306a UUID \u306f\u3001\u540c\u3058\u3067\u306f\u306a\u3044\u5834\u5408\u304c\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u77e5\u308a\u305f\u3044\u3053\u3068<\/th>\n<th>\u4f7f\u3046\u30b3\u30de\u30f3\u30c9<\/th>\n<th>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>LUKS \u304b\u3069\u3046\u304b<\/td>\n<td>cryptsetup isLuks<\/td>\n<td>\u5bfe\u8c61\u304c LUKS \u30c7\u30d0\u30a4\u30b9\u306a\u3089\u30a8\u30e9\u30fc\u306a\u304f\u7d42\u4e86\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS \u30d8\u30c3\u30c0\u30fc\u306e\u8a73\u7d30<\/td>\n<td>cryptsetup luksDump<\/td>\n<td>LUKS version\u3001UUID\u3001\u6697\u53f7\u65b9\u5f0f\u3001key slot\u3001KDF \u304c\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u958b\u3044\u3066\u3044\u308b mapper \u306e\u72b6\u614b<\/td>\n<td>cryptsetup status<\/td>\n<td>mapper \u304c active \u304b\u3001\u5143\u30c7\u30d0\u30a4\u30b9\u3084\u6697\u53f7\u8a2d\u5b9a\u304c\u4f55\u304b\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30c7\u30d0\u30a4\u30b9\u968e\u5c64\u3068\u30de\u30a6\u30f3\u30c8\u72b6\u614b<\/td>\n<td>lsblk -f<\/td>\n<td>\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001mapper\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u306e\u95a2\u4fc2\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>UUID \u3068 TYPE<\/td>\n<td>blkid<\/td>\n<td>crypto_LUKS\u3001ext4\u3001vfat \u306a\u3069\u306e TYPE \u3068 UUID \u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u72b6\u614b\u78ba\u8a8d\u3092 1 \u3064\u306e\u30b3\u30de\u30f3\u30c9\u3067\u6e08\u307e\u305b\u3088\u3046\u3068\u3057\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u898b\u308b\u306a\u3089 luksDump\u3001\u958b\u3044\u3066\u3044\u308b mapper \u3092\u898b\u308b\u306a\u3089 status\u3001\u968e\u5c64\u95a2\u4fc2\u3092\u898b\u308b\u306a\u3089 lsblk -f\u3001UUID \u3092\u78ba\u8a8d\u3059\u308b\u306a\u3089 blkid \u3092\u4f7f\u3046\u3002\u3053\u308c\u3089\u306f\u91cd\u8907\u3057\u3066\u3044\u308b\u3088\u3046\u306b\u898b\u3048\u308b\u304c\u3001\u898b\u3066\u3044\u308b\u5c64\u304c\u9055\u3046\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u3067\u306f\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001mapper\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3092\u5206\u3051\u3066\u78ba\u8a8d\u3059\u308b\u3053\u3068\u304c\u3001\u8aa4\u64cd\u4f5c\u9632\u6b62\u3068\u5fa9\u65e7\u53ef\u80fd\u6027\u306e\u57fa\u790e\u306b\u306a\u308b\u3002<\/p>\n<hr>\n<h2>7. key slot \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u89e3\u9664\u5165\u53e3\u3067\u3042\u308b<\/h2>\n<p>LUKS \u306e key slot \u306f\u3001\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u672c\u4f53\u306e\u5225\u30b3\u30d4\u30fc\u3067\u306f\u306a\u3044\u3002key slot \u306f\u3001\u540c\u3058\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u305f\u3081\u306e\u89e3\u9664\u5165\u53e3\u3067\u3042\u308b\u3002LUKS \u3067\u306f\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u3092\u6697\u53f7\u5316\u3059\u308b\u305f\u3081\u306e volume key \u304c\u3042\u308a\u3001\u5229\u7528\u8005\u306f\u305d\u306e volume key \u3092\u76f4\u63a5\u6271\u308f\u306a\u3044\u3002\u5229\u7528\u8005\u304c\u5165\u529b\u3059\u308b\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001keyfile\u3001token \u306a\u3069\u306f\u3001\u305d\u308c\u305e\u308c key slot \u3092\u901a\u3058\u3066 volume key \u3092\u53d6\u308a\u51fa\u3059\u305f\u3081\u306e\u5165\u53e3\u3068\u3057\u3066\u50cd\u304f\u3002\u3057\u305f\u304c\u3063\u3066\u3001key slot \u3092\u7ba1\u7406\u3059\u308b\u3068\u306f\u3001\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u3092\u8907\u88fd\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u300c\u3069\u306e\u89e3\u9664\u624b\u6bb5\u3067\u958b\u3051\u308b\u72b6\u614b\u3092\u6b8b\u3059\u304b\u300d\u3092\u7ba1\u7406\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<p>\u3053\u306e\u69cb\u9020\u3092\u7406\u89e3\u3059\u308b\u3068\u3001key slot \u306e\u4f7f\u3044\u9053\u304c\u6574\u7406\u3067\u304d\u308b\u3002\u901a\u5e38\u904b\u7528\u3067\u306f keyfile \u3092\u4f7f\u3044\u3001\u975e\u5e38\u6642\u306b\u306f\u9577\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u4f7f\u3046\u3002\u7ba1\u7406\u8005\u4ea4\u4ee3\u6642\u306b\u306f\u65b0\u3057\u3044\u89e3\u9664\u624b\u6bb5\u3092\u8ffd\u52a0\u3057\u3001\u53e4\u3044\u89e3\u9664\u624b\u6bb5\u3092\u524a\u9664\u3059\u308b\u3002\u7528\u9014\u4e0d\u660e\u306e\u53e4\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u6b8b\u3063\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u305d\u308c\u304c\u672c\u5f53\u306b\u4e0d\u8981\u304b\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u524a\u9664\u3059\u308b\u3002\u3064\u307e\u308a\u3001key slot \u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5229\u7528\u8005\u3001\u904b\u7528\u7d4c\u8def\u3001\u5fa9\u65e7\u7d4c\u8def\u3001\u9000\u5f79\u6761\u4ef6\u3092\u8868\u3059\u7ba1\u7406\u70b9\u3067\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7528\u9014<\/th>\n<th>key slot \u306e\u4f7f\u3044\u65b9<\/th>\n<th>\u904b\u7528\u4e0a\u306e\u610f\u5473<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u901a\u5e38\u904b\u7528<\/td>\n<td>keyfile \u3092\u767b\u9332\u3057\u305f key slot \u3092\u4f7f\u3046\u3002<\/td>\n<td>\u30b5\u30fc\u30d0\u30fc\u8d77\u52d5\u6642\u3084\u5b9a\u578b\u4f5c\u696d\u3067\u3001\u4eba\u9593\u306e\u5165\u529b\u306a\u3057\u306b\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u975e\u5e38\u6642\u5fa9\u65e7<\/td>\n<td>\u9577\u3044\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5225 key slot \u306b\u767b\u9332\u3059\u308b\u3002<\/td>\n<td>keyfile \u306e\u55aa\u5931\u3001\u8d77\u52d5\u8a2d\u5b9a\u306e\u7834\u640d\u3001crypttab \u306e\u4e0d\u6574\u5408\u304c\u8d77\u304d\u3066\u3082\u624b\u52d5\u3067\u958b\u3051\u308b\u7d4c\u8def\u3092\u6b8b\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7ba1\u7406\u8005\u4ea4\u4ee3<\/td>\n<td>\u65b0\u3057\u3044\u89e3\u9664\u624b\u6bb5\u3092\u8ffd\u52a0\u3057\u3001\u65e7\u89e3\u9664\u624b\u6bb5\u3092\u524a\u9664\u3059\u308b\u3002<\/td>\n<td>\u904e\u53bb\u306e\u7ba1\u7406\u8005\u3084\u53e4\u3044\u904b\u7528\u306b\u4f9d\u5b58\u3057\u305f\u89e3\u9664\u5165\u53e3\u3092\u6b8b\u3055\u306a\u3044\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u65e7\u8a2d\u5b9a\u6574\u7406<\/td>\n<td>\u7528\u9014\u4e0d\u660e\u306e key slot \u3092\u8abf\u67fb\u3057\u3066\u304b\u3089\u524a\u9664\u3059\u308b\u3002<\/td>\n<td>\u4f7f\u3063\u3066\u3044\u306a\u3044\u53e4\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u6b8b\u3055\u305a\u3001\u89e3\u9664\u5165\u53e3\u3092\u7ba1\u7406\u53ef\u80fd\u306a\u6570\u306b\u4fdd\u3064\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u79fb\u884c\u4f5c\u696d<\/td>\n<td>\u79fb\u884c\u671f\u9593\u3060\u3051\u4e00\u6642\u7684\u306a\u89e3\u9664\u624b\u6bb5\u3092\u8ffd\u52a0\u3059\u308b\u3002<\/td>\n<td>\u65b0\u65e7\u74b0\u5883\u306e\u4e21\u65b9\u3067\u4f5c\u696d\u3067\u304d\u308b\u72b6\u614b\u3092\u4f5c\u308a\u3001\u79fb\u884c\u5b8c\u4e86\u5f8c\u306b\u4e00\u6642 slot \u3092\u524a\u9664\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>key slot \u7ba1\u7406\u3067\u6700\u3082\u91cd\u8981\u306a\u306e\u306f\u3001\u5897\u3084\u3059\u3053\u3068\u3088\u308a\u3082\u610f\u5473\u3092\u8a18\u9332\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002LUKS \u306e key slot \u306b\u306f\u300c\u3053\u308c\u306f\u901a\u5e38\u904b\u7528\u7528\u300d\u300c\u3053\u308c\u306f\u975e\u5e38\u7528\u300d\u300c\u3053\u308c\u306f\u65e7\u7ba1\u7406\u8005\u7528\u300d\u3068\u3044\u3063\u305f\u8aac\u660e\u304c\u81ea\u52d5\u7684\u306b\u4fdd\u5b58\u3055\u308c\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u3002luksDump \u3067\u5206\u304b\u308b\u306e\u306f\u3001\u6709\u52b9\u306a slot \u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3001slot \u756a\u53f7\u3001KDF\u3001salt \u306a\u3069\u3067\u3042\u308a\u3001\u305d\u306e slot \u304c\u4f55\u306e\u305f\u3081\u306b\u4f5c\u3089\u308c\u305f\u304b\u306f\u904b\u7528\u5074\u304c\u53f0\u5e33\u306b\u6b8b\u3055\u306a\u3051\u308c\u3070\u306a\u3089\u306a\u3044\u3002\u3057\u305f\u304c\u3063\u3066\u3001key slot \u3092\u8ffd\u52a0\u3057\u305f\u3089\u3001\u5fc5\u305a\u7528\u9014\u3001\u4f5c\u6210\u65e5\u3001\u89e3\u9664\u624b\u6bb5\u3001\u78ba\u8a8d\u65e5\u3001\u524a\u9664\u4e88\u5b9a\u306e\u6709\u7121\u3092\u8a18\u9332\u3059\u308b\u3002<\/p>\n<hr>\n<h2>8. key slot \u3092\u8ffd\u52a0\u3057\u3001\u89e3\u9664\u3067\u304d\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b<\/h2>\n<p>key slot \u3092\u8ffd\u52a0\u3059\u308b\u5178\u578b\u7684\u306a\u5834\u9762\u306f\u3001\u901a\u5e38\u904b\u7528\u7528\u306e keyfile \u3092\u767b\u9332\u3059\u308b\u5834\u5408\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u8ffd\u52a0\u3059\u308b\u5834\u5408\u3001\u307e\u305f\u306f\u79fb\u884c\u4f5c\u696d\u306e\u305f\u3081\u306b\u4e00\u6642\u7684\u306a\u89e3\u9664\u624b\u6bb5\u3092\u8ffd\u52a0\u3059\u308b\u5834\u5408\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u4f7f\u3046\u57fa\u672c\u30b3\u30de\u30f3\u30c9\u306f luksAddKey \u3067\u3042\u308b\u3002luksAddKey \u306f\u3001\u65e2\u5b58\u306e\u6709\u52b9\u306a\u89e3\u9664\u624b\u6bb5\u3067\u8a8d\u8a3c\u3057\u305f\u3046\u3048\u3067\u3001\u65b0\u3057\u3044\u89e3\u9664\u624b\u6bb5\u3092\u5225\u306e key slot \u306b\u8ffd\u52a0\u3059\u308b\u3002\u3064\u307e\u308a\u3001\u8ab0\u3067\u3082\u52dd\u624b\u306b\u89e3\u9664\u5165\u53e3\u3092\u5897\u3084\u305b\u308b\u308f\u3051\u3067\u306f\u306a\u304f\u3001\u3059\u3067\u306b\u6b63\u5f53\u306a\u89e3\u9664\u624b\u6bb5\u3092\u6301\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u3001\u65b0\u3057\u3044\u5165\u53e3\u3092\u8ffd\u52a0\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002<\/p>\n<p>keyfile \u3092\u8ffd\u52a0\u3059\u308b\u5834\u5408\u306f\u3001\u8ffd\u52a0\u3057\u305f\u3044 keyfile \u3092\u5f15\u6570\u3068\u3057\u3066\u6307\u5b9a\u3059\u308b\u3002\u6b21\u306e\u4f8b\u3067\u306f\u3001\u65e2\u5b58\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u8a8d\u8a3c\u3057\u305f\u3046\u3048\u3067\u3001\/etc\/cryptsetup-keys\/crypt_name.key \u3092\u65b0\u3057\u3044\u89e3\u9664\u624b\u6bb5\u3068\u3057\u3066\u767b\u9332\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u65b0\u3057\u3044 key slot \u304c 1 \u3064\u6709\u52b9\u306b\u306a\u308a\u3001\u305d\u306e keyfile \u3067\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3051\u308b\u3088\u3046\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksAddKey \/dev\/sdX \/etc\/cryptsetup-keys\/crypt_name.key<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u8ffd\u52a0\u3059\u308b\u5834\u5408\u306f\u3001\u65e2\u5b58\u306e keyfile \u3067\u8a8d\u8a3c\u3057\u3001\u65b0\u3057\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5bfe\u8a71\u5f0f\u3067\u767b\u9332\u3059\u308b\u3002\u901a\u5e38\u904b\u7528\u3067\u306f keyfile \u3092\u4f7f\u3044\u3001\u975e\u5e38\u6642\u306b\u306f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u624b\u52d5\u89e3\u9664\u3059\u308b\u8a2d\u8a08\u306b\u3057\u305f\u3044\u5834\u5408\u3001\u3053\u306e\u624b\u9806\u304c\u6709\u52b9\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001keyfile \u306b\u3088\u308b\u901a\u5e38\u89e3\u9664\u3092\u7dad\u6301\u3057\u305f\u307e\u307e\u3001\u5225\u306e key slot \u306b\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u8ffd\u52a0\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksAddKey \/dev\/sdX --key-file \/etc\/cryptsetup-keys\/crypt_name.key<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u8ffd\u52a0\u5f8c\u306f\u3001\u5fc5\u305a\u89e3\u9664\u78ba\u8a8d\u3092\u884c\u3046\u3002keyfile \u304c\u6b63\u3057\u304f\u767b\u9332\u3055\u308c\u305f\u304b\u3092\u78ba\u8a8d\u3059\u308b\u5834\u5408\u306f\u3001open &#8211;test-passphrase \u3068 &#8211;key-file \u3092\u4f7f\u3046\u3002\u3053\u306e\u64cd\u4f5c\u306f\u5b9f\u969b\u306b \/dev\/mapper \u4ee5\u4e0b\u3078 mapper device \u3092\u4f5c\u308b\u306e\u3067\u306f\u306a\u304f\u3001\u6307\u5b9a\u3057\u305f\u89e3\u9664\u624b\u6bb5\u3067\u958b\u3051\u308b\u304b\u3060\u3051\u3092\u78ba\u8a8d\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u30a8\u30e9\u30fc\u306a\u304f\u7d42\u4e86\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u30a8\u30e9\u30fc\u304c\u51fa\u308b\u5834\u5408\u306f\u3001keyfile \u304c\u767b\u9332\u3055\u308c\u3066\u3044\u306a\u3044\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304c\u9055\u3046\u3001keyfile \u306e\u30d1\u30b9\u304c\u9055\u3046\u3001\u307e\u305f\u306f keyfile \u306e\u5185\u5bb9\u304c\u60f3\u5b9a\u3068\u7570\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u8ffd\u52a0\u3057\u305f\u5834\u5408\u306f\u3001keyfile \u306a\u3057\u3067\u3082\u89e3\u9664\u3067\u304d\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u306e\u78ba\u8a8d\u3067\u306f\u3001\u8ffd\u52a0\u3057\u305f\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u3082\u30a8\u30e9\u30fc\u306a\u304f test-passphrase \u304c\u901a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u901a\u5e38\u904b\u7528\u306e keyfile \u3068\u975e\u5e38\u6642\u306e passphrase \u3068\u3044\u3046 2 \u7cfb\u7d71\u306e\u89e3\u9664\u7d4c\u8def\u304c\u5b9f\u969b\u306b\u6a5f\u80fd\u3059\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --test-passphrase \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u8ffd\u52a0\u5f8c\u306b\u306f luksDump \u3067 key slot \u306e\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u308b\u306e\u306f\u3001\u6709\u52b9\u306a key slot \u304c\u5897\u3048\u3066\u3044\u308b\u3053\u3068\u3001\u60f3\u5b9a\u5916\u306b\u591a\u6570\u306e key slot \u304c\u6b8b\u3063\u3066\u3044\u306a\u3044\u3053\u3068\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3057\u305f\u7528\u9014\u3068 slot \u6570\u304c\u4e00\u81f4\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u305f\u3060\u3057\u3001luksDump \u3060\u3051\u3067\u306f\u300c\u3053\u306e slot \u306f keyfile \u7528\u300d\u300c\u3053\u306e slot \u306f\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u7528\u300d\u3068\u81ea\u52d5\u7684\u306b\u5206\u304b\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u3002\u3069\u306e slot \u304c\u3069\u306e\u89e3\u9664\u624b\u6bb5\u306b\u5bfe\u5fdc\u3059\u308b\u304b\u3092\u53b3\u5bc6\u306b\u78ba\u8a8d\u3057\u305f\u3044\u5834\u5408\u306f\u3001\u6b21\u7ae0\u3067\u6271\u3046\u3088\u3046\u306b &#8211;key-slot \u3092\u6307\u5b9a\u3057\u3066\u7167\u4f1a\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<table>\n<thead>\n<tr>\n<th>\u8ffd\u52a0\u3059\u308b\u3082\u306e<\/th>\n<th>\u4f7f\u3046\u5834\u9762<\/th>\n<th>\u78ba\u8a8d\u65b9\u6cd5<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>keyfile<\/td>\n<td>\u81ea\u52d5\u89e3\u9664\u3084\u5b9a\u578b\u904b\u7528\u3067\u4f7f\u3046\u3002<\/td>\n<td>&#8211;key-file \u3092\u6307\u5b9a\u3057\u3066 test-passphrase \u304c\u901a\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba<\/td>\n<td>keyfile \u55aa\u5931\u3084\u8d77\u52d5\u8a2d\u5b9a\u7834\u640d\u306b\u5099\u3048\u308b\u3002<\/td>\n<td>keyfile \u306a\u3057\u3067 test-passphrase \u3092\u5b9f\u884c\u3057\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u901a\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4e00\u6642\u4f5c\u696d\u7528\u89e3\u9664\u624b\u6bb5<\/td>\n<td>\u79fb\u884c\u3001\u5fa9\u65e7\u3001\u7ba1\u7406\u8005\u4ea4\u4ee3\u306a\u3069\u306e\u671f\u9593\u9650\u5b9a\u4f5c\u696d\u3067\u4f7f\u3046\u3002<\/td>\n<td>\u4f5c\u696d\u5b8c\u4e86\u5f8c\u306b\u4e0d\u8981 slot \u3068\u3057\u3066\u524a\u9664\u5bfe\u8c61\u3078\u56de\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>key slot \u3092\u8ffd\u52a0\u3059\u308b\u3068\u5fa9\u65e7\u6027\u306f\u4e0a\u304c\u308b\u304c\u3001\u89e3\u9664\u5165\u53e3\u3082\u5897\u3048\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u8ffd\u52a0\u3057\u305f\u307e\u307e\u653e\u7f6e\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002\u901a\u5e38\u904b\u7528\u7528 keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u4e00\u6642\u4f5c\u696d\u7528 slot \u306f\u3001\u5f79\u5272\u304c\u9055\u3046\u3002\u901a\u5e38\u904b\u7528\u7528\u3068\u975e\u5e38\u7528\u306f\u9577\u671f\u4fdd\u6301\u3057\u3066\u3088\u3044\u304c\u3001\u4e00\u6642\u4f5c\u696d\u7528\u306f\u4f5c\u696d\u5b8c\u4e86\u5f8c\u306b\u524a\u9664\u3059\u308b\u3002key slot \u7ba1\u7406\u3067\u306f\u3001\u8ffd\u52a0\u3057\u305f\u76f4\u5f8c\u306b\u78ba\u8a8d\u3057\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3057\u3001\u4e0d\u8981\u306b\u306a\u3063\u305f\u6642\u70b9\u3067\u524a\u9664\u3059\u308b\u3068\u3053\u308d\u307e\u3067\u3092 1 \u3064\u306e\u904b\u7528\u3068\u3057\u3066\u6271\u3046\u3002<\/p>\n<hr>\n<h2>9. key slot \u3092\u7167\u4f1a\u3057\u3001\u4e0d\u8981\u306a\u89e3\u9664\u5165\u53e3\u3092\u524a\u9664\u3059\u308b<\/h2>\n<p>\u4e0d\u8981\u306a key slot \u3092\u524a\u9664\u3059\u308b\u76ee\u7684\u306f\u3001\u4f7f\u3063\u3066\u3044\u306a\u3044\u53e4\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084\u7528\u9014\u4e0d\u660e\u306e\u89e3\u9664\u5165\u53e3\u3092\u6b8b\u3055\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u524a\u9664\u5bfe\u8c61\u306f\u30c7\u30fc\u30bf\u672c\u4f53\u3067\u306f\u306a\u304f\u89e3\u9664\u5165\u53e3\u3067\u3042\u308b\u3002\u305f\u3060\u3057\u3001\u89e3\u9664\u5165\u53e3\u3092\u8aa4\u3063\u3066\u3059\u3079\u3066\u6d88\u3059\u3068\u3001\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u672c\u4f53\u306f\u6b8b\u3063\u3066\u3044\u3066\u3082\u5fa9\u53f7\u4e0d\u80fd\u306b\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u524a\u9664\u306e\u524d\u306b\u306f\u3001\u3069\u306e slot \u304c\u73fe\u5728\u306e\u901a\u5e38\u904b\u7528\u7528\u3067\u3001\u3069\u306e slot \u304c\u975e\u5e38\u7528\u3067\u3001\u3069\u306e slot \u304c\u7528\u9014\u4e0d\u660e\u306a\u306e\u304b\u3092\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u307e\u305a\u3001luksDump \u3067\u6709\u52b9\u306a key slot \u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u306f slot \u756a\u53f7\u3068\u6709\u52b9\u72b6\u614b\u3092\u898b\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u6709\u52b9\u306a key slot \u306e\u6570\u3092\u628a\u63e1\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u305f\u3068\u3048\u3070\u901a\u5e38\u904b\u7528\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e 2 \u3064\u3060\u3051\u3092\u6b8b\u3059\u8a2d\u8a08\u306a\u3089\u3001\u6709\u52b9 slot \u306f 2 \u3064\u3067\u3088\u3044\u3002\u3053\u308c\u3088\u308a\u591a\u3044\u5834\u5408\u306f\u3001\u53e4\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u904e\u53bb\u306e\u7ba1\u7406\u8005\u7528 slot\u3001\u4e00\u6642\u4f5c\u696d\u7528 slot \u304c\u6b8b\u3063\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u6b21\u306b\u3001keyfile \u304c\u3069\u306e slot \u306b\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002&#8211;test-passphrase \u3068 &#8211;key-slot \u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u3068\u3001\u6307\u5b9a\u3057\u305f slot \u306b\u5bfe\u3057\u3066\u305d\u306e keyfile \u3067\u89e3\u9664\u3067\u304d\u308b\u304b\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002\u6b21\u306e\u4f8b\u3067\u306f\u3001slot 0 \u304c \/etc\/cryptsetup-keys\/crypt_name.key \u3067\u958b\u3051\u308b\u304b\u3092\u78ba\u8a8d\u3057\u3066\u3044\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001keyfile \u7528\u3068\u3057\u3066\u6b8b\u3059\u3079\u304d slot \u3060\u3051\u304c\u6210\u529f\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key --key-slot 0 \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>slot 1\u3001slot 2 \u306a\u3069\u3082\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u540c\u3058\u65b9\u6cd5\u3067\u78ba\u8a8d\u3059\u308b\u3002\u6210\u529f\u3057\u305f slot \u306f\u3001\u305d\u306e keyfile \u306b\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u3002\u5931\u6557\u3057\u305f slot \u306f\u3001\u305d\u306e keyfile \u3067\u306f\u958b\u3051\u306a\u3044\u5225\u306e\u89e3\u9664\u5165\u53e3\u3067\u3042\u308b\u3002\u5931\u6557\u3057\u305f\u304b\u3089\u3068\u3044\u3063\u3066\u5373\u5ea7\u306b\u4e0d\u8981\u3068\u306f\u9650\u3089\u306a\u3044\u3002\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u7528 slot \u304b\u3082\u3057\u308c\u306a\u3044\u3057\u3001\u904e\u53bb\u306b\u767b\u9332\u3057\u305f\u4e00\u6642\u4f5c\u696d\u7528 slot \u304b\u3082\u3057\u308c\u306a\u3044\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u524a\u9664\u524d\u306b\u306f\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067 test-passphrase \u304c\u901a\u308b\u3053\u3068\u3001\u901a\u5e38\u904b\u7528\u7528 keyfile \u3067\u901a\u308b\u3053\u3068\u3001\u524a\u9664\u5f8c\u306b\u6b8b\u3059\u3079\u304d\u89e3\u9664\u5165\u53e3\u304c\u660e\u78ba\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --test-passphrase \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u524a\u9664\u524d\u306b\u306f LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3059\u308b\u3002\u3053\u308c\u306f\u3001key slot \u6574\u7406\u304c LUKS \u30d8\u30c3\u30c0\u30fc\u9818\u57df\u3092\u5909\u66f4\u3059\u308b\u64cd\u4f5c\u3060\u304b\u3089\u3067\u3042\u308b\u3002\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u5fa9\u65e7\u306b\u5f79\u7acb\u3064\u4e00\u65b9\u3067\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u306e key slot \u72b6\u614b\u3082\u542b\u3080\u305f\u3081\u3001\u6a5f\u5fae\u60c5\u5831\u3068\u3057\u3066\u6271\u3046\u5fc5\u8981\u304c\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u6307\u5b9a\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u306b LUKS \u30d8\u30c3\u30c0\u30fc\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksHeaderBackup \/dev\/sdX --header-backup-file luks-crypt_name-header-before-keyslot-cleanup-YYYYMMDD.img<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u524a\u9664\u306b\u306f luksKillSlot \u3092\u4f7f\u3046\u3002luksKillSlot \u306f\u3001\u6307\u5b9a\u3057\u305f slot \u756a\u53f7\u306e\u89e3\u9664\u5165\u53e3\u3092\u524a\u9664\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u3053\u308c\u306f\u30c7\u30fc\u30bf\u672c\u4f53\u3092\u6d88\u3059\u64cd\u4f5c\u3067\u306f\u306a\u3044\u304c\u3001\u524a\u9664\u3057\u305f slot \u306b\u5bfe\u5fdc\u3059\u308b\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084 keyfile \u3067\u306f\u958b\u3051\u306a\u304f\u306a\u308b\u3002\u6700\u5f8c\u306e\u6709\u52b9 key slot \u3092\u524a\u9664\u3059\u308b\u3068\u3001\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u672c\u4f53\u304c\u6b8b\u3063\u3066\u3044\u3066\u3082\u5fa9\u53f7\u4e0d\u80fd\u306b\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u524a\u9664\u5bfe\u8c61\u306e slot \u756a\u53f7\u3092 luksDump \u3068 test-passphrase \u3067\u78ba\u8a8d\u3057\u3066\u304b\u3089\u30011 \u3064\u305a\u3064\u524a\u9664\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksKillSlot \/dev\/sdX SLOT_NUMBER --key-file \/etc\/cryptsetup-keys\/crypt_name.key<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u4f8b\u3067\u306f\u3001\u65e2\u5b58\u306e\u6709\u52b9\u306a\u89e3\u9664\u624b\u6bb5\u3068\u3057\u3066 \/etc\/cryptsetup-keys\/crypt_name.key \u3092\u6307\u5b9a\u3057\u3001SLOT_NUMBER \u306e key slot \u3092\u524a\u9664\u3057\u3066\u3044\u308b\u3002SLOT_NUMBER \u306f\u8aac\u660e\u7528\u306e\u4eee\u540d\u3067\u3042\u308a\u3001\u5b9f\u969b\u306b\u306f luksDump \u3067\u78ba\u8a8d\u3057\u305f\u524a\u9664\u5bfe\u8c61 slot \u756a\u53f7\u306b\u7f6e\u304d\u63db\u3048\u308b\u3002\u524a\u9664\u5f8c\u306f\u3001luksDump \u3067\u6709\u52b9 slot \u304c\u60f3\u5b9a\u3069\u304a\u308a\u6e1b\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3001\u3055\u3089\u306b keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u4e21\u65b9\u3067 test-passphrase \u3092\u5b9f\u884c\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<table>\n<thead>\n<tr>\n<th>\u64cd\u4f5c<\/th>\n<th>\u76ee\u7684<\/th>\n<th>\u6ce8\u610f\u70b9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>luksDump<\/td>\n<td>\u6709\u52b9\u306a key slot \u3068 slot \u756a\u53f7\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>slot \u306e\u7528\u9014\u540d\u306f\u81ea\u52d5\u3067\u306f\u5206\u304b\u3089\u306a\u3044\u305f\u3081\u3001\u53f0\u5e33\u3068\u7167\u5408\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>test-passphrase<\/td>\n<td>keyfile \u3084\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u89e3\u9664\u3067\u304d\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>mapper \u3092\u4f5c\u3089\u305a\u306b\u89e3\u9664\u53ef\u5426\u3060\u3051\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>test-passphrase + key-slot<\/td>\n<td>\u7279\u5b9a slot \u304c\u7279\u5b9a\u306e\u89e3\u9664\u624b\u6bb5\u306b\u5bfe\u5fdc\u3059\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>keyfile \u7528 slot \u3092\u8aa4\u3063\u3066\u524a\u9664\u3057\u306a\u3044\u305f\u3081\u306b\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>luksHeaderBackup<\/td>\n<td>key slot \u5909\u66f4\u524d\u306e LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u4fdd\u5168\u3059\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u6a5f\u5fae\u60c5\u5831\u3068\u3057\u3066\u4fdd\u7ba1\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>luksKillSlot<\/td>\n<td>\u6307\u5b9a\u3057\u305f key slot \u3092\u524a\u9664\u3059\u308b\u3002<\/td>\n<td>\u6700\u5f8c\u306e\u6709\u52b9 slot \u3092\u6d88\u3059\u3068\u5fa9\u53f7\u4e0d\u80fd\u306b\u306a\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>luksRemoveKey \u3068 luksKillSlot \u306f\u4f3c\u3066\u3044\u308b\u304c\u3001\u4f7f\u3044\u3069\u3053\u308d\u304c\u9055\u3046\u3002luksRemoveKey \u306f\u3001\u5165\u529b\u3057\u305f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306b\u5bfe\u5fdc\u3059\u308b key slot \u3092\u524a\u9664\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u3069\u306e slot \u756a\u53f7\u304b\u3092\u610f\u8b58\u305b\u305a\u3001\u300c\u3053\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u7121\u52b9\u5316\u3057\u305f\u3044\u300d\u3068\u304d\u306b\u5411\u3044\u3066\u3044\u308b\u3002\u4e00\u65b9\u3001luksKillSlot \u306f\u3001slot \u756a\u53f7\u3092\u6307\u5b9a\u3057\u3066\u524a\u9664\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002luksDump \u3068 test-passphrase \u306b\u3088\u3063\u3066\u300c\u3053\u306e\u756a\u53f7\u306e slot \u306f\u4e0d\u8981\u300d\u3068\u5224\u65ad\u3067\u304d\u3066\u3044\u308b\u5834\u5408\u306f\u3001luksKillSlot \u306e\u307b\u3046\u304c\u610f\u56f3\u3092\u660e\u78ba\u306b\u3057\u3084\u3059\u3044<a class=\"ref\" href=\"#ref16\">[16]<\/a>\u3002<\/p>\n<p>key slot \u6574\u7406\u306e\u6700\u7d42\u72b6\u614b\u306f\u3001\u901a\u5e38\u904b\u7528\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u3088\u3046\u306b\u3001\u5f79\u5272\u304c\u660e\u78ba\u306a\u89e3\u9664\u5165\u53e3\u3060\u3051\u304c\u6b8b\u3063\u3066\u3044\u308b\u72b6\u614b\u3067\u3042\u308b\u3002\u7528\u9014\u4e0d\u660e\u306e slot \u3092\u6b8b\u3059\u3068\u3001\u904e\u53bb\u306e\u5f31\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u751f\u304d\u7d9a\u3051\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u4e00\u65b9\u3067\u3001\u524a\u9664\u3057\u3059\u304e\u308b\u3068\u5fa9\u65e7\u6027\u3092\u5931\u3046\u3002\u3057\u305f\u304c\u3063\u3066\u3001key slot \u7ba1\u7406\u3067\u306f\u3001\u8ffd\u52a0\u3001\u7167\u4f1a\u3001\u524a\u9664\u306e\u305d\u308c\u305e\u308c\u3092\u5358\u72ec\u64cd\u4f5c\u3068\u3057\u3066\u6271\u308f\u305a\u3001\u53f0\u5e33\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u89e3\u9664\u78ba\u8a8d\u3068\u7d44\u307f\u5408\u308f\u305b\u3066\u5b9f\u65bd\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<hr>\n<h2>10. LUKS \u30d8\u30c3\u30c0\u30fc\u306f\u53d6\u5f97\u3001\u4fdd\u7ba1\u3001\u7167\u5408\u3001\u5fa9\u5143\u624b\u9806\u307e\u3067\u542b\u3081\u3066\u7ba1\u7406\u3059\u308b<\/h2>\n<p>LUKS \u30d8\u30c3\u30c0\u30fc\u306f\u3001\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u672c\u4f53\u3078\u5230\u9054\u3059\u308b\u305f\u3081\u306e\u91cd\u8981\u306a\u30e1\u30bf\u30c7\u30fc\u30bf\u3067\u3042\u308b\u3002\u3053\u3053\u306b\u306f\u3001LUKS UUID\u3001\u6697\u53f7\u65b9\u5f0f\u3001data segment\u3001key slot\u3001KDF\u3001salt\u3001digest \u306a\u3069\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u305f\u3081\u306b\u5fc5\u8981\u306a\u60c5\u5831\u304c\u542b\u307e\u308c\u308b\u3002\u30c7\u30fc\u30bf\u9818\u57df\u304c\u7121\u50b7\u3067\u3082\u3001\u30d8\u30c3\u30c0\u30fc\u3084 key slot \u9818\u57df\u304c\u7834\u640d\u3059\u308c\u3070\u958b\u3051\u306a\u304f\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u3001\u5358\u306b\u30d5\u30a1\u30a4\u30eb\u3092 1 \u500b\u4fdd\u5b58\u3057\u3066\u7d42\u308f\u308b\u4f5c\u696d\u3067\u306f\u306a\u3044\u3002\u53d6\u5f97\u3057\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3068\u5bfe\u5fdc\u3065\u3051\u3001\u4fdd\u7ba1\u3057\u3001\u5fc5\u8981\u6642\u306b\u7167\u5408\u3057\u3001\u5fa9\u65e7\u6642\u3060\u3051\u5fa9\u5143\u3059\u308b\u305f\u3081\u306e\u904b\u7528\u624b\u9806\u3068\u3057\u3066\u6271\u3046\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u5f97\u3059\u308b\u5178\u578b\u7684\u306a\u30bf\u30a4\u30df\u30f3\u30b0\u306f\u3001\u521d\u671f\u4f5c\u6210\u76f4\u5f8c\u3001keyfile \u8ffd\u52a0\u5f8c\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u8ffd\u52a0\u5f8c\u3001\u4e0d\u8981 key slot \u524a\u9664\u524d\u3001\u79fb\u884c\u524d\u3001\u9000\u5f79\u5224\u65ad\u524d\u3067\u3042\u308b\u3002\u7279\u306b key slot \u3092\u5909\u66f4\u3059\u308b\u524d\u306b\u306f\u3001\u5909\u66f4\u524d\u306e\u72b6\u614b\u3078\u623b\u305b\u308b\u3088\u3046\u306b\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u5f97\u3059\u308b\u3002\u305f\u3060\u3057\u3001\u3053\u308c\u306f\u300c\u3044\u3064\u3067\u3082\u6c17\u8efd\u306b\u623b\u3059\u305f\u3081\u300d\u3067\u306f\u306a\u3044\u3002\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3084 key slot \u9818\u57df\u304c\u7834\u640d\u3057\u305f\u5834\u5408\u3001\u307e\u305f\u306f key slot \u5909\u66f4\u306b\u5931\u6557\u3057\u3066\u5fa9\u65e7\u304c\u5fc5\u8981\u306b\u306a\u3063\u305f\u5834\u5408\u306b\u4f7f\u3046\u5fa9\u65e7\u8cc7\u6750\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksHeaderBackup \/dev\/sdX --header-backup-file luks-crypt_name-header-YYYYMMDD.img<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306e\u76ee\u7684\u306f\u3001\/dev\/sdX \u306e LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u6307\u5b9a\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u3078\u9000\u907f\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001luks-crypt_name-header-YYYYMMDD.img \u306e\u3088\u3046\u306a\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d5\u30a1\u30a4\u30eb\u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067 \/dev\/sdX \u306f LUKS \u30c7\u30d0\u30a4\u30b9\u672c\u4f53\u3092\u6307\u3057\u3001\/dev\/mapper\/crypt_name \u3067\u306f\u306a\u3044\u3002\u5fa9\u53f7\u5f8c\u306e mapper device \u3067\u306f\u306a\u304f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u6301\u3064\u5143\u30c7\u30d0\u30a4\u30b9\u3092\u6307\u5b9a\u3059\u308b\u70b9\u304c\u91cd\u8981\u3067\u3042\u308b\u3002<\/p>\n<p>\u53d6\u5f97\u5f8c\u306f\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u3069\u306e LUKS \u30c7\u30d0\u30a4\u30b9\u306b\u5bfe\u5fdc\u3059\u308b\u304b\u3092\u5fc5\u305a\u8a18\u9332\u3059\u308b\u3002\u30d5\u30a1\u30a4\u30eb\u540d\u3060\u3051\u3067\u306f\u4e0d\u5341\u5206\u3067\u3042\u308b\u3002\u5c11\u306a\u304f\u3068\u3082\u3001\u5bfe\u8c61\u306e LUKS UUID\u3001\u53d6\u5f97\u65e5\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e by-id \u540d\u3001\u53d6\u5f97\u6642\u70b9\u306e key slot \u72b6\u614b\u3001\u4fdd\u5b58\u5834\u6240\u3001\u4fdd\u7ba1\u65b9\u6cd5\u3092\u53f0\u5e33\u306b\u6b8b\u3059\u3002\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u3001\u305d\u308c\u5358\u4f53\u3067\u76f4\u3061\u306b\u30c7\u30fc\u30bf\u3092\u5fa9\u53f7\u3059\u308b\u9375\u3067\u306f\u306a\u3044\u304c\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u306e key slot \u60c5\u5831\u3092\u542b\u3080\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u305d\u306e\u6642\u70b9\u3067\u6709\u52b9\u3060\u3063\u305f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084 keyfile \u3068\u7d44\u307f\u5408\u308f\u3055\u308c\u308b\u3068\u3001\u5fa9\u53f7\u306b\u4f7f\u3048\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u9805\u76ee<\/th>\n<th>\u8a18\u9332\u3059\u308b\u5185\u5bb9<\/th>\n<th>\u76ee\u7684<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u53d6\u5f97\u65e5<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u4f5c\u6210\u3057\u305f\u65e5\u4ed8\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u3069\u306e\u6642\u70b9\u306e key slot \u72b6\u614b\u3078\u623b\u308b\u306e\u304b\u3092\u5224\u65ad\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS UUID<\/td>\n<td>luksDump \u3067\u8868\u793a\u3055\u308c\u308b UUID \u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u5bfe\u5fdc\u3065\u3051\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5bfe\u8c61\u5a92\u4f53<\/td>\n<td>\/dev\/disk\/by-id \u306e\u8b58\u5225\u5b50\u3001\u30e2\u30c7\u30eb\u3001\u30b7\u30ea\u30a2\u30eb\u3001\u5bb9\u91cf\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\/dev\/sdX \u306e\u5909\u5316\u306b\u3088\u308b\u53d6\u308a\u9055\u3048\u3092\u9632\u3050\u3002<\/td>\n<\/tr>\n<tr>\n<td>key slot \u72b6\u614b<\/td>\n<td>\u53d6\u5f97\u6642\u70b9\u3067\u6709\u52b9\u3060\u3063\u305f key slot \u3068\u7528\u9014\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5fa9\u5143\u3057\u305f\u5834\u5408\u306b\u3001\u3069\u306e\u89e3\u9664\u5165\u53e3\u304c\u5fa9\u6d3b\u3059\u308b\u304b\u3092\u5224\u65ad\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4fdd\u7ba1\u5834\u6240<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d5\u30a1\u30a4\u30eb\u306e\u4fdd\u5b58\u5148\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5fa9\u65e7\u6642\u306b\u5fc5\u8981\u306a\u30d5\u30a1\u30a4\u30eb\u3092\u63a2\u305b\u308b\u3088\u3046\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4fdd\u7ba1\u65b9\u6cd5<\/td>\n<td>\u6697\u53f7\u5316\u4fdd\u7ba1\u3001\u30aa\u30d5\u30e9\u30a4\u30f3\u4fdd\u7ba1\u3001\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u306a\u3069\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u81ea\u4f53\u306e\u6f0f\u6d29\u30ea\u30b9\u30af\u3092\u7ba1\u7406\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u5f97\u3057\u305f\u3089\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e\u73fe\u5728\u306e LUKS UUID \u3068\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3057\u305f LUKS UUID \u3092\u7167\u5408\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u3002\u901a\u5e38\u306f luksDump \u3067 UUID \u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u53f0\u5e33\u306b\u8a18\u9332\u3057\u305f UUID \u3068\u3001\u73fe\u5728\u898b\u3066\u3044\u308b\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e UUID \u304c\u4e00\u81f4\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u4e0d\u4e00\u81f4\u306e\u5834\u5408\u306f\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d5\u30a1\u30a4\u30eb\u307e\u305f\u306f\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u53d6\u308a\u9055\u3048\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3001\u5fa9\u5143\u64cd\u4f5c\u3078\u9032\u3093\u3067\u306f\u306a\u3089\u306a\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u3001\u4fdd\u5b58\u3057\u3066\u7d42\u308f\u308a\u3067\u306f\u306a\u304f\u3001\u5fa9\u65e7\u6642\u306b\u4f7f\u3048\u308b\u5f62\u3067\u4fdd\u7ba1\u3055\u308c\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u305f\u3060\u3057\u3001\u5b89\u6613\u306b\u5e73\u6587\u3067\u591a\u6570\u306e\u5834\u6240\u3078\u8907\u88fd\u3059\u308b\u3068\u3001\u4eca\u5ea6\u306f\u6f0f\u6d29\u30ea\u30b9\u30af\u304c\u5897\u3048\u308b\u3002\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306b\u306f key slot \u60c5\u5831\u304c\u542b\u307e\u308c\u308b\u305f\u3081\u3001\u53e4\u3044\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u653b\u6483\u8005\u304c\u5165\u624b\u3057\u3001\u3055\u3089\u306b\u5f53\u6642\u6709\u52b9\u3060\u3063\u305f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084 keyfile \u3082\u5165\u624b\u3057\u305f\u5834\u5408\u3001\u524a\u9664\u6e08\u307f\u306e\u89e3\u9664\u5165\u53e3\u304c\u5b9f\u8cea\u7684\u306b\u5fa9\u6d3b\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u5fa9\u65e7\u8cc7\u6750\u3067\u3042\u308b\u3068\u540c\u6642\u306b\u3001\u6a5f\u5fae\u60c5\u5831\u3068\u3057\u3066\u6271\u3046\u3002<\/p>\n<p>\u5fa9\u5143\u306b\u4f7f\u3046\u30b3\u30de\u30f3\u30c9\u306f luksHeaderRestore \u3067\u3042\u308b\u3002\u305f\u3060\u3057\u3001\u3053\u306e\u64cd\u4f5c\u306f\u8efd\u3044\u4fee\u5fa9\u3067\u306f\u306a\u3044\u3002\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u306e\u5185\u5bb9\u3067\u4e0a\u66f8\u304d\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u3064\u307e\u308a\u3001\u73fe\u5728\u306e key slot \u72b6\u614b\u3001\u73fe\u5728\u306e token\u3001\u73fe\u5728\u306e digest\u3001\u73fe\u5728\u306e\u30e1\u30bf\u30c7\u30fc\u30bf\u304c\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u3078\u623b\u308b\u3002\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u8ffd\u52a0\u3057\u305f\u5f8c\u306e\u30d8\u30c3\u30c0\u30fc\u3078\u623b\u3059\u306e\u304b\u3001\u53e4\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u524a\u9664\u524d\u306e\u30d8\u30c3\u30c0\u30fc\u3078\u623b\u3059\u306e\u304b\u306b\u3088\u3063\u3066\u3001\u5fa9\u5143\u5f8c\u306b\u6709\u52b9\u306b\u306a\u308b\u89e3\u9664\u5165\u53e3\u304c\u5909\u308f\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksHeaderRestore \/dev\/sdX --header-backup-file luks-crypt_name-header-YYYYMMDD.img<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u3092\u4f7f\u3046\u5834\u9762\u306f\u9650\u5b9a\u3055\u308c\u308b\u3002LUKS \u30d8\u30c3\u30c0\u30fc\u7834\u640d\u3067 luksDump \u304c\u6b63\u5e38\u306b\u8aad\u3081\u306a\u3044\u5834\u5408\u3001key slot \u6574\u7406\u306b\u5931\u6557\u3057\u3066\u5fa9\u65e7\u304c\u5fc5\u8981\u306a\u5834\u5408\u3001\u307e\u305f\u306f\u5fa9\u65e7\u624b\u9806\u66f8\u306b\u57fa\u3065\u3044\u3066\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u306e\u30d8\u30c3\u30c0\u30fc\u3078\u623b\u3059\u5fc5\u8981\u304c\u3042\u308b\u5834\u5408\u3067\u3042\u308b\u3002\u901a\u5e38\u306e\u78ba\u8a8d\u3001\u901a\u5e38\u306e\u30de\u30a6\u30f3\u30c8\u5931\u6557\u3001\u5358\u306a\u308b\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u5165\u529b\u30df\u30b9\u3001crypttab \u306e\u8a2d\u5b9a\u30df\u30b9\u3067\u306f\u3001\u6700\u521d\u306b\u4f7f\u3046\u3079\u304d\u64cd\u4f5c\u3067\u306f\u306a\u3044\u3002\u5fa9\u5143\u524d\u306b\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u53d6\u5f97\u65e5\u3001LUKS UUID\u3001\u5bfe\u8c61\u5a92\u4f53\u3001\u5fa9\u5143\u306b\u3088\u3063\u3066\u5fa9\u6d3b\u3059\u308b key slot \u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<p>\u30d8\u30c3\u30c0\u30fc\u5fa9\u5143\u3067\u6700\u3082\u5371\u967a\u306a\u306e\u306f\u3001\u9055\u3046\u30c7\u30d0\u30a4\u30b9\u306b\u9055\u3046\u30d8\u30c3\u30c0\u30fc\u3092\u623b\u3059\u3053\u3068\u3067\u3042\u308b\u3002LUKS \u30d8\u30c3\u30c0\u30fc\u306f\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u672c\u4f53\u3068\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u305f\u3081\u3001\u5225\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u30d8\u30c3\u30c0\u30fc\u3092\u8aa4\u3063\u3066 restore \u3059\u308b\u3068\u3001\u5143\u306e\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3051\u306a\u304f\u3059\u308b\u5371\u967a\u304c\u3042\u308b\u3002\u307e\u305f\u3001\u73fe\u5728\u306e\u30d8\u30c3\u30c0\u30fc\u3088\u308a\u53e4\u3044\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092 restore \u3059\u308b\u3068\u3001\u5f8c\u304b\u3089\u8ffd\u52a0\u3057\u305f\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084 keyfile \u304c\u6d88\u3048\u3001\u524a\u9664\u6e08\u307f\u306e\u53e4\u3044 key slot \u304c\u5fa9\u6d3b\u3059\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001restore \u306f\u300c\u58ca\u308c\u305f\u304b\u3089\u3068\u308a\u3042\u3048\u305a\u5b9f\u884c\u3059\u308b\u300d\u64cd\u4f5c\u3067\u306f\u306a\u304f\u3001\u5fa9\u65e7\u624b\u9806\u66f8\u306b\u57fa\u3065\u3044\u3066\u6700\u5f8c\u306b\u9078\u629e\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u64cd\u4f5c<\/th>\n<th>\u4f7f\u3046\u5834\u9762<\/th>\n<th>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c<\/th>\n<th>\u6ce8\u610f\u70b9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>luksHeaderBackup<\/td>\n<td>\u521d\u671f\u4f5c\u6210\u5f8c\u3001key slot \u5909\u66f4\u524d\u5f8c\u3001\u79fb\u884c\u524d\u3001\u9000\u5f79\u524d\u306b\u5b9f\u65bd\u3059\u308b\u3002<\/td>\n<td>LUKS \u30d8\u30c3\u30c0\u30fc\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d5\u30a1\u30a4\u30eb\u304c\u4f5c\u6210\u3055\u308c\u308b\u3002<\/td>\n<td>\u53d6\u5f97\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u306f\u6a5f\u5fae\u60c5\u5831\u3068\u3057\u3066\u4fdd\u7ba1\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>luksDump<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u7167\u5408\u3059\u308b\u3068\u304d\u306b\u4f7f\u3046\u3002<\/td>\n<td>LUKS UUID\u3001Version\u3001key slot \u72b6\u614b\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/td>\n<td>\u53f0\u5e33\u306e UUID \u3068\u4e00\u81f4\u3057\u306a\u3044\u5834\u5408\u306f\u5fa9\u5143\u3078\u9032\u307e\u306a\u3044\u3002<\/td>\n<\/tr>\n<tr>\n<td>luksHeaderRestore<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u7834\u640d\u3084 key slot \u5909\u66f4\u5931\u6557\u304b\u3089\u5fa9\u65e7\u3059\u308b\u3068\u304d\u306b\u4f7f\u3046\u3002<\/td>\n<td>\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u3078\u623b\u308b\u3002<\/td>\n<td>\u73fe\u5728\u306e key slot \u72b6\u614b\u3082\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u3078\u623b\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5b9f\u904b\u7528\u3067\u306f\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u8907\u6570\u4e16\u4ee3\u4fdd\u6301\u3059\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u305d\u306e\u5834\u5408\u3001\u6700\u65b0\u306e\u30d8\u30c3\u30c0\u30fc\u3060\u3051\u304c\u5e38\u306b\u6700\u9069\u3068\u306f\u9650\u3089\u306a\u3044\u3002key slot \u5909\u66f4\u524d\u306b\u623b\u3057\u305f\u3044\u5834\u5408\u306f\u5909\u66f4\u524d\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u5fc5\u8981\u306b\u306a\u308a\u3001\u73fe\u5728\u306e\u901a\u5e38\u904b\u7528\u72b6\u614b\u3078\u623b\u3057\u305f\u3044\u5834\u5408\u306f\u5909\u66f4\u5f8c\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u5fc5\u8981\u306b\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u30d5\u30a1\u30a4\u30eb\u540d\u306b\u306f\u65e5\u4ed8\u3068\u5bfe\u8c61\u540d\u3092\u542b\u3081\u3001\u53f0\u5e33\u306b\u306f\u305d\u306e\u6642\u70b9\u306e key slot \u7528\u9014\u307e\u3067\u8a18\u9332\u3059\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u5fa9\u5143\u6642\u306b\u300c\u3069\u306e\u6642\u70b9\u3078\u623b\u3059\u306e\u304b\u300d\u3092\u5224\u65ad\u3067\u304d\u308b\u3002<\/p>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d5\u30a1\u30a4\u30eb\u3068\u3057\u3066\u4fdd\u5b58\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u5fa9\u65e7\u53ef\u80fd\u306a\u8cc7\u6750\u3068\u3057\u3066\u7ba1\u7406\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u53d6\u5f97\u3001\u7167\u5408\u3001\u4fdd\u7ba1\u3001\u5fa9\u5143\u6761\u4ef6\u3001\u5fa9\u5143\u5f8c\u306e\u78ba\u8a8d\u307e\u3067\u3092\u542b\u3081\u3066\u521d\u3081\u3066\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u610f\u5473\u3092\u6301\u3064\u3002\u5fa9\u5143\u5f8c\u306b\u306f\u3001luksDump \u3067\u30d8\u30c3\u30c0\u30fc\u72b6\u614b\u3092\u78ba\u8a8d\u3057\u3001\u901a\u5e38\u904b\u7528\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067 test-passphrase \u3092\u884c\u3044\u3001\u5fc5\u8981\u3067\u3042\u308c\u3070 crypttab\u3001fstab\u3001\u53f0\u5e33\u3092\u66f4\u65b0\u3059\u308b\u3002\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9577\u671f\u904b\u7528\u306b\u304a\u3051\u308b\u6700\u5f8c\u306e\u5b89\u5168\u7db2\u3067\u3042\u308a\u3001\u540c\u6642\u306b\u8aa4\u7528\u3059\u308c\u3070\u73fe\u72b6\u3092\u58ca\u3059\u5f37\u3044\u64cd\u4f5c\u3067\u3082\u3042\u308b\u3002<\/p>\n<hr>\n<h2>11. \u81ea\u52d5\u8d77\u52d5\u3067\u306f\u6697\u53f7\u5316\u89e3\u9664\u3068\u30de\u30a6\u30f3\u30c8\u3092\u5225\u3005\u306b\u7ba1\u7406\u3059\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u8d77\u52d5\u6642\u306b\u81ea\u52d5\u5229\u7528\u3059\u308b\u5834\u5408\u3001\u8003\u3048\u308b\u3079\u304d\u5bfe\u8c61\u306f \/etc\/crypttab \u3068 \/etc\/fstab \u3060\u3051\u3067\u306f\u306a\u3044\u3002\u5b9f\u969b\u306b\u306f\u3001\u8d77\u52d5\u6642\u306b\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u3069\u306e\u540d\u524d\u3067\u958b\u304f\u304b\u3001\u3069\u306e\u5143\u30c7\u30d0\u30a4\u30b9\u3092\u53c2\u7167\u3059\u308b\u304b\u3001\u3069\u306e keyfile \u307e\u305f\u306f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u89e3\u9664\u3059\u308b\u304b\u3001\u89e3\u9664\u5f8c\u306e mapper device \u3092\u3069\u3053\u3078\u30de\u30a6\u30f3\u30c8\u3059\u308b\u304b\u3001\u5931\u6557\u6642\u306b\u8d77\u52d5\u3092\u6b62\u3081\u308b\u306e\u304b\u5f85\u3064\u306e\u304b\u3001initramfs \u306b keyfile \u304c\u5fc5\u8981\u306a\u306e\u304b\u3001systemd \u304c\u3069\u306e unit \u3092\u751f\u6210\u3059\u308b\u306e\u304b\u307e\u3067\u3092\u542b\u3081\u3066\u8a2d\u8a08\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002systemd \u306e crypttab \u306f\u3001\u6697\u53f7\u5316 block device \u3092 \/dev\/mapper \u4ee5\u4e0b\u3078\u8a2d\u5b9a\u3059\u308b\u9759\u7684\u8a2d\u5b9a\u3068\u3057\u3066\u6271\u308f\u308c\u3001systemd-cryptsetup-generator \u306f\u8d77\u52d5\u6642\u306b crypttab \u304b\u3089\u5fc5\u8981\u306a unit \u3092\u751f\u6210\u3059\u308b<a class=\"ref\" href=\"#ref17\">[17]<\/a><a class=\"ref\" href=\"#ref18\">[18]<\/a>\u3002\u4e00\u65b9\u3001fstab \u306f filesystem \u3092\u3069\u3053\u3078 mount \u3059\u308b\u304b\u3092\u5b9a\u7fa9\u3057\u3001systemd.mount \u306f fstab \u306a\u3069\u304b\u3089 mount unit \u3092\u6271\u3046<a class=\"ref\" href=\"#ref19\">[19]<\/a><a class=\"ref\" href=\"#ref20\">[20]<\/a>\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u81ea\u52d5\u8d77\u52d5\u306e\u8a2d\u8a08\u3067\u306f\u3001\u6697\u53f7\u5316\u89e3\u9664\u3068\u30de\u30a6\u30f3\u30c8\u3092\u5206\u3051\u3066\u7406\u89e3\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u6700\u521d\u306b\u5206\u3051\u308b\u3079\u304d\u306a\u306e\u306f\u3001crypttab \u304c\u62c5\u5f53\u3059\u308b\u5c64\u3068 fstab \u304c\u62c5\u5f53\u3059\u308b\u5c64\u3067\u3042\u308b\u3002crypttab \u306f\u3001\u6697\u53f7\u5316\u3055\u308c\u305f\u5143\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304d\u3001\/dev\/mapper\/crypt_name \u306e\u3088\u3046\u306a\u5fa9\u53f7\u5f8c\u306e mapper device \u3092\u4f5c\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u3067\u3042\u308b\u3002fstab \u306f\u3001\u305d\u306e mapper device \u4e0a\u306b\u3042\u308b ext4 \u306a\u3069\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u3001\/mnt\/crypt_name \u3084 \/srv\/data \u306e\u3088\u3046\u306a\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3078\u63a5\u7d9a\u3059\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u3067\u3042\u308b\u3002\u3064\u307e\u308a\u3001crypttab \u306f\u300c\u958b\u304f\u8a2d\u5b9a\u300d\u3067\u3042\u308a\u3001fstab \u306f\u300c\u30de\u30a6\u30f3\u30c8\u3059\u308b\u8a2d\u5b9a\u300d\u3067\u3042\u308b\u3002\u3053\u306e\u4e8c\u3064\u3092\u6df7\u540c\u3059\u308b\u3068\u3001mapper \u306f\u4f5c\u6210\u3055\u308c\u3066\u3044\u308b\u304c\u30de\u30a6\u30f3\u30c8\u3055\u308c\u306a\u3044\u3001\u307e\u305f\u306f fstab \u306b\u306f\u30de\u30a6\u30f3\u30c8\u8a2d\u5b9a\u304c\u3042\u308b\u304c mapper \u304c\u5b58\u5728\u3057\u306a\u3044\u3001\u3068\u3044\u3046\u72b6\u614b\u306b\u306a\u308b\u3002<\/p>\n<h3>11.1 \u73fe\u5728\u306e\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a\u3092\u5909\u66f4\u3059\u308b\u524d\u306b\u306f\u3001\u307e\u305a\u73fe\u5728\u306e crypttab\u3001fstab\u3001mapper\u3001\u30d6\u30ed\u30c3\u30af\u30c7\u30d0\u30a4\u30b9\u968e\u5c64\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u306e\u78ba\u8a8d\u306e\u76ee\u7684\u306f\u3001\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306b\u4f55\u304c\u66f8\u304b\u308c\u3066\u3044\u308b\u304b\u3092\u898b\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u8a2d\u5b9a\u3068\u5b9f\u4f53\u304c\u4e00\u81f4\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002crypttab \u306b\u66f8\u304b\u308c\u305f mapper \u540d\u304c\u5b9f\u969b\u306b \/dev\/mapper \u4ee5\u4e0b\u306b\u73fe\u308c\u308b\u304b\u3001fstab \u306b\u66f8\u304b\u308c\u305f\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u304c\u5b9f\u969b\u306b mount \u3055\u308c\u308b\u304b\u3001lsblk -f \u3067\u898b\u3048\u308b\u968e\u5c64\u304c\u60f3\u5b9a\u3069\u304a\u308a\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">cat \/etc\/crypttab<br \/>\ncat \/etc\/fstab<br \/>\nls -l \/dev\/mapper\/<br \/>\nlsblk -f<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001crypttab \u306b\u5b9a\u7fa9\u3055\u308c\u305f mapper \u540d\u304c \/dev\/mapper \u4ee5\u4e0b\u306b\u5b58\u5728\u3057\u3001fstab \u306b\u5b9a\u7fa9\u3055\u308c\u305f\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u304c lsblk -f \u306e MOUNTPOINTS \u306b\u8868\u793a\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002mapper \u304c\u5b58\u5728\u3057\u306a\u3044\u5834\u5408\u306f\u3001\u6697\u53f7\u5316\u89e3\u9664\u306b\u5931\u6557\u3057\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002mapper \u306f\u5b58\u5728\u3059\u308b\u304c\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u306f\u3001fstab\u3001mount option\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u5074\u306e\u554f\u984c\u3067\u3042\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3002\u3053\u306e\u5207\u308a\u5206\u3051\u306b\u3088\u308a\u3001\u8d77\u52d5\u6642\u306e\u5931\u6557\u3092\u300cLUKS \u304c\u958b\u3051\u306a\u3044\u554f\u984c\u300d\u3068\u300c\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u30de\u30a6\u30f3\u30c8\u3067\u304d\u306a\u3044\u554f\u984c\u300d\u306b\u5206\u3051\u3066\u8abf\u67fb\u3067\u304d\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u78ba\u8a8d\u5bfe\u8c61<\/th>\n<th>\u898b\u308b\u5834\u6240<\/th>\n<th>\u5206\u304b\u308b\u3053\u3068<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>crypttab<\/td>\n<td>\/etc\/crypttab \u3092\u898b\u308b\u3002<\/td>\n<td>\u3069\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u3001\u3069\u306e mapper \u540d\u3067\u3001\u3069\u306e keyfile \u307e\u305f\u306f\u65b9\u5f0f\u3067\u958b\u304f\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>fstab<\/td>\n<td>\/etc\/fstab \u3092\u898b\u308b\u3002<\/td>\n<td>\u5fa9\u53f7\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u3001\u3069\u306e\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3078\u63a5\u7d9a\u3059\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>mapper<\/td>\n<td>\/dev\/mapper \u3092\u898b\u308b\u3002<\/td>\n<td>crypttab \u306b\u3088\u3063\u3066\u4f5c\u3089\u308c\u308b\u306f\u305a\u306e mapper device \u304c\u5b58\u5728\u3059\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30c7\u30d0\u30a4\u30b9\u968e\u5c64<\/td>\n<td>lsblk -f \u3092\u898b\u308b\u3002<\/td>\n<td>\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS\u3001mapper\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u306e\u3064\u306a\u304c\u308a\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>11.2 crypttab \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u8a2d\u5b9a\u3067\u3042\u308b<\/h3>\n<p>crypttab \u306b\u306f\u3001\u8d77\u52d5\u6642\u307e\u305f\u306f systemd \u7ba1\u7406\u4e0b\u3067\u958b\u304f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u5b9a\u7fa9\u3059\u308b\u3002\u57fa\u672c\u7684\u306a\u8003\u3048\u65b9\u306f\u3001mapper \u540d\u3001\u5143\u30c7\u30d0\u30a4\u30b9\u3001keyfile\u3001option \u3092 1 \u884c\u306b\u66f8\u304f\u3053\u3068\u3067\u3042\u308b\u3002mapper \u540d\u306f \/dev\/mapper \u4ee5\u4e0b\u306b\u4f5c\u3089\u308c\u308b\u540d\u524d\u3067\u3042\u308a\u3001\u5143\u30c7\u30d0\u30a4\u30b9\u306f LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u6301\u3064\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308b\u3002\u5143\u30c7\u30d0\u30a4\u30b9\u306b\u306f \/dev\/sdX \u306e\u3088\u3046\u306a\u5909\u52d5\u3057\u3084\u3059\u3044\u540d\u524d\u3067\u306f\u306a\u304f\u3001UUID \u306a\u3069\u306e\u6c38\u7d9a\u7684\u306a\u8b58\u5225\u5b50\u3092\u4f7f\u3046\u306e\u304c\u671b\u307e\u3057\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">crypt_name UUID=LUKS_DEVICE_UUID \/etc\/cryptsetup-keys\/crypt_name.key luks<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u4f8b\u3067\u306f\u3001UUID=LUKS_DEVICE_UUID \u3067\u8b58\u5225\u3055\u308c\u308b LUKS \u30c7\u30d0\u30a4\u30b9\u3092\u3001\/etc\/cryptsetup-keys\/crypt_name.key \u3067\u89e3\u9664\u3057\u3001crypt_name \u3068\u3044\u3046 mapper \u540d\u3067\u958b\u304f\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u8d77\u52d5\u6642\u307e\u305f\u306f systemd \u306e\u51e6\u7406\u6642\u306b \/dev\/mapper\/crypt_name \u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u6307\u5b9a\u3059\u308b UUID \u306f\u3001\u5fa9\u53f7\u5f8c\u306e ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID \u3067\u306f\u306a\u304f\u3001LUKS \u30c7\u30d0\u30a4\u30b9\u5074\u306e UUID \u3067\u3042\u308b\u3002LUKS UUID \u3068\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID \u3092\u6df7\u540c\u3059\u308b\u3068\u3001crypttab \u304c\u6b63\u3057\u3044\u5bfe\u8c61\u3092\u958b\u3051\u306a\u304f\u306a\u308b\u3002<\/p>\n<p>keyfile \u3092 crypttab \u3067\u6307\u5b9a\u3059\u308b\u5834\u5408\u3001\u305d\u306e keyfile \u304c\u8d77\u52d5\u6642\u306b\u8aad\u3081\u308b\u5834\u6240\u306b\u5b58\u5728\u3059\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u8ffd\u52a0\u30c7\u30fc\u30bf\u30c7\u30a3\u30b9\u30af\u3092 root filesystem \u8d77\u52d5\u5f8c\u306b\u958b\u304f\u69cb\u6210\u3067\u3042\u308c\u3070\u3001\/etc\/cryptsetup-keys\/crypt_name.key \u306e\u3088\u3046\u306a root filesystem \u4e0a\u306e keyfile \u3092\u4f7f\u3048\u308b\u3002\u4e00\u65b9\u3001root filesystem \u81ea\u4f53\u3092\u958b\u304f\u305f\u3081\u306b keyfile \u304c\u5fc5\u8981\u306a\u69cb\u6210\u3067\u306f\u3001\u305d\u306e keyfile \u304c initramfs \u306b\u542b\u307e\u308c\u308b\u304b\u3001\u8d77\u52d5\u6642\u306b\u5225\u306e\u65b9\u6cd5\u3067\u53c2\u7167\u3067\u304d\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u81ea\u52d5\u8d77\u52d5\u8a2d\u8a08\u3067\u306f\u3001\u300ckeyfile \u304c\u5b58\u5728\u3059\u308b\u5834\u6240\u300d\u3068\u300c\u305d\u306e keyfile \u304c\u5fc5\u8981\u306b\u306a\u308b\u6642\u70b9\u300d\u3092\u5fc5\u305a\u5bfe\u5fdc\u3065\u3051\u3066\u8003\u3048\u308b\u3002<\/p>\n<h3>11.3 fstab \u306f\u5fa9\u53f7\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u8a2d\u5b9a\u3067\u3042\u308b<\/h3>\n<p>fstab \u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u3069\u3053\u3078\u30de\u30a6\u30f3\u30c8\u3059\u308b\u304b\u3092\u5b9a\u7fa9\u3059\u308b\u8a2d\u5b9a\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5834\u5408\u3001fstab \u304c\u76f4\u63a5\u6271\u3046\u306e\u306f\u6697\u53f7\u5316\u524d\u306e \/dev\/sdX \u3067\u306f\u306a\u304f\u3001crypttab \u306b\u3088\u3063\u3066\u958b\u304b\u308c\u305f\u5f8c\u306e \/dev\/mapper\/crypt_name\u3001\u307e\u305f\u306f\u305d\u306e\u4e0a\u306b\u3042\u308b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID \u3067\u3042\u308b\u3002\u3064\u307e\u308a\u3001fstab \u306f\u6697\u53f7\u5316\u3092\u89e3\u9664\u3057\u306a\u3044\u3002fstab \u306f\u3001\u3059\u3067\u306b\u958b\u304b\u308c\u3066\u3044\u308b mapper device \u4e0a\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u3001\u6307\u5b9a\u3057\u305f\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3078\u63a5\u7d9a\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">\/dev\/mapper\/crypt_name \/mnt\/crypt_name ext4 defaults 0 2<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u4f8b\u3067\u306f\u3001\/dev\/mapper\/crypt_name \u4e0a\u306e ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092 \/mnt\/crypt_name \u3078\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u8d77\u52d5\u5f8c\u306b \/mnt\/crypt_name \u304c\u5229\u7528\u53ef\u80fd\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002mapper \u304c\u4f5c\u6210\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u3001\u3053\u306e fstab \u884c\u306f\u6210\u529f\u3057\u306a\u3044\u3002\u3057\u305f\u304c\u3063\u3066\u3001fstab \u306e\u8a2d\u5b9a\u3060\u3051\u3092\u898b\u3066\u3082\u81ea\u52d5\u8d77\u52d5\u306f\u5b8c\u7d50\u3057\u306a\u3044\u3002\u5148\u306b crypttab \u306b\u3088\u3063\u3066 mapper \u304c\u4f5c\u6210\u3055\u308c\u3001\u305d\u306e\u5f8c\u306b fstab \u306b\u3088\u3063\u3066 mount \u3055\u308c\u308b\u3001\u3068\u3044\u3046\u9806\u5e8f\u3092\u524d\u63d0\u306b\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>fstab \u3067\u306f \/dev\/mapper\/crypt_name \u3092\u76f4\u63a5\u6307\u5b9a\u3059\u308b\u65b9\u6cd5\u3068\u3001\u5fa9\u53f7\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID \u3092\u6307\u5b9a\u3059\u308b\u65b9\u6cd5\u304c\u3042\u308b\u3002mapper \u540d\u3092\u4f7f\u3046\u3068 crypttab \u3068\u306e\u5bfe\u5fdc\u304c\u8aad\u307f\u3084\u3059\u3044\u3002\u4e00\u65b9\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID \u3092\u4f7f\u3046\u3068\u3001mapper \u540d\u3092\u5909\u66f4\u3057\u305f\u5834\u5408\u3067\u3082\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u81ea\u4f53\u3092\u8b58\u5225\u3057\u3084\u3059\u3044\u3002\u3069\u3061\u3089\u3092\u4f7f\u3046\u5834\u5408\u3067\u3082\u3001\u53f0\u5e33\u306b\u306f crypttab \u306e mapper \u540d\u3001LUKS UUID\u3001fstab \u306e\u6307\u5b9a\u65b9\u6cd5\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3092\u307e\u3068\u3081\u3066\u8a18\u9332\u3059\u308b\u3002<\/p>\n<h3>11.4 \u81ea\u52d5\u8d77\u52d5\u306e\u5931\u6557\u306f\u5c64\u3054\u3068\u306b\u5207\u308a\u5206\u3051\u308b<\/h3>\n<p>\u81ea\u52d5\u8d77\u52d5\u3067\u5931\u6557\u3057\u305f\u5834\u5408\u306f\u3001\u6697\u53f7\u5316\u89e3\u9664\u3001mapper \u4f5c\u6210\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u8a8d\u8b58\u3001\u30de\u30a6\u30f3\u30c8\u3001\u6a29\u9650\u3001\u4f9d\u5b58\u95a2\u4fc2\u3092\u9806\u306b\u5207\u308a\u5206\u3051\u308b\u3002\u305f\u3068\u3048\u3070\u3001\/dev\/mapper\/crypt_name \u304c\u5b58\u5728\u3057\u306a\u3044\u306a\u3089\u3001crypttab\u3001keyfile\u3001LUKS UUID\u3001systemd-cryptsetup \u5074\u3092\u8abf\u3079\u308b\u3002\/dev\/mapper\/crypt_name \u306f\u5b58\u5728\u3059\u308b\u304c\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3066\u3044\u306a\u3044\u306a\u3089\u3001fstab\u3001mount point\u3001filesystem UUID\u3001mount option\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u72b6\u614b\u3092\u8abf\u3079\u308b\u3002lsblk -f \u3067 mapper \u3068\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u306e\u95a2\u4fc2\u3092\u898b\u308b\u3068\u3001\u3053\u306e\u5207\u308a\u5206\u3051\u304c\u3057\u3084\u3059\u3044\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u75c7\u72b6<\/th>\n<th>\u898b\u308b\u5834\u6240<\/th>\n<th>\u8003\u3048\u3089\u308c\u308b\u539f\u56e0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>mapper \u304c\u5b58\u5728\u3057\u306a\u3044<\/td>\n<td>crypttab\u3001keyfile\u3001LUKS UUID\u3001systemd-cryptsetup \u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u6697\u53f7\u5316\u89e3\u9664\u306b\u5931\u6557\u3057\u3066\u3044\u308b\u3001\u5bfe\u8c61 UUID \u304c\u9055\u3046\u3001keyfile \u304c\u8aad\u3081\u306a\u3044\u3001crypttab \u306e mapper \u540d\u304c\u9055\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>mapper \u306f\u3042\u308b\u304c mount \u3055\u308c\u306a\u3044<\/td>\n<td>fstab\u3001mount point\u3001filesystem UUID\u3001mount option \u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>fstab \u306e\u6307\u5b9a\u304c\u9055\u3046\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u304c\u306a\u3044\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b\u554f\u984c\u304c\u3042\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8d77\u52d5\u304c\u5f85\u305f\u3055\u308c\u308b<\/td>\n<td>crypttab option\u3001fstab option\u3001systemd unit \u306e\u4f9d\u5b58\u95a2\u4fc2\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304c\u5b58\u5728\u3057\u306a\u3044\u3001\u5916\u4ed8\u3051\u5a92\u4f53\u304c\u672a\u63a5\u7d9a\u3001\u30bf\u30a4\u30e0\u30a2\u30a6\u30c8\u6307\u5b9a\u304c\u4e0d\u8db3\u3057\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u624b\u52d5\u3067\u306f\u958b\u3051\u308b\u304c\u81ea\u52d5\u3067\u306f\u958b\u3051\u306a\u3044<\/td>\n<td>keyfile \u306e\u30d1\u30b9\u3001\u6a29\u9650\u3001\u8d77\u52d5\u6642\u306b\u8aad\u3081\u308b\u5834\u6240\u3001initramfs \u306e\u6709\u7121\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u901a\u5e38\u74b0\u5883\u3067\u306f\u8aad\u3081\u308b keyfile \u304c\u3001\u8d77\u52d5\u6642\u70b9\u3067\u306f\u307e\u3060\u5229\u7528\u3067\u304d\u306a\u3044\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u81ea\u52d5\u8d77\u52d5\u3092\u300ccrypttab \u306b\u66f8\u304f\u300d\u300cfstab \u306b\u66f8\u304f\u300d\u3068\u3044\u3046\u500b\u5225\u4f5c\u696d\u3068\u3057\u3066\u6271\u308f\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002crypttab \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u8a2d\u5b9a\u3067\u3042\u308a\u3001fstab \u306f\u958b\u3044\u305f\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u8a2d\u5b9a\u3067\u3042\u308b\u3002systemd \u306f\u305d\u306e\u8a2d\u5b9a\u304b\u3089\u8d77\u52d5\u6642\u306e unit \u3092\u751f\u6210\u3057\u3001\u4f9d\u5b58\u95a2\u4fc2\u306b\u5f93\u3063\u3066\u51e6\u7406\u3059\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u81ea\u52d5\u8d77\u52d5\u306e\u904b\u7528\u3067\u306f\u3001LUKS UUID\u3001mapper \u540d\u3001keyfile\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3001\u8d77\u52d5\u6642\u306b keyfile \u304c\u8aad\u3081\u308b\u304b\u3001\u5931\u6557\u6642\u306b\u3069\u3046\u5207\u308a\u5206\u3051\u308b\u304b\u307e\u3067\u3092\u542b\u3081\u3066\u53f0\u5e33\u5316\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<hr>\n<h2>12. LVM \u3068\u7d44\u307f\u5408\u308f\u305b\u308b\u5834\u5408\u306f\u5c64\u306e\u9806\u5e8f\u3092\u624b\u9806\u3068\u3057\u3066\u7ba1\u7406\u3059\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3068 LVM \u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u5834\u5408\u3001\u6700\u3082\u91cd\u8981\u306a\u306e\u306f\u3001\u3069\u3061\u3089\u304c\u4e0b\u4f4d\u5c64\u3067\u3069\u3061\u3089\u304c\u4e0a\u4f4d\u5c64\u306a\u306e\u304b\u3092\u660e\u78ba\u306b\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002device-mapper \u306f dm-crypt \u3084 LVM \u306a\u3069\u8907\u6570\u306e mapper \u3092\u7a4d\u307f\u91cd\u306d\u3089\u308c\u308b\u4ed5\u7d44\u307f\u3067\u3042\u308a\u3001LVM \u306f\u7269\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3001\u30dc\u30ea\u30e5\u30fc\u30e0\u30b0\u30eb\u30fc\u30d7\u3001\u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3092\u7ba1\u7406\u3059\u308b<a class=\"ref\" href=\"#ref21\">[21]<\/a><a class=\"ref\" href=\"#ref22\">[22]<\/a>\u3002\u305d\u306e\u305f\u3081\u3001LUKS \u306e\u4e0a\u306b LVM \u3092\u4f5c\u308b\u69cb\u6210\u3068\u3001LVM \u306e\u4e0a\u306b LUKS \u3092\u4f5c\u308b\u69cb\u6210\u3067\u306f\u3001\u521d\u671f\u751f\u6210\u3001\u901a\u5e38\u904b\u7528\u3001\u78ba\u8a8d\u3001\u5fa9\u65e7\u306e\u9806\u756a\u304c\u5909\u308f\u308b\u3002\u3053\u3053\u3092\u66d6\u6627\u306b\u3059\u308b\u3068\u3001\u3069\u306e\u30c7\u30d0\u30a4\u30b9\u306b luksFormat \u3059\u308b\u306e\u304b\u3001\u3069\u306e\u30c7\u30d0\u30a4\u30b9\u306b pvcreate \u3059\u308b\u306e\u304b\u3001\u3069\u306e mapper \u3092 mount \u3059\u308b\u306e\u304b\u304c\u5206\u304b\u3089\u306a\u304f\u306a\u308b\u3002<\/p>\n<p>LVM \u3068 LUKS \u306e\u7d44\u307f\u5408\u308f\u305b\u306b\u306f\u3001\u5927\u304d\u304f 2 \u3064\u306e\u69cb\u6210\u304c\u3042\u308b\u30021 \u3064\u76ee\u306f\u3001\u7269\u7406\u30c7\u30a3\u30b9\u30af\u307e\u305f\u306f\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092 LUKS \u3067\u6697\u53f7\u5316\u3057\u3001\u305d\u306e\u5fa9\u53f7\u5f8c\u306e mapper device \u306e\u4e0a\u306b LVM \u3092\u4f5c\u308b\u69cb\u6210\u3067\u3042\u308b\u3002\u3053\u306e\u69cb\u6210\u3067\u306f\u3001\u30c7\u30a3\u30b9\u30af\u5168\u4f53\u307e\u305f\u306f\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u5168\u4f53\u3092\u6697\u53f7\u5316\u3057\u305f\u3046\u3048\u3067\u3001\u305d\u306e\u5185\u90e8\u306b\u8907\u6570\u306e\u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3092\u4f5c\u308c\u308b\u30022 \u3064\u76ee\u306f\u3001\u5148\u306b LVM \u3092\u4f5c\u308a\u3001\u305d\u306e\u4e2d\u306e\u7279\u5b9a\u306e\u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3060\u3051\u3092 LUKS \u3067\u6697\u53f7\u5316\u3059\u308b\u69cb\u6210\u3067\u3042\u308b\u3002\u3053\u306e\u69cb\u6210\u3067\u306f\u3001\u6697\u53f7\u5316\u3057\u305f\u3044 LV \u3060\u3051\u3092\u9078\u3093\u3067\u6697\u53f7\u5316\u3067\u304d\u308b\u3002\u3069\u3061\u3089\u304c\u6b63\u3057\u3044\u3068\u3044\u3046\u8a71\u3067\u306f\u306a\u304f\u3001\u4fdd\u8b77\u3057\u305f\u3044\u7bc4\u56f2\u3001\u8d77\u52d5\u6642\u306e\u89e3\u9664\u9806\u5e8f\u3001\u5fa9\u65e7\u6642\u306e\u4f5c\u696d\u5358\u4f4d\u306b\u3088\u3063\u3066\u9078\u3076\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u69cb\u6210<\/th>\n<th>\u5c64\u306e\u9806\u5e8f<\/th>\n<th>\u5411\u3044\u3066\u3044\u308b\u7528\u9014<\/th>\n<th>\u5fa9\u65e7\u6642\u306e\u8003\u3048\u65b9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>LUKS \u306e\u4e0a\u306b LVM<\/td>\n<td>\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS\u3001mapper\u3001PV\u3001VG\u3001LV\u3001filesystem \u306e\u9806\u306b\u306a\u308b\u3002<\/td>\n<td>\u30c7\u30a3\u30b9\u30af\u307e\u305f\u306f\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u5168\u4f53\u3092\u6697\u53f7\u5316\u3057\u3001\u305d\u306e\u5185\u90e8\u3092 LVM \u3067\u5206\u5272\u3057\u305f\u3044\u5834\u5408\u306b\u5411\u304f\u3002<\/td>\n<td>\u307e\u305a LUKS \u3092\u958b\u304d\u3001\u305d\u306e\u5f8c\u306b LVM \u3092\u8a8d\u8b58\u3055\u305b\u3001LV \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LVM \u306e\u4e0a\u306b LUKS<\/td>\n<td>\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001PV\u3001VG\u3001LV\u3001LUKS\u3001mapper\u3001filesystem \u306e\u9806\u306b\u306a\u308b\u3002<\/td>\n<td>\u7279\u5b9a\u306e LV \u3060\u3051\u3092\u6697\u53f7\u5316\u3057\u305f\u3044\u5834\u5408\u306b\u5411\u304f\u3002<\/td>\n<td>\u307e\u305a LVM \u3092\u8a8d\u8b58\u3055\u305b\u3001\u305d\u306e\u5f8c\u306b\u5bfe\u8c61 LV \u306e LUKS \u3092\u958b\u304d\u3001mapper \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>12.1 LUKS \u306e\u4e0a\u306b LVM \u3092\u4f5c\u308b\u69cb\u6210<\/h3>\n<p>LUKS \u306e\u4e0a\u306b LVM \u3092\u4f5c\u308b\u69cb\u6210\u3067\u306f\u3001\u6700\u521d\u306b\u7269\u7406\u30c7\u30a3\u30b9\u30af\u307e\u305f\u306f\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092 LUKS \u3067\u6697\u53f7\u5316\u3059\u308b\u3002\u305d\u306e\u5f8c\u3001\u5fa9\u53f7\u3057\u3066\u73fe\u308c\u305f \/dev\/mapper\/crypt_name \u3092 LVM \u306e\u7269\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3068\u3057\u3066\u767b\u9332\u3059\u308b\u3002\u3053\u3053\u3067\u91cd\u8981\u306a\u306e\u306f\u3001pvcreate \u306e\u5bfe\u8c61\u304c \/dev\/sdX \u3067\u306f\u306a\u304f\u3001\u5fa9\u53f7\u5f8c\u306e \/dev\/mapper\/crypt_name \u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\/dev\/sdX \u306b\u76f4\u63a5 pvcreate \u3059\u308b\u3068\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u58ca\u3059\u5371\u967a\u304c\u3042\u308b\u3002<\/p>\n<p>Debian Installer \u3067\u300c\u6697\u53f7\u5316 LVM\u300d\u3092\u9078\u629e\u3057\u305f\u5834\u5408\u3001\u901a\u5e38\u306f LUKS \u306e\u4e0a\u306b LVM \u3092\u4f5c\u308b\u69cb\u6210\u306b\u306a\u308b\u3002\u3064\u307e\u308a\u3001\u30c7\u30a3\u30b9\u30af\u4e0a\u306e\u6697\u53f7\u5316\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092 cryptsetup \/ dm-crypt \u3067\u958b\u304d\u3001\u305d\u306e\u5fa9\u53f7\u5f8c\u306e mapper device \u3092 LVM \u306e PV \u3068\u3057\u3066\u6271\u3044\u3001\u305d\u306e\u4e0a\u306b VG \/ LV \u3092\u4f5c\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u5fa9\u65e7\u6642\u306e\u9806\u5e8f\u306f\u3001\u307e\u305a LUKS \u3092\u958b\u304d\u3001\u6b21\u306b LVM \u3092\u8a8d\u8b58\u3057\u3001\u6700\u5f8c\u306b\u5404 LV \u4e0a\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3001\u3068\u3044\u3046\u9806\u5e8f\u306b\u306a\u308b\u3002<\/p>\n<p>\u521d\u671f\u751f\u6210\u3067\u306f\u3001\u307e\u305a LUKS \u30c7\u30d0\u30a4\u30b9\u3092\u4f5c\u6210\u3057\u3001\u958b\u304f\u3002\u3053\u308c\u306f\u6697\u53f7\u5316\u3055\u308c\u305f\u5916\u67a0\u3092\u4f5c\u308a\u3001\u305d\u306e\u4e2d\u306b LVM \u3092\u7f6e\u304f\u305f\u3081\u306e\u6e96\u5099\u3067\u3042\u308b\u3002\u6b21\u306e 2 \u3064\u306e\u30b3\u30de\u30f3\u30c9\u306f\u3001\u6700\u521d\u306b LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u4f5c\u308a\u3001\u305d\u306e\u5f8c\u306b\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3044\u3066 \/dev\/mapper\/crypt_name \u3092\u4f5c\u308b\u3002luksFormat \u306f\u7834\u58ca\u7684\u64cd\u4f5c\u3067\u3042\u308b\u305f\u3081\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u78ba\u5b9a\u3057\u3066\u304b\u3089\u5b9f\u884c\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksFormat --type luks2 \/dev\/sdX<br \/>\nsudo cryptsetup open \/dev\/sdX crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/crypt_name \u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e\u6642\u70b9\u3067\u306f\u3001\u307e\u3060 LVM \u3082\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3082\u5b58\u5728\u3057\u306a\u3044\u3002\u6b21\u306b\u3001\u3053\u306e mapper device \u3092 LVM \u306e\u7269\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3068\u3057\u3066\u521d\u671f\u5316\u3057\u3001VG \u3068 LV \u3092\u4f5c\u308b\u3002\u3053\u3053\u3067 pvcreate \u306e\u5bfe\u8c61\u306f\u5fc5\u305a \/dev\/mapper\/crypt_name \u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo pvcreate \/dev\/mapper\/crypt_name<br \/>\nsudo vgcreate vg_name \/dev\/mapper\/crypt_name<br \/>\nsudo lvcreate -n lv_name -L 100G vg_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e 3 \u3064\u306e\u64cd\u4f5c\u306b\u3088\u308a\u3001\u5fa9\u53f7\u5f8c\u306e mapper device \u304c PV \u306b\u306a\u308a\u3001\u305d\u306e\u4e0a\u306b VG \u304c\u4f5c\u3089\u308c\u3001\u305d\u306e VG \u306e\u4e2d\u306b LV \u304c\u4f5c\u3089\u308c\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/vg_name\/lv_name \u307e\u305f\u306f \/dev\/mapper\/vg_name-lv_name \u3068\u3057\u3066\u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u304c\u898b\u3048\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e LV \u306f\u307e\u3060\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u6301\u305f\u306a\u3044\u305f\u3081\u3001\u6b21\u306b mkfs.ext4 \u3092\u5b9f\u884c\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mkfs.ext4 \/dev\/vg_name\/lv_name<br \/>\nsudo mkdir -p \/mnt\/lv_name<br \/>\nsudo mount \/dev\/vg_name\/lv_name \/mnt\/lv_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u69cb\u6210\u3067 mkfs.ext4 \u306e\u5bfe\u8c61\u306b\u306a\u308b\u306e\u306f\u3001LUKS \u30c7\u30d0\u30a4\u30b9\u3067\u3082 \/dev\/mapper\/crypt_name \u3067\u3082\u306a\u304f\u3001LVM \u304c\u4f5c\u6210\u3057\u305f LV \u3067\u3042\u308b\u3002\u3064\u307e\u308a\u3001\u6697\u53f7\u5316\u306e\u5916\u67a0\u3092\u958b\u304d\u3001\u305d\u306e\u4e2d\u306e LVM \u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u308b\u3002\u3053\u306e\u9806\u5e8f\u3092\u5b88\u308b\u3053\u3068\u3067\u3001\u30c7\u30a3\u30b9\u30af\u5168\u4f53\u3092\u6697\u53f7\u5316\u3057\u3064\u3064\u3001\u5185\u90e8\u3092 LVM \u3067\u67d4\u8edf\u306b\u5206\u5272\u3067\u304d\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6bb5\u968e<\/th>\n<th>\u5bfe\u8c61<\/th>\n<th>\u5b9f\u65bd\u5185\u5bb9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u6697\u53f7\u5316<\/td>\n<td>\/dev\/sdX<\/td>\n<td>LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u4f5c\u6210\u3057\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3068\u3057\u3066\u521d\u671f\u5316\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u89e3\u9664<\/td>\n<td>\/dev\/sdX<\/td>\n<td>cryptsetup open \u306b\u3088\u308a \/dev\/mapper\/crypt_name \u3092\u4f5c\u6210\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LVM \u521d\u671f\u5316<\/td>\n<td>\/dev\/mapper\/crypt_name<\/td>\n<td>\u5fa9\u53f7\u5f8c\u306e mapper device \u3092 PV \u3068\u3057\u3066\u767b\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u4f5c\u6210<\/td>\n<td>VG<\/td>\n<td>VG \u5185\u306b LV \u3092\u4f5c\u6210\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u4f5c\u6210<\/td>\n<td>\/dev\/vg_name\/lv_name<\/td>\n<td>LV \u4e0a\u306b ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30de\u30a6\u30f3\u30c8<\/td>\n<td>\/dev\/vg_name\/lv_name<\/td>\n<td>LV \u4e0a\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3078\u63a5\u7d9a\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>12.2 LVM \u306e\u4e0a\u306b LUKS \u3092\u4f5c\u308b\u69cb\u6210<\/h3>\n<p>LVM \u306e\u4e0a\u306b LUKS \u3092\u4f5c\u308b\u69cb\u6210\u3067\u306f\u3001\u5148\u306b\u7269\u7406\u30c7\u30a3\u30b9\u30af\u307e\u305f\u306f\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092 LVM \u306e PV \u3068\u3057\u3066\u767b\u9332\u3057\u3001VG \u3068 LV \u3092\u4f5c\u308b\u3002\u305d\u306e\u5f8c\u3001\u7279\u5b9a\u306e LV \u3092 LUKS \u3067\u6697\u53f7\u5316\u3059\u308b\u3002\u3053\u306e\u69cb\u6210\u3067\u306f\u3001LVM \u5168\u4f53\u3067\u306f\u306a\u304f\u3001\u9078\u3093\u3060\u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3060\u3051\u304c\u6697\u53f7\u5316\u5bfe\u8c61\u306b\u306a\u308b\u3002\u305f\u3068\u3048\u3070\u3001\u540c\u3058 VG \u306e\u4e2d\u306b\u901a\u5e38\u306e LV \u3068\u6697\u53f7\u5316 LV \u3092\u4e26\u3079\u305f\u3044\u5834\u5408\u3084\u3001\u65e2\u5b58\u306e LVM \u74b0\u5883\u306b\u6697\u53f7\u5316\u9818\u57df\u3092\u8ffd\u52a0\u3057\u305f\u3044\u5834\u5408\u306b\u5411\u304f\u3002<\/p>\n<p>\u521d\u671f\u751f\u6210\u3067\u306f\u3001\u307e\u305a LVM \u306e PV\u3001VG\u3001LV \u3092\u4f5c\u308b\u3002\u3053\u3053\u3067\u306f \/dev\/sdX \u3092 LVM \u306e\u7269\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3068\u3057\u3066\u4f7f\u3046\u4f8b\u3092\u793a\u3059\u3002\u65e2\u5b58\u306e LVM \u74b0\u5883\u306b\u8ffd\u52a0\u3059\u308b\u5834\u5408\u306f\u3001pvcreate \u3084 vgcreate \u3092\u5b9f\u884c\u3059\u308b\u5bfe\u8c61\u3092\u8aa4\u308b\u3068\u65e2\u5b58\u69cb\u6210\u3092\u7834\u58ca\u3059\u308b\u305f\u3081\u3001\u4e8b\u524d\u306b pvs\u3001vgs\u3001lvs\u3001lsblk -f \u3067\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo pvcreate \/dev\/sdX<br \/>\nsudo vgcreate vg_name \/dev\/sdX<br \/>\nsudo lvcreate -n lv_crypt -L 100G vg_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/vg_name\/lv_crypt \u3068\u3044\u3046 LV \u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e\u6642\u70b9\u3067\u306f\u3001\u307e\u3060\u6697\u53f7\u5316\u3055\u308c\u3066\u3044\u306a\u3044\u901a\u5e38\u306e LV \u3067\u3042\u308b\u3002\u6b21\u306b\u3001\u3053\u306e LV \u81ea\u4f53\u3092 LUKS \u30c7\u30d0\u30a4\u30b9\u3068\u3057\u3066\u521d\u671f\u5316\u3059\u308b\u3002\u3053\u3053\u3067 luksFormat \u306e\u5bfe\u8c61\u306f \/dev\/sdX \u3067\u306f\u306a\u304f\u3001\/dev\/vg_name\/lv_crypt \u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksFormat --type luks2 \/dev\/vg_name\/lv_crypt<br \/>\nsudo cryptsetup open \/dev\/vg_name\/lv_crypt crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u64cd\u4f5c\u306b\u3088\u308a\u3001LV \u306e\u4e2d\u306b LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u4f5c\u3089\u308c\u3001open \u5f8c\u306b \/dev\/mapper\/crypt_name \u304c\u73fe\u308c\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/vg_name\/lv_crypt \u304c\u6697\u53f7\u5316\u30b3\u30f3\u30c6\u30ca\u306b\u306a\u308a\u3001\u305d\u306e\u5fa9\u53f7\u5f8c\u306e mapper device \u3068\u3057\u3066 \/dev\/mapper\/crypt_name \u304c\u4f7f\u3048\u308b\u72b6\u614b\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067 mkfs.ext4 \u3092\u5b9f\u884c\u3059\u308b\u5bfe\u8c61\u306f\u3001LVM \u306e LV \u3067\u306f\u306a\u304f\u3001\u5fa9\u53f7\u5f8c\u306e \/dev\/mapper\/crypt_name \u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mkfs.ext4 \/dev\/mapper\/crypt_name<br \/>\nsudo mkdir -p \/mnt\/crypt_name<br \/>\nsudo mount \/dev\/mapper\/crypt_name \/mnt\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u69cb\u6210\u3067\u306f\u3001LVM \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5916\u5074\u306b\u3042\u308a\u3001LUKS \u306f\u7279\u5b9a LV \u306e\u5185\u5074\u306b\u3042\u308b\u3002\u305d\u306e\u305f\u3081\u3001\u5fa9\u65e7\u6642\u306b\u306f\u3001\u307e\u305a LVM \u3092\u8a8d\u8b58\u3055\u305b\u3066 \/dev\/vg_name\/lv_crypt \u3092\u898b\u3048\u308b\u72b6\u614b\u306b\u3057\u3001\u305d\u306e\u5f8c\u306b cryptsetup open \u3067 LUKS \u3092\u958b\u304d\u3001\u6700\u5f8c\u306b \/dev\/mapper\/crypt_name \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002LUKS \u306e\u4e0a\u306b LVM \u3092\u4f5c\u308b\u69cb\u6210\u3068\u306f\u9806\u5e8f\u304c\u9006\u306b\u306a\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6bb5\u968e<\/th>\n<th>\u5bfe\u8c61<\/th>\n<th>\u5b9f\u65bd\u5185\u5bb9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>LVM \u521d\u671f\u5316<\/td>\n<td>\/dev\/sdX<\/td>\n<td>\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u307e\u305f\u306f\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092 PV \u3068\u3057\u3066\u767b\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>VG \u4f5c\u6210<\/td>\n<td>PV<\/td>\n<td>PV \u3092\u542b\u3080 VG \u3092\u4f5c\u6210\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LV \u4f5c\u6210<\/td>\n<td>VG<\/td>\n<td>\u6697\u53f7\u5316\u5bfe\u8c61\u306b\u3059\u308b LV \u3092\u4f5c\u6210\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6697\u53f7\u5316<\/td>\n<td>\/dev\/vg_name\/lv_crypt<\/td>\n<td>LV \u3092 LUKS \u30c7\u30d0\u30a4\u30b9\u3068\u3057\u3066\u521d\u671f\u5316\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u89e3\u9664<\/td>\n<td>\/dev\/vg_name\/lv_crypt<\/td>\n<td>cryptsetup open \u306b\u3088\u308a \/dev\/mapper\/crypt_name \u3092\u4f5c\u6210\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u4f5c\u6210<\/td>\n<td>\/dev\/mapper\/crypt_name<\/td>\n<td>\u5fa9\u53f7\u5f8c\u306e mapper device \u4e0a\u306b ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>12.3 \u901a\u5e38\u904b\u7528\u3067\u306f\u69cb\u6210\u3054\u3068\u306b\u958b\u304f\u9806\u5e8f\u304c\u5909\u308f\u308b<\/h3>\n<p>LUKS \u3068 LVM \u3092\u7d44\u307f\u5408\u308f\u305b\u305f\u69cb\u6210\u3067\u306f\u3001\u901a\u5e38\u904b\u7528\u3067\u3082\u5c64\u306e\u9806\u5e8f\u3092\u610f\u8b58\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002LUKS \u306e\u4e0a\u306b LVM \u304c\u3042\u308b\u5834\u5408\u306f\u3001\u307e\u305a LUKS \u3092\u958b\u304d\u3001\u305d\u306e\u4e2d\u306b\u3042\u308b LVM \u3092\u6709\u52b9\u5316\u3057\u3001\u5bfe\u8c61 LV \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002LVM \u306e\u4e0a\u306b LUKS \u304c\u3042\u308b\u5834\u5408\u306f\u3001\u307e\u305a LVM \u304c\u898b\u3048\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3001\u305d\u306e\u4e2d\u306e\u5bfe\u8c61 LV \u3092 LUKS \u3068\u3057\u3066\u958b\u304d\u3001\u5fa9\u53f7\u5f8c\u306e mapper device \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002<\/p>\n<p>LUKS \u306e\u4e0a\u306b LVM \u3092\u4f5c\u3063\u305f\u69cb\u6210\u3067\u306f\u3001\u901a\u5e38\u904b\u7528\u306f\u6b21\u306e\u9806\u306b\u306a\u308b\u3002\u6700\u521d\u306b LUKS \u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u3002\u6b21\u306b LVM \u306e VG \u3092\u6709\u52b9\u5316\u3059\u308b\u3002\u6700\u5f8c\u306b\u5bfe\u8c61 LV \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/crypt_name \u304c\u4f5c\u3089\u308c\u3001VG \u304c active \u306b\u306a\u308a\u3001\/mnt\/lv_name \u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u30de\u30a6\u30f3\u30c8\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open \/dev\/sdX crypt_name<br \/>\nsudo vgchange -ay vg_name<br \/>\nsudo mount \/dev\/vg_name\/lv_name \/mnt\/lv_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u7d42\u4e86\u6642\u306f\u9006\u9806\u3067\u9589\u3058\u308b\u3002\u307e\u305a\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3057\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066 VG \u3092\u975e active \u306b\u3057\u3001\u6700\u5f8c\u306b LUKS \u306e mapper \u3092\u9589\u3058\u308b\u3002expect \u3055\u308c\u308b\u72b6\u614b\u306f\u3001\u30de\u30a6\u30f3\u30c8\u304c\u89e3\u9664\u3055\u308c\u3001LV \u304c\u4f7f\u308f\u308c\u3066\u304a\u3089\u305a\u3001\/dev\/mapper\/crypt_name \u304c\u6d88\u3048\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sync<br \/>\nsudo umount \/mnt\/lv_name<br \/>\nsudo vgchange -an vg_name<br \/>\nsudo cryptsetup close crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>LVM \u306e\u4e0a\u306b LUKS \u3092\u4f5c\u3063\u305f\u69cb\u6210\u3067\u306f\u3001\u901a\u5e38\u904b\u7528\u306f\u6b21\u306e\u9806\u306b\u306a\u308b\u3002LVM \u306e LV \u304c\u898b\u3048\u3066\u3044\u308b\u3053\u3068\u3092\u524d\u63d0\u306b\u3001\u305d\u306e LV \u3092 LUKS \u3068\u3057\u3066\u958b\u304d\u3001\u5fa9\u53f7\u5f8c\u306e mapper device \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/vg_name\/lv_crypt \u3092\u5143\u306b \/dev\/mapper\/crypt_name \u304c\u4f5c\u3089\u308c\u3001\/mnt\/crypt_name \u3078\u30de\u30a6\u30f3\u30c8\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open \/dev\/vg_name\/lv_crypt crypt_name<br \/>\nsudo mount \/dev\/mapper\/crypt_name \/mnt\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u7d42\u4e86\u6642\u306f\u3001\u307e\u305a\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3057\u3001\u6700\u5f8c\u306b cryptsetup close \u3067 mapper \u3092\u9589\u3058\u308b\u3002LVM \u306e\u4e0a\u306b LUKS \u304c\u3042\u308b\u69cb\u6210\u3067\u306f\u3001VG \u81ea\u4f53\u3092\u505c\u6b62\u3059\u308b\u304b\u3069\u3046\u304b\u306f\u3001\u305d\u306e VG \u306b\u4ed6\u306e LV \u304c\u3042\u308b\u304b\u306b\u3088\u3063\u3066\u5224\u65ad\u3059\u308b\u3002VG \u5185\u306e\u4ed6\u306e LV \u304c\u5229\u7528\u4e2d\u3067\u3042\u308c\u3070\u3001VG \u5168\u4f53\u3092\u975e active \u306b\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sync<br \/>\nsudo umount \/mnt\/crypt_name<br \/>\nsudo cryptsetup close crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<table>\n<thead>\n<tr>\n<th>\u69cb\u6210<\/th>\n<th>\u958b\u59cb\u9806\u5e8f<\/th>\n<th>\u7d42\u4e86\u9806\u5e8f<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>LUKS \u306e\u4e0a\u306b LVM<\/td>\n<td>LUKS \u3092\u958b\u304d\u3001VG \u3092\u6709\u52b9\u5316\u3057\u3001LV \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002<\/td>\n<td>LV \u3092\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3057\u3001VG \u3092\u975e active \u306b\u3057\u3001LUKS \u3092\u9589\u3058\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LVM \u306e\u4e0a\u306b LUKS<\/td>\n<td>LV \u3092\u78ba\u8a8d\u3057\u3001LUKS \u3092\u958b\u304d\u3001mapper \u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002<\/td>\n<td>mapper \u4e0a\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3057\u3001LUKS \u3092\u9589\u3058\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>12.4 \u72b6\u614b\u78ba\u8a8d\u3067\u306f LUKS \u3068 LVM \u306e\u4e21\u65b9\u3092\u898b\u308b<\/h3>\n<p>LVM \u3068 LUKS \u3092\u7d44\u307f\u5408\u308f\u305b\u305f\u69cb\u6210\u3067\u306f\u3001\u72b6\u614b\u78ba\u8a8d\u3082 1 \u3064\u306e\u30b3\u30de\u30f3\u30c9\u3067\u306f\u5b8c\u7d50\u3057\u306a\u3044\u3002LUKS \u5074\u3092\u898b\u308b\u306b\u306f cryptsetup status \u3084 luksDump \u3092\u4f7f\u3044\u3001LVM \u5074\u3092\u898b\u308b\u306b\u306f pvs\u3001vgs\u3001lvs \u3092\u4f7f\u3046\u3002\u3055\u3089\u306b lsblk -f \u3067\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS\u3001mapper\u3001PV\u3001VG\u3001LV\u3001filesystem\u3001mount point \u306e\u89aa\u5b50\u95a2\u4fc2\u3092\u898b\u308b\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u308b\u76ee\u7684\u306f\u3001\u5358\u306b\u8868\u793a\u3092\u773a\u3081\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u53f0\u5e33\u306b\u66f8\u3044\u305f\u5c64\u306e\u9806\u5e8f\u3068\u5b9f\u4f53\u304c\u4e00\u81f4\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo pvs<br \/>\nsudo vgs<br \/>\nsudo lvs<br \/>\nsudo cryptsetup status crypt_name<br \/>\nlsblk -f<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001LVM \u306e PV\u3001VG\u3001LV \u304c\u610f\u56f3\u3069\u304a\u308a\u8a8d\u8b58\u3055\u308c\u3001cryptsetup status \u3067 mapper \u304c active \u3068\u8868\u793a\u3055\u308c\u3001lsblk -f \u3067\u5c64\u306e\u9806\u5e8f\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002LUKS \u306e\u4e0a\u306b LVM \u304c\u3042\u308b\u69cb\u6210\u306a\u3089\u3001\/dev\/mapper\/crypt_name \u306e\u4e0a\u306b LVM2_member \u304c\u898b\u3048\u3001\u305d\u306e\u4e0a\u306b LV \u3068 filesystem \u304c\u898b\u3048\u308b\u3002LVM \u306e\u4e0a\u306b LUKS \u304c\u3042\u308b\u69cb\u6210\u306a\u3089\u3001\/dev\/vg_name\/lv_crypt \u304c crypto_LUKS \u3068\u3057\u3066\u898b\u3048\u3001\u305d\u306e\u4e0b\u306b\u5fa9\u53f7\u5f8c\u306e mapper \u3068 filesystem \u304c\u898b\u3048\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u78ba\u8a8d\u3057\u305f\u3044\u3053\u3068<\/th>\n<th>\u4f7f\u3046\u30b3\u30de\u30f3\u30c9<\/th>\n<th>\u5224\u65ad\u5185\u5bb9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>PV \u306e\u8a8d\u8b58<\/td>\n<td>pvs<\/td>\n<td>\u3069\u306e\u30c7\u30d0\u30a4\u30b9\u304c LVM \u306e\u7269\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>VG \u306e\u72b6\u614b<\/td>\n<td>vgs<\/td>\n<td>\u30dc\u30ea\u30e5\u30fc\u30e0\u30b0\u30eb\u30fc\u30d7\u306e\u5b58\u5728\u3001\u5bb9\u91cf\u3001\u7a7a\u304d\u9818\u57df\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LV \u306e\u72b6\u614b<\/td>\n<td>lvs<\/td>\n<td>\u8ad6\u7406\u30dc\u30ea\u30e5\u30fc\u30e0\u306e\u540d\u524d\u3001\u30b5\u30a4\u30ba\u3001\u5c5e\u6027\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS mapper<\/td>\n<td>cryptsetup status<\/td>\n<td>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u304c open \u3055\u308c\u3001mapper \u304c active \u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5c64\u306e\u9806\u5e8f<\/td>\n<td>lsblk -f<\/td>\n<td>\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS\u3001LVM\u3001filesystem\u3001mount point \u306e\u95a2\u4fc2\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>12.5 \u53f0\u5e33\u306b\u306f\u69cb\u6210\u30d1\u30bf\u30fc\u30f3\u3068\u5fa9\u65e7\u9806\u5e8f\u3092\u6b8b\u3059<\/h3>\n<p>LVM \u3068 LUKS \u306e\u7d44\u307f\u5408\u308f\u305b\u306f\u3001\u52d5\u3044\u3066\u3044\u308b\u9593\u306f\u610f\u8b58\u3057\u306a\u304f\u3066\u3082\u4f7f\u3048\u308b\u3002\u3057\u304b\u3057\u3001\u5fa9\u65e7\u6642\u306b\u306f\u9806\u756a\u3092\u9593\u9055\u3048\u308b\u3068\u3001\u5b58\u5728\u3059\u308b\u306f\u305a\u306e\u30c7\u30d0\u30a4\u30b9\u304c\u898b\u3048\u306a\u3044\u3001mapper \u306f\u3042\u308b\u304c LV \u304c\u898b\u3048\u306a\u3044\u3001LV \u306f\u3042\u308b\u304c LUKS \u304c\u958b\u3051\u306a\u3044\u3001\u3068\u3044\u3063\u305f\u72b6\u614b\u306b\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u53f0\u5e33\u306b\u306f\u3001LUKS \u306e\u4e0a\u306b LVM \u304c\u3042\u308b\u306e\u304b\u3001LVM \u306e\u4e0a\u306b LUKS \u304c\u3042\u308b\u306e\u304b\u3092\u5fc5\u305a\u8a18\u9332\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u53f0\u5e33\u9805\u76ee<\/th>\n<th>\u8a18\u9332\u3059\u308b\u5185\u5bb9<\/th>\n<th>\u76ee\u7684<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u69cb\u6210\u30d1\u30bf\u30fc\u30f3<\/td>\n<td>LUKS \u306e\u4e0a\u306b LVM\u3001\u307e\u305f\u306f LVM \u306e\u4e0a\u306b LUKS \u306e\u3069\u3061\u3089\u304b\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5fa9\u65e7\u6642\u306b\u6700\u521d\u306b\u958b\u304f\u5c64\u3092\u9593\u9055\u3048\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7269\u7406\u30c7\u30d0\u30a4\u30b9<\/td>\n<td>\/dev\/disk\/by-id\u3001\u30e2\u30c7\u30eb\u3001\u30b7\u30ea\u30a2\u30eb\u3001\u5bb9\u91cf\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\/dev\/sdX \u306e\u5909\u5316\u306b\u3088\u308b\u53d6\u308a\u9055\u3048\u3092\u9632\u3050\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS UUID<\/td>\n<td>luksDump \u3067\u8868\u793a\u3055\u308c\u308b UUID \u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u6c38\u7d9a\u7684\u306b\u8b58\u5225\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>mapper \u540d<\/td>\n<td>cryptsetup open \u3067\u6307\u5b9a\u3059\u308b\u540d\u524d\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>crypttab\u3001mount\u3001\u5fa9\u65e7\u624b\u9806\u3067\u540c\u3058\u540d\u524d\u3092\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>VG \/ LV \u540d<\/td>\n<td>vg_name\u3001lv_name\u3001lv_crypt \u306a\u3069\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>LVM \u5074\u306e\u64cd\u4f5c\u5bfe\u8c61\u3092\u660e\u78ba\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5fa9\u65e7\u9806\u5e8f<\/td>\n<td>LUKS \u3092\u5148\u306b\u958b\u304f\u306e\u304b\u3001LVM \u3092\u5148\u306b\u8a8d\u8b58\u3059\u308b\u306e\u304b\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u975e\u5e38\u6642\u306b\u6b63\u3057\u3044\u9806\u756a\u3067\u30c7\u30d0\u30a4\u30b9\u3092\u518d\u69cb\u6210\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001LVM \u3068 LUKS \u3092\u5358\u306a\u308b\u4fbf\u5229\u306a\u6a5f\u80fd\u3068\u3057\u3066\u91cd\u306d\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u3069\u3061\u3089\u3082 device-mapper \u3092\u4f7f\u3046\u305f\u3081\u3001\u91cd\u306d\u308b\u3053\u3068\u81ea\u4f53\u306f\u53ef\u80fd\u3067\u3042\u308b\u3002\u3057\u304b\u3057\u3001\u5c64\u306e\u9806\u5e8f\u3092\u53f0\u5e33\u5316\u3057\u3001\u521d\u671f\u751f\u6210\u3001\u901a\u5e38\u904b\u7528\u3001\u78ba\u8a8d\u3001\u5fa9\u65e7\u306e\u624b\u9806\u3092\u69cb\u6210\u3054\u3068\u306b\u5206\u3051\u3066\u304a\u304b\u306a\u3051\u308c\u3070\u3001\u9577\u671f\u904b\u7528\u3067\u306f\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u5931\u3046\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3068 LVM \u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u5834\u5408\u3001\u8a2d\u8a08\u306e\u672c\u4f53\u306f\u30b3\u30de\u30f3\u30c9\u5217\u3067\u306f\u306a\u304f\u3001\u3069\u306e\u5c64\u3092\u5148\u306b\u958b\u304d\u3001\u3069\u306e\u5c64\u3092\u5f8c\u304b\u3089\u8a8d\u8b58\u3057\u3001\u3069\u306e\u5c64\u3092\u6700\u5f8c\u306b\u30de\u30a6\u30f3\u30c8\u3059\u308b\u304b\u3092\u660e\u78ba\u306b\u3059\u308b\u3053\u3068\u306b\u3042\u308b\u3002<\/p>\n<hr>\n<h2>13. \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3068\u5a92\u4f53\u3092\u6bb5\u968e\u7684\u306b\u70b9\u691c\u3059\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u70b9\u691c\u3067\u306f\u3001\u300c\u958b\u3051\u308b\u304b\u300d\u3060\u3051\u3092\u78ba\u8a8d\u3057\u3066\u3082\u4e0d\u5341\u5206\u3067\u3042\u308b\u3002cryptsetup open \u304c\u6210\u529f\u3057\u3066 \/dev\/mapper\/crypt_name \u304c\u4f5c\u6210\u3055\u308c\u3066\u3082\u3001\u305d\u306e\u4e0a\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u58ca\u308c\u3066\u3044\u308c\u3070 mount \u3084\u8aad\u307f\u53d6\u308a\u306b\u5931\u6557\u3059\u308b\u3002\u3055\u3089\u306b\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u6b63\u5e38\u306b\u898b\u3048\u3066\u3082\u3001\u7269\u7406\u5a92\u4f53\u306b\u4e0d\u826f\u30bb\u30af\u30bf\u30fc\u3001USB \u63a5\u7d9a\u4e0d\u826f\u3001\u96fb\u6e90\u65ad\u3001I\/O \u30a8\u30e9\u30fc\u304c\u3042\u308c\u3070\u3001\u5c06\u6765\u306e\u5fa9\u5143\u53ef\u80fd\u6027\u306f\u4f4e\u4e0b\u3059\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u70b9\u691c\u3067\u306f\u3001\u6697\u53f7\u5316\u5c64\u3001mapper \u5c64\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u3001\u30de\u30a6\u30f3\u30c8\u72b6\u614b\u3001\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3001\u5a92\u4f53\u72b6\u614b\u3092\u9806\u756a\u306b\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002e2fsck \u306f ext2 \/ ext3 \/ ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u691c\u67fb\u3059\u308b\u305f\u3081\u306e\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308a\u3001fsck \u306f filesystem check \u306e\u30d5\u30ed\u30f3\u30c8\u30a8\u30f3\u30c9\u3068\u3057\u3066\u4f7f\u308f\u308c\u308b<a class=\"ref\" href=\"#ref23\">[23]<\/a><a class=\"ref\" href=\"#ref24\">[24]<\/a>\u3002<\/p>\n<h3>13.1 \u307e\u305a\u6697\u53f7\u5316\u5c64\u3092\u958b\u3051\u308b\u304b\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u70b9\u691c\u306e\u6700\u521d\u306b\u78ba\u8a8d\u3059\u308b\u306e\u306f\u3001LUKS \u30c7\u30d0\u30a4\u30b9\u3092\u89e3\u9664\u3067\u304d\u308b\u304b\u3067\u3042\u308b\u3002\u3053\u306e\u6bb5\u968e\u3067\u306f\u3001\u307e\u3060\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u5065\u5168\u6027\u307e\u3067\u306f\u5206\u304b\u3089\u306a\u3044\u3002\u78ba\u8a8d\u3067\u304d\u308b\u306e\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304c\u6b63\u3057\u304f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u8aad\u3081\u3001keyfile \u307e\u305f\u306f\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u89e3\u9664\u3067\u304d\u3001\u5fa9\u53f7\u5f8c\u306e mapper device \u3092\u4f5c\u308c\u308b\u3068\u3044\u3046\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u5931\u6557\u3059\u308b\u5834\u5408\u3001\u554f\u984c\u306f ext4 \u3067\u306f\u306a\u304f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001key slot\u3001keyfile\u3001\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u307e\u305f\u306f cryptsetup \u306e\u6307\u5b9a\u306b\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/crypt_name \u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067 \/dev\/sdX \u306f LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u6301\u3064\u5143\u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308a\u3001crypt_name \u306f\u5fa9\u53f7\u5f8c\u306b\u4f5c\u6210\u3055\u308c\u308b mapper \u540d\u3067\u3042\u308b\u3002open \u304c\u6210\u529f\u3057\u305f\u3089\u3001\u6b21\u306b status \u3068 lsblk -f \u3067\u3001\u6697\u53f7\u5316\u5c64\u304c\u671f\u5f85\u3069\u304a\u308a\u958b\u3044\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup status crypt_name<br \/>\nlsblk -f<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>cryptsetup status \u3067\u306f mapper \u304c active \u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002lsblk -f \u3067\u306f\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001crypto_LUKS\u3001mapper device\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u306e\u95a2\u4fc2\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u306e\u6bb5\u968e\u3067 mapper \u306f\u5b58\u5728\u3059\u308b\u304c mount \u3055\u308c\u3066\u3044\u306a\u3044\u72b6\u614b\u306a\u3089\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u691c\u67fb\u3078\u9032\u3080\u524d\u63d0\u304c\u6574\u3063\u3066\u3044\u308b\u3002<\/p>\n<h3>13.2 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u691c\u67fb\u306f\u672a\u30de\u30a6\u30f3\u30c8\u72b6\u614b\u3067\u884c\u3046<\/h3>\n<p>ext4 \u306e\u70b9\u691c\u3067\u306f\u3001\u539f\u5247\u3068\u3057\u3066\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3057\u3066\u3044\u306a\u3044\u72b6\u614b\u3067 e2fsck \u3092\u5b9f\u884c\u3059\u308b\u3002\u30de\u30a6\u30f3\u30c8\u4e2d\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b\u5bfe\u3057\u3066\u4fee\u5fa9\u3092\u884c\u3046\u3068\u3001\u30ab\u30fc\u30cd\u30eb\u304c\u8a8d\u8b58\u3057\u3066\u3044\u308b\u72b6\u614b\u3068 e2fsck \u304c\u5909\u66f4\u3059\u308b\u72b6\u614b\u304c\u885d\u7a81\u3059\u308b\u5371\u967a\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092 open \u3057\u305f\u5f8c\u3001\u307e\u3060 mount \u3057\u3066\u3044\u306a\u3044 \/dev\/mapper\/crypt_name \u3092\u5bfe\u8c61\u306b\u3057\u3066\u691c\u67fb\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo e2fsck -f \/dev\/mapper\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306e\u76ee\u7684\u306f\u3001\/dev\/mapper\/crypt_name \u4e0a\u306e ext4 \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u5f37\u5236\u7684\u306b\u691c\u67fb\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002-f \u306f\u3001\u901a\u5e38\u306a\u3089\u691c\u67fb\u4e0d\u8981\u3068\u5224\u65ad\u3055\u308c\u308b\u5834\u5408\u3067\u3082\u660e\u793a\u7684\u306b\u691c\u67fb\u3059\u308b\u6307\u5b9a\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u91cd\u5927\u306a\u30a8\u30e9\u30fc\u304c\u5831\u544a\u3055\u308c\u305a\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u6574\u5408\u3057\u305f\u72b6\u614b\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u30a8\u30e9\u30fc\u304c\u5831\u544a\u3055\u308c\u305f\u5834\u5408\u306f\u3001\u305d\u306e\u5834\u3067\u6a5f\u68b0\u7684\u306b\u4fee\u5fa9\u3092\u9032\u3081\u308b\u306e\u3067\u306f\u306a\u304f\u3001\u30c7\u30fc\u30bf\u6551\u51fa\u3092\u512a\u5148\u3059\u3079\u304d\u72b6\u6cc1\u304b\u3001\u4fee\u5fa9\u3057\u3066\u3088\u3044\u72b6\u6cc1\u304b\u3092\u5224\u65ad\u3059\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u72b6\u614b<\/th>\n<th>\u610f\u5473<\/th>\n<th>\u6b21\u306e\u5bfe\u5fdc<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30a8\u30e9\u30fc\u306a\u3057<\/td>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u6574\u5408\u6027\u306b\u5927\u304d\u306a\u554f\u984c\u304c\u898b\u3064\u304b\u3063\u3066\u3044\u306a\u3044\u72b6\u614b\u3067\u3042\u308b\u3002<\/td>\n<td>\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u307e\u305f\u306f\u901a\u5e38\u30de\u30a6\u30f3\u30c8\u3078\u9032\u3080\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8efd\u5fae\u306a\u4fee\u6b63\u3042\u308a<\/td>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u4e0a\u306e\u4e0d\u6574\u5408\u304c\u691c\u51fa\u3055\u308c\u3001\u4fee\u6b63\u3055\u308c\u305f\u72b6\u614b\u3067\u3042\u308b\u3002<\/td>\n<td>\u4fee\u6b63\u5185\u5bb9\u3092\u8a18\u9332\u3057\u3001\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3068\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u78ba\u8a8d\u3092\u884c\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u91cd\u5927\u306a\u30a8\u30e9\u30fc\u3042\u308a<\/td>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u7834\u640d\u3001\u5a92\u4f53\u969c\u5bb3\u3001\u904e\u53bb\u306e\u7570\u5e38\u7d42\u4e86\u306a\u3069\u304c\u7591\u308f\u308c\u308b\u72b6\u614b\u3067\u3042\u308b\u3002<\/td>\n<td>\u4fee\u5fa9\u3092\u7d9a\u3051\u308b\u524d\u306b\u3001\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u306e\u30c7\u30fc\u30bf\u6551\u51fa\u3001\u5a92\u4f53\u72b6\u614b\u78ba\u8a8d\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6709\u7121\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u691c\u67fb\u4e0d\u80fd<\/td>\n<td>\u5bfe\u8c61\u6307\u5b9a\u306e\u8aa4\u308a\u3001\u6697\u53f7\u5316\u5c64\u306e\u554f\u984c\u3001I\/O \u30a8\u30e9\u30fc\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u7a2e\u5225\u306e\u8aa4\u8a8d\u304c\u7591\u308f\u308c\u308b\u72b6\u614b\u3067\u3042\u308b\u3002<\/td>\n<td>lsblk -f\u3001cryptsetup status\u3001dmesg\u3001\u5a92\u4f53\u72b6\u614b\u3092\u78ba\u8a8d\u3057\u3001\u5c64\u3092\u5207\u308a\u5206\u3051\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>13.3 \u5fa9\u65e7\u6642\u306f\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u3092\u512a\u5148\u3059\u308b<\/h3>\n<p>\u901a\u5e38\u70b9\u691c\u3067\u306f e2fsck \u306e\u5f8c\u306b\u901a\u5e38\u30de\u30a6\u30f3\u30c8\u3057\u3066\u3082\u3088\u3044\u304c\u3001\u7570\u5e38\u304c\u7591\u308f\u308c\u308b\u5fa9\u65e7\u6642\u306b\u306f\u3001\u307e\u305a\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u3092\u8a66\u3059\u307b\u3046\u304c\u5b89\u5168\u3067\u3042\u308b\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3078\u65b0\u3057\u3044\u66f8\u304d\u8fbc\u307f\u3092\u884c\u308f\u305a\u306b\u5185\u5bb9\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306e\u624b\u6bb5\u3067\u3042\u308b\u3002\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u7834\u640d\u3084\u5a92\u4f53\u52a3\u5316\u304c\u7591\u308f\u308c\u308b\u5834\u5408\u3001\u5148\u306b\u30c7\u30fc\u30bf\u3092\u8aad\u3081\u308b\u3060\u3051\u6551\u51fa\u3057\u3001\u305d\u306e\u5f8c\u306b\u4fee\u5fa9\u3092\u691c\u8a0e\u3059\u308b\u307b\u3046\u304c\u3088\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mount -o ro \/dev\/mapper\/crypt_name \/mnt\/crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/crypt_name \u4ee5\u4e0b\u3067\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u72b6\u614b\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u30de\u30a6\u30f3\u30c8\u3067\u304d\u308b\u5834\u5408\u306f\u3001\u91cd\u8981\u30c7\u30fc\u30bf\u306e\u9000\u907f\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u4e00\u89a7\u306e\u53d6\u5f97\u3001\u5fc5\u8981\u30d5\u30a1\u30a4\u30eb\u306e\u30b3\u30d4\u30fc\u3092\u512a\u5148\u3059\u308b\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u3082\u30de\u30a6\u30f3\u30c8\u3067\u304d\u306a\u3044\u5834\u5408\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u7834\u640d\u304c\u3088\u308a\u6df1\u3044\u3001\u307e\u305f\u306f\u5a92\u4f53\u5074\u306e I\/O \u30a8\u30e9\u30fc\u304c\u767a\u751f\u3057\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/p>\n<h3>13.4 \u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3067\u306f\u4ee3\u8868\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3060\u3051\u3067\u7d42\u308f\u3089\u305b\u306a\u3044<\/h3>\n<p>\u30de\u30a6\u30f3\u30c8\u3067\u304d\u305f\u3053\u3068\u3068\u3001\u5fc5\u8981\u306a\u30c7\u30fc\u30bf\u304c\u8aad\u3081\u308b\u3053\u3068\u306f\u540c\u3058\u3067\u306f\u306a\u3044\u3002\u30de\u30a6\u30f3\u30c8\u6210\u529f\u5f8c\u306f\u3001\u4ee3\u8868\u7684\u306a\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u4e00\u89a7\u3057\u3001\u91cd\u8981\u306a\u30d5\u30a1\u30a4\u30eb\u3092\u5b9f\u969b\u306b\u8aad\u307f\u53d6\u308a\u3001\u5fc5\u8981\u3067\u3042\u308c\u3070\u30cf\u30c3\u30b7\u30e5\u78ba\u8a8d\u3084\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u5148\u3068\u306e\u6bd4\u8f03\u3092\u884c\u3046\u3002\u3053\u308c\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c mount \u3067\u304d\u3066\u3082\u3001\u4e00\u90e8\u306e\u30d5\u30a1\u30a4\u30eb\u3084\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3067 I\/O \u30a8\u30e9\u30fc\u304c\u51fa\u308b\u5834\u5408\u304c\u3042\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">ls -la \/mnt\/crypt_name<br \/>\nfind \/mnt\/crypt_name -maxdepth 2 -type f | head<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u78ba\u8a8d\u306e\u76ee\u7684\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5168\u4f53\u3092\u5b8c\u5168\u691c\u67fb\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u6700\u4f4e\u9650\u306e\u8aad\u307f\u53d6\u308a\u53ef\u80fd\u6027\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u4e00\u89a7\u304c\u53d6\u5f97\u3067\u304d\u3001\u4ee3\u8868\u7684\u306a\u30d5\u30a1\u30a4\u30eb\u304c\u8aad\u3081\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u5a92\u4f53\u3084\u9577\u671f\u4fdd\u7ba1\u5a92\u4f53\u3067\u306f\u3001\u3055\u3089\u306b\u91cd\u8981\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u5bfe\u8c61\u306b\u3057\u305f\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3001\u5bb9\u91cf\u78ba\u8a8d\u3001\u5dee\u5206\u78ba\u8a8d\u3001\u30cf\u30c3\u30b7\u30e5\u78ba\u8a8d\u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u3068\u3001\u5fa9\u5143\u53ef\u80fd\u6027\u306e\u8a55\u4fa1\u304c\u5b89\u5b9a\u3059\u308b\u3002<\/p>\n<h3>13.5 \u5a92\u4f53\u72b6\u614b\u306f smartctl \u3067\u5225\u306b\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u691c\u67fb\u7d50\u679c\u3060\u3051\u3067\u306f\u3001\u7269\u7406\u5a92\u4f53\u306e\u72b6\u614b\u306f\u5206\u304b\u3089\u306a\u3044\u3002HDD \u3084 SSD \u3067\u306f\u3001\u4ee3\u66ff\u51e6\u7406\u6e08\u307f\u30bb\u30af\u30bf\u30fc\u3001\u4e0d\u826f\u30bb\u30af\u30bf\u30fc\u3001\u6e29\u5ea6\u3001\u96fb\u6e90\u6295\u5165\u6642\u9593\u3001\u81ea\u5df1\u8a3a\u65ad\u7d50\u679c\u306a\u3069\u3092\u5225\u306b\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002smartmontools \u306f S.M.A.R.T. \u60c5\u5831\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306e\u4ee3\u8868\u7684\u306a\u30c4\u30fc\u30eb\u3067\u3042\u308b<a class=\"ref\" href=\"#ref25\">[25]<\/a>\u3002\u305f\u3060\u3057\u3001USB \u63a5\u7d9a\u306e\u5916\u4ed8\u3051\u5a92\u4f53\u3067\u306f\u3001USB-SATA \u30d6\u30ea\u30c3\u30b8\u306e\u4ed5\u69d8\u306b\u3088\u308a S.M.A.R.T. \u60c5\u5831\u304c\u53d6\u5f97\u3067\u304d\u306a\u3044\u5834\u5408\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo smartctl -a \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u30b3\u30de\u30f3\u30c9\u306e\u76ee\u7684\u306f\u3001\u7269\u7406\u5a92\u4f53\u5074\u306e\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u30c7\u30d0\u30a4\u30b9\u306e\u578b\u756a\u3001\u30b7\u30ea\u30a2\u30eb\u3001\u901a\u96fb\u6642\u9593\u3001\u30a8\u30e9\u30fc\u5c65\u6b74\u3001\u81ea\u5df1\u8a3a\u65ad\u7d50\u679c\u306a\u3069\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u898b\u308b\u5bfe\u8c61\u306f \/dev\/mapper\/crypt_name \u3067\u306f\u306a\u304f\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u5074\u306e \/dev\/sdX \u3067\u3042\u308b\u3002smartctl \u306f\u6697\u53f7\u5316\u5c64\u3084 ext4 \u3092\u898b\u308b\u30b3\u30de\u30f3\u30c9\u3067\u306f\u306a\u3044\u305f\u3081\u3001mapper device \u306b\u5bfe\u3057\u3066\u5b9f\u884c\u3057\u3066\u3082\u3001\u5a92\u4f53\u8a3a\u65ad\u3068\u3057\u3066\u306f\u610f\u5473\u304c\u305a\u308c\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u78ba\u8a8d\u5bfe\u8c61<\/th>\n<th>\u898b\u308b\u5185\u5bb9<\/th>\n<th>\u5224\u65ad\u5185\u5bb9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u901a\u96fb\u6642\u9593<\/td>\n<td>Power_On_Hours \u306a\u3069\u3092\u898b\u308b\u3002<\/td>\n<td>\u9577\u671f\u904b\u7528\u5a92\u4f53\u3068\u3057\u3066\u4f7f\u7528\u6642\u9593\u304c\u5927\u304d\u304f\u306a\u3063\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4e0d\u826f\u30bb\u30af\u30bf\u30fc<\/td>\n<td>Reallocated\u3001Pending\u3001Offline_Uncorrectable \u306a\u3069\u3092\u898b\u308b\u3002<\/td>\n<td>\u8aad\u307f\u53d6\u308a\u4e0d\u80fd\u3084\u518d\u914d\u7f6e\u304c\u767a\u751f\u3057\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6e29\u5ea6<\/td>\n<td>Temperature \u95a2\u9023\u306e\u5024\u3092\u898b\u308b\u3002<\/td>\n<td>\u9ad8\u6e29\u72b6\u614b\u304c\u7d99\u7d9a\u3057\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u81ea\u5df1\u8a3a\u65ad<\/td>\n<td>SMART overall-health self-assessment \u3084 self-test log \u3092\u898b\u308b\u3002<\/td>\n<td>\u5a92\u4f53\u5074\u304c\u7570\u5e38\u3092\u5831\u544a\u3057\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>13.6 \u70b9\u691c\u5f8c\u306f\u5fc5\u305a\u9589\u3058\u308b\u624b\u9806\u307e\u3067\u5b9f\u65bd\u3059\u308b<\/h3>\n<p>\u70b9\u691c\u306f\u3001\u958b\u3044\u3066\u78ba\u8a8d\u3057\u305f\u3068\u3053\u308d\u3067\u7d42\u308f\u308a\u3067\u306f\u306a\u3044\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304d\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u30de\u30a6\u30f3\u30c8\u3057\u305f\u5834\u5408\u306f\u3001\u6700\u5f8c\u306b sync\u3001umount\u3001close \u307e\u3067\u5b9f\u65bd\u3059\u308b\u3002\u7279\u306b\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u3067\u3042\u3063\u3066\u3082\u3001\u904b\u7528\u624b\u9806\u3068\u3057\u3066\u306f\u660e\u793a\u7684\u306b\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3057\u3001mapper device \u3092\u9589\u3058\u308b\u3068\u3053\u308d\u307e\u3067\u3092\u70b9\u691c\u624b\u9806\u306b\u542b\u3081\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sync<br \/>\nsudo umount \/mnt\/crypt_name<br \/>\nsudo cryptsetup close crypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/crypt_name \u304c\u30a2\u30f3\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3001\/dev\/mapper\/crypt_name \u304c\u6d88\u3048\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u70b9\u691c\u5f8c\u306b mapper device \u304c\u6b8b\u3063\u305f\u307e\u307e\u3060\u3068\u3001\u6b21\u56de\u4f5c\u696d\u6642\u306b\u73fe\u5728\u958b\u3044\u3066\u3044\u308b\u72b6\u614b\u306a\u306e\u304b\u3001\u65b0\u3057\u304f\u958b\u3044\u305f\u72b6\u614b\u306a\u306e\u304b\u304c\u5206\u304b\u308a\u306b\u304f\u304f\u306a\u308b\u3002lsblk -f \u3084 cryptsetup status \u3067\u3001\u70b9\u691c\u5f8c\u306e\u72b6\u614b\u304c\u9589\u3058\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u304a\u304f\u3068\u3088\u3044\u3002<\/p>\n<h3>13.7 \u70b9\u691c\u7d50\u679c\u306f\u53f0\u5e33\u3078\u6b8b\u3059<\/h3>\n<p>\u70b9\u691c\u306e\u76ee\u7684\u306f\u3001\u305d\u306e\u5834\u3067\u5b89\u5fc3\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u9577\u671f\u904b\u7528\u4e0a\u306e\u5224\u65ad\u6750\u6599\u3092\u6b8b\u3059\u3053\u3068\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306f\u3001\u6570\u5e74\u5f8c\u306b\u540c\u3058\u624b\u9806\u3067\u958b\u3051\u308b\u304b\u3001\u540c\u3058\u5a92\u4f53\u304c\u307e\u3060\u4f7f\u3048\u308b\u304b\u3001\u540c\u3058 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u6a5f\u80fd\u3059\u308b\u304b\u3092\u7d99\u7d9a\u7684\u306b\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u305d\u306e\u305f\u3081\u3001\u70b9\u691c\u7d50\u679c\u306f\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u53f0\u5e33\u9805\u76ee<\/th>\n<th>\u8a18\u9332\u3059\u308b\u5185\u5bb9<\/th>\n<th>\u76ee\u7684<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u70b9\u691c\u65e5<\/td>\n<td>\u70b9\u691c\u3092\u5b9f\u65bd\u3057\u305f\u65e5\u4ed8\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u6700\u7d42\u78ba\u8a8d\u65e5\u3092\u660e\u78ba\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5bfe\u8c61\u5a92\u4f53<\/td>\n<td>by-id\u3001LUKS UUID\u3001mapper \u540d\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u3069\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u70b9\u691c\u3057\u305f\u304b\u3092\u660e\u78ba\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u89e3\u9664\u78ba\u8a8d<\/td>\n<td>keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u5fc5\u8981\u306a key slot \u306e\u78ba\u8a8d\u7d50\u679c\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5c06\u6765\u3082\u958b\u3051\u308b\u72b6\u614b\u304c\u7dad\u6301\u3055\u308c\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u691c\u67fb<\/td>\n<td>e2fsck \u306e\u7d50\u679c\u3001\u4fee\u6b63\u6709\u7121\u3001\u7570\u5e38\u5185\u5bb9\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u6574\u5408\u6027\u3092\u8ffd\u8de1\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8aad\u307f\u53d6\u308a\u78ba\u8a8d<\/td>\n<td>\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u3001\u4ee3\u8868\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u78ba\u8a8d\u3001\u91cd\u8981\u30d5\u30a1\u30a4\u30eb\u78ba\u8a8d\u306e\u7d50\u679c\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u30c7\u30fc\u30bf\u304c\u5b9f\u969b\u306b\u8aad\u3081\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5a92\u4f53\u72b6\u614b<\/td>\n<td>smartctl \u306e\u4e3b\u8981\u7d50\u679c\u3001\u4e0d\u826f\u30bb\u30af\u30bf\u30fc\u3001\u6e29\u5ea6\u3001\u81ea\u5df1\u8a3a\u65ad\u7d50\u679c\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5a92\u4f53\u4ea4\u63db\u3084\u9000\u5f79\u5224\u65ad\u306e\u6750\u6599\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6b21\u56de\u5bfe\u5fdc<\/td>\n<td>\u7d99\u7d9a\u5229\u7528\u3001\u518d\u70b9\u691c\u3001\u79fb\u884c\u3001\u9000\u5f79\u5019\u88dc\u306a\u3069\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u70b9\u691c\u7d50\u679c\u3092\u904b\u7528\u5224\u65ad\u3078\u63a5\u7d9a\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u70b9\u691c\u5bfe\u8c61\u3092 1 \u3064\u306b\u7d5e\u3089\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u5c64\u304c\u958b\u3051\u308b\u3053\u3068\u3001mapper \u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3001ext4 \u304c\u6574\u5408\u3057\u3066\u3044\u308b\u3053\u3068\u3001\u8aad\u307f\u53d6\u308a\u3067\u304d\u308b\u3053\u3068\u3001\u7269\u7406\u5a92\u4f53\u304c\u5065\u5168\u3067\u3042\u308b\u3053\u3068\u3001\u70b9\u691c\u5f8c\u306b\u5b89\u5168\u306b\u9589\u3058\u3089\u308c\u308b\u3053\u3068\u306f\u3001\u305d\u308c\u305e\u308c\u5225\u306e\u78ba\u8a8d\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9577\u671f\u904b\u7528\u3067\u306f\u3001\u3053\u308c\u3089\u3092\u4e00\u9023\u306e\u70b9\u691c\u624b\u9806\u3068\u3057\u3066\u5b9f\u65bd\u3057\u3001\u7d50\u679c\u3092\u53f0\u5e33\u306b\u6b8b\u3059\u3053\u3068\u3067\u3001\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u7d99\u7d9a\u7684\u306b\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/p>\n<hr>\n<h2>14. \u6697\u53f7\u69cb\u6210\u3092\u68da\u5378\u3057\u3057\u3001\u79fb\u884c\u8981\u5426\u3092\u5224\u65ad\u3059\u308b<\/h2>\n<p>\u3053\u306e\u7ae0\u3067\u70b9\u691c\u3059\u308b\u5bfe\u8c61\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u6574\u5408\u6027\u3084\u7269\u7406\u5a92\u4f53\u306e\u6545\u969c\u3067\u306f\u306a\u3044\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u308b\u306e\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u304c\u3069\u306e\u4e16\u4ee3\u306e\u6697\u53f7\u69cb\u6210\u3067\u4f5c\u3089\u308c\u3066\u3044\u308b\u304b\u3067\u3042\u308b\u3002\u5177\u4f53\u7684\u306b\u306f\u3001LUKS1 \u304b LUKS2 \u304b\u3001AES-CBC-ESSIV \u304b AES-XTS \u304b\u3001PBKDF2 \u304b Argon2id \u304b\u3001\u6709\u52b9\u306a key slot \u304c\u3044\u304f\u3064\u3042\u308b\u304b\u3001\u73fe\u5728\u306e\u904b\u7528\u6a19\u6e96\u304b\u3089\u898b\u3066\u4e3b\u7cfb\u3068\u3057\u3066\u7dad\u6301\u3059\u3079\u304d\u304b\u3001\u4e92\u63db\u7528\u3068\u3057\u3066\u6b8b\u3059\u3079\u304d\u304b\u3001\u79fb\u884c\u5bfe\u8c61\u306b\u3059\u3079\u304d\u304b\u3092\u5224\u65ad\u3059\u308b\u3002\u3064\u307e\u308a\u3001\u3053\u306e\u7ae0\u306f\u300c\u58ca\u308c\u3066\u3044\u306a\u3044\u304b\u300d\u3092\u898b\u308b\u624b\u9806\u3067\u306f\u306a\u304f\u3001\u300c\u9577\u671f\u904b\u7528\u4e0a\u3001\u73fe\u5728\u306e\u6697\u53f7\u69cb\u6210\u3092\u3069\u3046\u4f4d\u7f6e\u4ed8\u3051\u308b\u304b\u300d\u3092\u6c7a\u3081\u308b\u68da\u5378\u3057\u624b\u9806\u3067\u3042\u308b\u3002<\/p>\n<p>\u6697\u53f7\u69cb\u6210\u306e\u68da\u5378\u3057\u306f\u3001\u6bce\u56de\u306e\u30de\u30a6\u30f3\u30c8\u6642\u306b\u884c\u3046\u3082\u306e\u3067\u306f\u306a\u3044\u3002\u5b9f\u65bd\u3059\u308b\u5951\u6a5f\u306f\u3001\u5e74\u6b21\u70b9\u691c\u3001OS \u306e\u30e1\u30b8\u30e3\u30fc\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u524d\u5f8c\u3001cryptsetup \u306e\u5927\u304d\u306a\u66f4\u65b0\u5f8c\u3001\u65b0\u3057\u3044\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u4f5c\u6210\u3059\u308b\u3068\u304d\u3001\u53e4\u3044 LUKS1 \u5a92\u4f53\u3084 TrueCrypt \u7531\u6765\u306e\u8cc7\u7523\u3092\u767a\u898b\u3057\u305f\u3068\u304d\u3001key slot \u3092\u6574\u7406\u3059\u308b\u3068\u304d\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u308a\u76f4\u3059\u3068\u304d\u3001\u5a92\u4f53\u3092\u9000\u5f79\u3055\u305b\u308b\u304b\u5224\u65ad\u3059\u308b\u3068\u304d\u3067\u3042\u308b\u3002\u666e\u6bb5\u306e\u901a\u5e38\u904b\u7528\u3067\u306f open\u3001mount\u3001sync\u3001umount\u3001close \u306e\u6d41\u308c\u3092\u56fa\u5b9a\u3059\u308c\u3070\u3088\u3044\u304c\u3001\u9577\u671f\u904b\u7528\u3067\u306f\u5b9a\u671f\u7684\u306b\u6697\u53f7\u69cb\u6210\u305d\u306e\u3082\u306e\u3092\u8aad\u307f\u76f4\u3057\u3001\u5f53\u6642\u306e\u6a19\u6e96\u304c\u73fe\u5728\u3069\u306e\u4f4d\u7f6e\u306b\u3042\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u6697\u53f7\u69cb\u6210\u306e\u78ba\u8a8d\u3067\u306f\u3001\u307e\u305a luksDump \u3092\u4f7f\u3046\u3002luksDump \u306f LUKS \u30d8\u30c3\u30c0\u30fc\u306b\u8a18\u9332\u3055\u308c\u305f\u60c5\u5831\u3092\u8868\u793a\u3059\u308b\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308a\u3001LUKS version\u3001UUID\u3001cipher\u3001data segment\u3001key slot\u3001KDF\u3001salt\u3001digest \u306a\u3069\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002\u3053\u3053\u3067\u898b\u308b\u3079\u304d\u4e2d\u5fc3\u306f\u3001\u7d30\u90e8\u306e\u5024\u3092\u3059\u3079\u3066\u6697\u8a18\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u4e16\u4ee3\u3068\u904b\u7528\u4e0a\u306e\u6271\u3044\u3092\u5224\u65ad\u3067\u304d\u308b\u60c5\u5831\u3067\u3042\u308b\u3002\u305f\u3068\u3048\u3070\u3001Version \u304c 1 \u3067 cipher mode \u304c cbc-essiv:sha256 \u306a\u3089\u3001\u65e7\u6765\u306e LUKS1 \u69cb\u6210\u3068\u3057\u3066\u6271\u3046\u3002Version \u304c 2 \u3067 aes-xts-plain64\u3001PBKDF \u304c Argon2id \u306a\u3089\u3001\u73fe\u5728\u306e\u4e3b\u7cfb\u306b\u8fd1\u3044\u69cb\u6210\u3068\u3057\u3066\u6271\u3044\u3084\u3059\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e LUKS version\u3001UUID\u3001\u6697\u53f7\u65b9\u5f0f\u3001key slot\u3001KDF \u304c\u78ba\u8a8d\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067 \/dev\/sdX \u306f\u8aac\u660e\u7528\u306e\u4eee\u540d\u3067\u3042\u308a\u3001\u5b9f\u969b\u306b\u306f\u5bfe\u8c61\u306e LUKS \u30c7\u30d0\u30a4\u30b9\u306b\u7f6e\u304d\u63db\u3048\u308b\u3002\u91cd\u8981\u306a\u306e\u306f\u3001\u3053\u306e\u51fa\u529b\u3092\u5358\u306a\u308b\u78ba\u8a8d\u30ed\u30b0\u3068\u3057\u3066\u6d41\u3055\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u51fa\u529b\u7d50\u679c\u3092\u53f0\u5e33\u3068\u7167\u5408\u3057\u3001\u4f5c\u6210\u6642\u671f\u3001\u73fe\u5728\u306e\u7528\u9014\u3001\u89e3\u9664\u624b\u6bb5\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u6709\u7121\u3001\u9000\u5f79\u6761\u4ef6\u3068\u7d50\u3073\u4ed8\u3051\u3066\u8aad\u3080\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u78ba\u8a8d\u9805\u76ee<\/th>\n<th>\u898b\u308b\u5834\u6240<\/th>\n<th>\u5224\u65ad\u3059\u308b\u3053\u3068<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>LUKS version<\/td>\n<td>Version \u884c\u3092\u898b\u308b\u3002<\/td>\n<td>LUKS1 \u65e7\u69cb\u6210\u304b\u3001LUKS2 \u73fe\u884c\u69cb\u6210\u304b\u3092\u5224\u65ad\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6697\u53f7\u65b9\u5f0f<\/td>\n<td>Cipher\u3001Cipher mode\u3001Data segments \u3092\u898b\u308b\u3002<\/td>\n<td>AES-CBC-ESSIV \u7cfb\u304b\u3001AES-XTS \u7cfb\u304b\u3092\u78ba\u8a8d\u3057\u3001\u30c7\u30a3\u30b9\u30af\u6697\u53f7\u5316\u65b9\u5f0f\u3068\u3057\u3066\u306e\u4e16\u4ee3\u3092\u5224\u65ad\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>KDF<\/td>\n<td>PBKDF\u3001Iterations\u3001Memory\u3001Threads \u3092\u898b\u308b\u3002<\/td>\n<td>PBKDF2 \u4e2d\u5fc3\u306e\u65e7\u69cb\u6210\u304b\u3001Argon2id \u3092\u4f7f\u3046\u73fe\u884c\u69cb\u6210\u304b\u3092\u5224\u65ad\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>key slot<\/td>\n<td>Key Slot \u307e\u305f\u306f Keyslots \u3092\u898b\u308b\u3002<\/td>\n<td>\u901a\u5e38\u904b\u7528\u7528\u3001\u975e\u5e38\u7528\u3001\u7528\u9014\u4e0d\u660e\u306e\u89e3\u9664\u5165\u53e3\u304c\u6b8b\u3063\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS UUID<\/td>\n<td>UUID \u884c\u3092\u898b\u308b\u3002<\/td>\n<td>\u53f0\u5e33\u3001crypttab\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u540c\u3058\u5bfe\u8c61\u304b\u3092\u7167\u5408\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>AES\u3001CBC\u3001XTS\u3001PBKDF2\u3001Argon2id \u306f\u3001\u305d\u308c\u305e\u308c\u898b\u308b\u5834\u6240\u304c\u9055\u3046\u3002AES \u306f\u30c7\u30fc\u30bf\u3092\u6697\u53f7\u5316\u3059\u308b\u305f\u3081\u306e block cipher \u3067\u3042\u308a\u3001CBC \u3084 XTS \u306f AES \u3092\u30c7\u30a3\u30b9\u30af\u306e\u3088\u3046\u306a\u5927\u304d\u306a\u30c7\u30fc\u30bf\u3078\u9069\u7528\u3059\u308b\u305f\u3081\u306e mode \u3067\u3042\u308b<a class=\"ref\" href=\"#ref26\">[26]<\/a><a class=\"ref\" href=\"#ref27\">[27]<\/a>\u3002\u30b9\u30c8\u30ec\u30fc\u30b8\u6697\u53f7\u5316\u3067\u306f\u3001\u30c7\u30a3\u30b9\u30af\u4e0a\u306e\u4f4d\u7f6e\u3092\u6697\u53f7\u5316\u306b\u7d44\u307f\u8fbc\u3080 XTS-AES \u304c\u91cd\u8981\u3067\u3042\u308a\u3001NIST SP 800-38E \u306f XTS-AES \u3092 storage device \u4e0a\u306e confidentiality \u306e\u305f\u3081\u306e mode \u3068\u3057\u3066\u6271\u3063\u3066\u3044\u308b<a class=\"ref\" href=\"#ref28\">[28]<\/a>\u3002\u4e00\u65b9\u3001PBKDF2 \u3084 Argon2id \u306f\u30c7\u30fc\u30bf\u672c\u4f53\u3092\u6697\u53f7\u5316\u3059\u308b\u65b9\u5f0f\u3067\u306f\u306a\u304f\u3001\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084 keyfile \u304b\u3089 key slot \u3092\u958b\u304f\u305f\u3081\u306e\u9375\u6750\u6599\u3092\u5c0e\u51fa\u3059\u308b\u4ed5\u7d44\u307f\u3067\u3042\u308b<a class=\"ref\" href=\"#ref29\">[29]<\/a><a class=\"ref\" href=\"#ref30\">[30]<\/a>\u3002<\/p>\n<p>\u3053\u306e\u9055\u3044\u3092\u6df7\u540c\u3059\u308b\u3068\u3001\u904b\u7528\u5224\u65ad\u3092\u8aa4\u308b\u3002\u305f\u3068\u3048\u3070\u3001Argon2id \u304c\u4f7f\u308f\u308c\u3066\u3044\u308b\u304b\u3089\u5927\u91cf\u30d5\u30a1\u30a4\u30eb\u30b3\u30d4\u30fc\u304c\u9045\u3044\u3001\u3068\u8003\u3048\u308b\u306e\u306f\u57fa\u672c\u7684\u306b\u8aa4\u308a\u3067\u3042\u308b\u3002KDF \u306f\u4e3b\u306b unlock \u6642\u3001key slot \u8ffd\u52a0\u6642\u3001\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u78ba\u8a8d\u6642\u306b\u52b9\u304f\u3002\u3044\u3063\u305f\u3093\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3044\u305f\u5f8c\u306e\u30b3\u30d4\u30fc\u901f\u5ea6\u306b\u306f\u3001\u30c7\u30fc\u30bf\u6697\u53f7\u5316\u65b9\u5f0f\u3001CPU \u306e AES \u652f\u63f4\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u5a92\u4f53\u6027\u80fd\u3001USB \u30d6\u30ea\u30c3\u30b8\u3001I\/O \u30d1\u30bf\u30fc\u30f3\u304c\u5f71\u97ff\u3059\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001luksDump \u306e KDF \u8868\u793a\u306f\u300c\u89e3\u9664\u8a66\u884c\u3078\u306e\u8010\u6027\u300d\u3092\u8aad\u3080\u305f\u3081\u306e\u60c5\u5831\u3067\u3042\u308a\u3001\u300c\u901a\u5e38\u306e\u8aad\u307f\u66f8\u304d\u6027\u80fd\u300d\u3092\u76f4\u63a5\u8aac\u660e\u3059\u308b\u60c5\u5831\u3067\u306f\u306a\u3044\u3002<\/p>\n<p>\u6697\u53f7\u69cb\u6210\u306e\u68da\u5378\u3057\u3067\u306f\u3001\u73fe\u5728\u306e\u6a19\u6e96\u306b\u5408\u3063\u3066\u3044\u308b\u304b\u3060\u3051\u3067\u306a\u304f\u3001\u5c06\u6765\u306e\u79fb\u884c\u53ef\u80fd\u6027\u3082\u898b\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002NIST \u306f SP 800-38E \u306e\u66f4\u65b0\u63d0\u6848\u3092\u51fa\u3057\u3066\u304a\u308a\u3001\u73fe\u5728\u306e\u6a19\u6e96\u3082\u5c06\u6765\u306b\u308f\u305f\u3063\u3066\u56fa\u5b9a\u3055\u308c\u308b\u3082\u306e\u3067\u306f\u306a\u3044<a class=\"ref\" href=\"#ref31\">[31]<\/a>\u3002\u307e\u305f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9577\u671f\u904b\u7528\u3067\u306f\u3001\u9375\u7ba1\u7406\u3068\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u79fb\u884c\u3092\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u3068\u3057\u3066\u6271\u3046\u5fc5\u8981\u304c\u3042\u308a\u3001NIST \u306e\u9375\u7ba1\u7406\u30ac\u30a4\u30c9\u30e9\u30a4\u30f3\u3084\u6697\u53f7\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u79fb\u884c\u6307\u91dd\u306f\u305d\u306e\u80cc\u666f\u8cc7\u6599\u306b\u306a\u308b<a class=\"ref\" href=\"#ref32\">[32]<\/a><a class=\"ref\" href=\"#ref33\">[33]<\/a>\u3002\u73fe\u5728\u306e LUKS2\u3001AES-XTS\u3001Argon2id \u3082\u3001\u5c06\u6765\u306f\u300c\u5f53\u6642\u306e\u6a19\u6e96\u300d\u3068\u3057\u3066\u898b\u76f4\u3057\u5bfe\u8c61\u306b\u306a\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u68da\u5378\u3057\u7d50\u679c<\/th>\n<th>\u610f\u5473<\/th>\n<th>\u904b\u7528\u5224\u65ad<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>LUKS2 + AES-XTS + Argon2id<\/td>\n<td>\u73fe\u5728\u306e\u4e3b\u7cfb\u3068\u3057\u3066\u6271\u3044\u3084\u3059\u3044\u69cb\u6210\u3067\u3042\u308b\u3002<\/td>\n<td>\u65b0\u898f\u4f5c\u6210\u6a19\u6e96\u3068\u3057\u3066\u7dad\u6301\u3057\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068 key slot \u53f0\u5e33\u3092\u6574\u5099\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS1 + AES-CBC-ESSIV + PBKDF2<\/td>\n<td>\u65e7\u6765\u306e\u5b9f\u7528\u69cb\u6210\u3067\u3042\u308a\u3001\u76f4\u3061\u306b\u7834\u7dbb\u3057\u3066\u3044\u308b\u3068\u306f\u9650\u3089\u306a\u3044\u304c\u73fe\u884c\u4e3b\u7cfb\u3067\u306f\u306a\u3044\u3002<\/td>\n<td>\u4e92\u63db\u7528\u3001\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u3001\u79fb\u884c\u5bfe\u8c61\u3068\u3057\u3066\u5206\u985e\u3057\u3001\u65b0\u898f\u4e3b\u7cfb\u3068\u3057\u3066\u5897\u3084\u3055\u306a\u3044\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7528\u9014\u4e0d\u660e\u306e key slot \u304c\u591a\u3044<\/td>\n<td>\u904e\u53bb\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084\u4e00\u6642\u89e3\u9664\u624b\u6bb5\u304c\u6b8b\u3063\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>key slot \u306e\u7167\u4f1a\u3001\u975e\u5e38\u7528\u7d4c\u8def\u306e\u78ba\u8a8d\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u53d6\u5f97\u5f8c\u306b\u6574\u7406\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u53f0\u5e33\u3068 UUID \u304c\u4e00\u81f4\u3057\u306a\u3044<\/td>\n<td>\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u5bfe\u5fdc\u304c\u5d29\u308c\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>\u7834\u58ca\u7684\u64cd\u4f5c\u3078\u9032\u307e\u305a\u3001by-id\u3001luksDump\u3001crypttab\u3001fstab\u3001\u53f0\u5e33\u3092\u7167\u5408\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u53e4\u3044\u304c\u5fa9\u65e7\u7d4c\u8def\u3068\u3057\u3066\u610f\u5473\u304c\u3042\u308b<\/td>\n<td>\u4e3b\u7cfb\u3067\u306f\u306a\u3044\u304c\u3001\u904e\u53bb\u30c7\u30fc\u30bf\u3084\u79fb\u884c\u5931\u6557\u6642\u306e\u9003\u3052\u9053\u3068\u3057\u3066\u4fa1\u5024\u304c\u3042\u308b\u3002<\/td>\n<td>\u5f79\u5272\u3092\u9650\u5b9a\u3057\u3001\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3001\u4fdd\u7ba1\u6761\u4ef6\u3001\u9000\u5f79\u6761\u4ef6\u3092\u660e\u6587\u5316\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u6697\u53f7\u65b9\u5f0f\u3068 KDF \u3092\u62bd\u8c61\u7684\u306a\u77e5\u8b58\u3068\u3057\u3066\u8aac\u660e\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u3044\u3002luksDump \u306e\u7d50\u679c\u3092\u8aad\u307f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u73fe\u5728\u306e\u4e3b\u7cfb\u3001\u4e92\u63db\u7528\u3001\u79fb\u884c\u5bfe\u8c61\u3001\u9000\u5f79\u5019\u88dc\u306e\u3069\u308c\u3068\u3057\u3066\u6271\u3046\u304b\u3092\u5224\u65ad\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u6697\u53f7\u69cb\u6210\u306e\u68da\u5378\u3057\u306f\u3001\u65e5\u5e38\u306e open \/ mount \u4f5c\u696d\u3067\u306f\u306a\u304f\u3001\u9577\u671f\u904b\u7528\u306e\u7bc0\u76ee\u3067\u5b9f\u65bd\u3059\u308b\u8a2d\u8a08\u70b9\u691c\u3067\u3042\u308b\u3002\u3053\u3053\u3067\u5f97\u305f\u7d50\u679c\u306f\u3001key slot \u6574\u7406\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u66f4\u65b0\u3001crypttab \/ fstab \u898b\u76f4\u3057\u3001\u65b0\u5a92\u4f53\u3078\u306e\u79fb\u884c\u3001\u65e7\u5a92\u4f53\u306e\u9000\u5f79\u5224\u65ad\u3078\u63a5\u7d9a\u3059\u308b\u3002<\/p>\n<hr>\n<h2>15. TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u306f\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u4f4d\u7f6e\u4ed8\u3051\u3066\u7ba1\u7406\u3059\u308b<\/h2>\n<p>cryptsetup \u306f LUKS \u3060\u3051\u3067\u306a\u304f\u3001TrueCrypt \/ VeraCrypt \u7cfb\u306e TCRYPT \u30b3\u30f3\u30c6\u30ca\u3082\u6271\u3048\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001TrueCrypt 7.1a \u3067\u4f5c\u6210\u3057\u305f\u65e2\u5b58\u8cc7\u7523\u306f\u3001\u5358\u306b\u300c\u53e4\u3044\u304b\u3089\u5373\u79fb\u884c\u3057\u3066\u6d88\u3059\u5bfe\u8c61\u300d\u3068\u3057\u3066\u6271\u3046\u3079\u304d\u3067\u306f\u306a\u3044\u3002TrueCrypt \u306f\u4fdd\u5b88\u7d42\u4e86\u3057\u3066\u3044\u308b\u305f\u3081\u3001\u65b0\u898f\u4e3b\u7cfb\u3068\u3057\u3066\u5897\u3084\u3059\u5bfe\u8c61\u3067\u306f\u306a\u3044\u304c\u3001\u65e2\u306b\u5b58\u5728\u3059\u308b\u6697\u53f7\u5316\u30b3\u30f3\u30c6\u30ca\u3084\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u306f\u3001\u904e\u53bb\u30c7\u30fc\u30bf\u3078\u5230\u9054\u3059\u308b\u305f\u3081\u306e\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u610f\u5473\u3092\u6301\u3064\u5834\u5408\u304c\u3042\u308b\u3002\u3053\u3053\u3067\u91cd\u8981\u306a\u306e\u306f\u3001TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u3092\u3001\u73fe\u884c\u4e3b\u7cfb\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u3001\u79fb\u884c\u5bfe\u8c61\u3001\u9000\u5f79\u5019\u88dc\u306e\u3069\u308c\u3068\u3057\u3066\u6271\u3046\u304b\u3092\u660e\u78ba\u306b\u5206\u985e\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<p>TrueCrypt \u306e\u30e6\u30fc\u30b6\u30fc\u30ac\u30a4\u30c9\u306f TrueCrypt \u306e\u65b9\u5f0f\u3092\u8aac\u660e\u3057\u3066\u3044\u308b\u304c\u3001TrueCrypt \u306f\u73fe\u5728\u3067\u306f\u4fdd\u5b88\u7d42\u4e86\u3057\u3066\u3044\u308b<a class=\"ref\" href=\"#ref34\">[34]<\/a>\u3002BSI \u306e TrueCrypt \u5206\u6790\u3084 NCC Group \u306e Phase Two Audit \u306f\u3001\u904e\u53bb\u8cc7\u7523\u3092\u51b7\u9759\u306b\u8a55\u4fa1\u3059\u308b\u305f\u3081\u306e\u8cc7\u6599\u3067\u3042\u308a\u3001\u6c38\u7d9a\u5229\u7528\u306e\u4fdd\u8a3c\u3067\u306f\u306a\u3044<a class=\"ref\" href=\"#ref35\">[35]<\/a><a class=\"ref\" href=\"#ref36\">[36]<\/a><a class=\"ref\" href=\"#ref37\">[37]<\/a>\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u5224\u65ad\u306f\u4e8c\u5206\u6cd5\u3067\u306f\u306a\u304f\u3001\u5f79\u5272\u306b\u5fdc\u3058\u3066\u884c\u3046\u5fc5\u8981\u304c\u3042\u308b\u3002\u901a\u5e38\u66f4\u65b0\u3092\u7d9a\u3051\u308b\u4e3b\u7cfb\u3068\u3057\u3066\u306f LUKS2 \u3078\u5bc4\u305b\u308b\u3002\u4e00\u65b9\u3067\u3001\u904e\u53bb\u74b0\u5883\u3068\u306e\u4e92\u63db\u6027\u3001FAT \u3067\u4f5c\u6210\u3055\u308c\u305f\u65e7\u5a92\u4f53\u306e\u8aad\u307f\u3084\u3059\u3055\u3001\u904e\u53bb\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u72b6\u614b\u306e\u4fdd\u5168\u3001LUKS + ext4 \u79fb\u884c\u6642\u306e\u6027\u80fd\u554f\u984c\u306b\u5bfe\u3059\u308b\u9003\u3052\u9053\u3068\u3057\u3066\u306f\u3001TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u3092\u4e00\u5b9a\u671f\u9593\u6b8b\u3059\u5408\u7406\u6027\u304c\u3042\u308b\u3002<\/p>\n<p>\u307e\u305a\u884c\u3046\u3079\u304d\u3053\u3068\u306f\u3001TCRYPT \u65e2\u5b58\u8cc7\u7523\u304c\u73fe\u5728\u3082\u958b\u3051\u308b\u304b\u3001\u3069\u306e\u65b9\u5f0f\u3067\u4f5c\u3089\u308c\u3066\u3044\u308b\u304b\u3001\u3069\u306e\u30c7\u30fc\u30bf\u3092\u4fdd\u6301\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002tcryptDump \u306f TCRYPT \u30d8\u30c3\u30c0\u30fc\u60c5\u5831\u306e\u78ba\u8a8d\u306b\u4f7f\u3046<a class=\"ref\" href=\"#ref38\">[38]<\/a>\u3002\u3053\u306e\u78ba\u8a8d\u306f\u3001\u30c7\u30fc\u30bf\u3092\u5909\u66f4\u3059\u308b\u64cd\u4f5c\u3067\u306f\u306a\u304f\u3001\u5bfe\u8c61\u304c TCRYPT \u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306e\u8abf\u67fb\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001TCRYPT \u30b3\u30f3\u30c6\u30ca\u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u3001\u6697\u53f7\u65b9\u5f0f\u3084\u30d8\u30c3\u30c0\u30fc\u60c5\u5831\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup tcryptDump \/path\/to\/container.tc<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u6b21\u306b\u3001TCRYPT \u30b3\u30f3\u30c6\u30ca\u3092 mapper device \u3068\u3057\u3066\u958b\u304f\u3002open &#8211;type tcrypt \u306f\u3001TrueCrypt \/ VeraCrypt \u7cfb\u306e\u30b3\u30f3\u30c6\u30ca\u3084\u30c7\u30d0\u30a4\u30b9\u3092 cryptsetup \u3067\u958b\u304f\u305f\u3081\u306e\u64cd\u4f5c\u3067\u3042\u308b\u3002\u3053\u3053\u3067 \/path\/to\/container.tc \u306f\u30d5\u30a1\u30a4\u30eb\u30b3\u30f3\u30c6\u30ca\u306e\u4f8b\u3067\u3042\u308a\u3001\u5b9f\u969b\u306b\u306f\u30c7\u30d0\u30a4\u30b9\u5168\u4f53\u3084\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3092\u6307\u5b9a\u3059\u308b\u5834\u5408\u3082\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/tcrypt_name \u304c\u4f5c\u6210\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --type tcrypt \/path\/to\/container.tc tcrypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u65e2\u5b58\u8cc7\u7523\u306e\u521d\u56de\u78ba\u8a8d\u3067\u306f\u3001\u307e\u305a\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u3092\u57fa\u672c\u306b\u3059\u308b\u3002\u3053\u308c\u306f\u3001TrueCrypt \/ TCRYPT \u8cc7\u7523\u3092\u4eca\u5f8c\u4e00\u5207\u66f4\u65b0\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3068\u3044\u3046\u610f\u5473\u3067\u306f\u306a\u3044\u3002\u521d\u56de\u78ba\u8a8d\u3001\u68da\u5378\u3057\u3001\u79fb\u884c\u524d\u8abf\u67fb\u3001\u5a92\u4f53\u72b6\u614b\u304c\u4e0d\u660e\u306a\u5834\u5408\u306b\u306f\u3001\u66f8\u304d\u8fbc\u307f\u3092\u907f\u3051\u3066\u5185\u5bb9\u3092\u78ba\u8a8d\u3059\u308b\u307b\u3046\u304c\u5b89\u5168\u3060\u304b\u3089\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/tcrypt_name \u4ee5\u4e0b\u3067\u65e2\u5b58\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u72b6\u614b\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mount -o ro \/dev\/mapper\/tcrypt_name \/mnt\/tcrypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u305f\u3060\u3057\u3001TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u3092\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u6709\u52b9\u306b\u6b8b\u3059\u5834\u5408\u3001\u5e38\u306b\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u306a\u3051\u308c\u3070\u306a\u3089\u306a\u3044\u308f\u3051\u3067\u306f\u306a\u3044\u3002\u305f\u3068\u3048\u3070\u3001\u65e2\u5b58\u306e TrueCrypt + FAT \u5a92\u4f53\u304c\u73fe\u5728\u3082\u958b\u3051\u3001\u5a92\u4f53\u72b6\u614b\u306b\u554f\u984c\u304c\u306a\u304f\u3001\u4e3b\u7cfb LUKS2 \u3068\u306f\u5225\u7cfb\u7d71\u306e\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u5f79\u5272\u3092\u6301\u3061\u3001\u66f4\u65b0\u624b\u9806\u3068\u9000\u5f79\u6761\u4ef6\u304c\u53f0\u5e33\u5316\u3055\u308c\u3066\u3044\u308b\u306a\u3089\u3001\u9650\u5b9a\u7684\u306a\u66f4\u65b0\u5bfe\u8c61\u3068\u3057\u3066\u6271\u3046\u4f59\u5730\u304c\u3042\u308b\u3002\u3053\u306e\u5834\u5408\u3067\u3082\u3001\u66f4\u65b0\u524d\u306b\u306f\u5225\u7cfb\u7d71\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3001\u66f4\u65b0\u5f8c\u306b\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3092\u884c\u3044\u3001\u6700\u7d42\u66f4\u65b0\u65e5\u3068\u540c\u671f\u5143\u3092\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u4f4d\u7f6e\u4ed8\u3051<\/th>\n<th>\u6271\u3044\u65b9<\/th>\n<th>\u5224\u65ad\u57fa\u6e96<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u73fe\u884c\u4e3b\u7cfb<\/td>\n<td>\u65b0\u898f\u63a1\u7528\u3057\u306a\u3044\u3002<\/td>\n<td>\u4fdd\u5b88\u7d42\u4e86\u3057\u3066\u3044\u308b\u305f\u3081\u3001\u73fe\u5728\u306e\u4e3b\u7cfb\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u3068\u3057\u3066\u5897\u3084\u3059\u5bfe\u8c61\u3067\u306f\u306a\u3044\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7<\/td>\n<td>\u5f79\u5272\u3092\u9650\u5b9a\u3057\u3066\u4fdd\u6301\u3059\u308b\u3002<\/td>\n<td>\u904e\u53bb\u30c7\u30fc\u30bf\u3001\u65e7\u74b0\u5883\u3001\u79fb\u884c\u5931\u6557\u6642\u306e\u9003\u3052\u9053\u3068\u3057\u3066\u6709\u52b9\u306a\u3089\u3001\u53f0\u5e33\u5316\u3057\u3066\u6b8b\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6<\/td>\n<td>\u539f\u5247\u3068\u3057\u3066\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3068\u30c7\u30fc\u30bf\u6551\u51fa\u3092\u76ee\u7684\u306b\u6271\u3046\u3002<\/td>\n<td>\u66f4\u65b0\u306e\u5fc5\u8981\u304c\u306a\u304f\u3001\u904e\u53bb\u72b6\u614b\u306e\u4fdd\u5168\u304c\u4e3b\u76ee\u7684\u306a\u3089\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u9650\u5b9a\u66f4\u65b0\u5bfe\u8c61<\/td>\n<td>\u6761\u4ef6\u4ed8\u304d\u3067\u66f4\u65b0\u3059\u308b\u3002<\/td>\n<td>\u5225\u7cfb\u7d71\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u3042\u308a\u3001\u66f4\u65b0\u624b\u9806\u3001\u78ba\u8a8d\u624b\u9806\u3001\u9000\u5f79\u6761\u4ef6\u304c\u660e\u78ba\u306a\u5834\u5408\u306b\u9650\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u79fb\u884c\u5bfe\u8c61<\/td>\n<td>LUKS2 \u306a\u3069\u306e\u73fe\u884c\u4e3b\u7cfb\u3078\u540c\u671f\u3059\u308b\u3002<\/td>\n<td>\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u306e\u5f79\u5272\u3088\u308a\u3001\u4fdd\u5b88\u7d42\u4e86\u3084\u5a92\u4f53\u52a3\u5316\u306e\u30ea\u30b9\u30af\u304c\u4e0a\u56de\u308b\u5834\u5408\u306b\u79fb\u884c\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u9000\u5f79\u5019\u88dc<\/td>\n<td>\u5fa9\u5143\u78ba\u8a8d\u5f8c\u306b\u4fdd\u7ba1\u505c\u6b62\u307e\u305f\u306f\u5b89\u5168\u6d88\u53bb\u3059\u308b\u3002<\/td>\n<td>\u540c\u7b49\u30c7\u30fc\u30bf\u304c\u73fe\u884c\u4e3b\u7cfb\u3068\u5225\u7cfb\u7d71\u306b\u5b58\u5728\u3057\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u306e\u5f79\u5272\u304c\u7d42\u308f\u3063\u305f\u5834\u5408\u306b\u9000\u5f79\u3055\u305b\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u66f4\u65b0\u3092\u8a31\u53ef\u3059\u308b\u5834\u5408\u306e\u901a\u5e38\u904b\u7528\u3067\u306f\u3001TCRYPT \u30b3\u30f3\u30c6\u30ca\u3092\u958b\u304d\u3001\u901a\u5e38\u30de\u30a6\u30f3\u30c8\u3057\u3001\u4f5c\u696d\u5f8c\u306b sync\u3001umount\u3001close \u3067\u9589\u3058\u308b\u3002\u3053\u3053\u3067\u91cd\u8981\u306a\u306e\u306f\u3001TrueCrypt \/ TCRYPT \u3092\u300c\u53e4\u3044\u304c\u307e\u3060\u4f7f\u3048\u308b\u304b\u3089\u6f2b\u7136\u3068\u4f7f\u3046\u300d\u306e\u3067\u306f\u306a\u304f\u3001\u300c\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u3001\u3069\u306e\u7bc4\u56f2\u3067\u66f4\u65b0\u3092\u8a31\u3059\u304b\u300d\u3092\u660e\u78ba\u306b\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u66f4\u65b0\u5bfe\u8c61\u306b\u3059\u308b\u306a\u3089\u3001\u4e3b\u7cfb\u3067\u306f\u306a\u3044\u3053\u3068\u3001\u66f4\u65b0\u983b\u5ea6\u3001\u540c\u671f\u5143\u3001\u78ba\u8a8d\u65b9\u6cd5\u3001\u9000\u5f79\u6761\u4ef6\u3092\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --type tcrypt \/path\/to\/container.tc tcrypt_name<br \/>\nsudo mount \/dev\/mapper\/tcrypt_name \/mnt\/tcrypt_name<br \/>\nsync<br \/>\nsudo umount \/mnt\/tcrypt_name<br \/>\nsudo cryptsetup close tcrypt_name<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u306e\u7ba1\u7406\u3067\u907f\u3051\u308b\u3079\u304d\u306a\u306e\u306f\u3001\u8aad\u307f\u53d6\u308a\u5c02\u7528\u79fb\u884c\u5bfe\u8c61\u3068\u3057\u3066\u3057\u304b\u898b\u306a\u3044\u3053\u3068\u3068\u3001\u9006\u306b\u73fe\u884c\u4e3b\u7cfb\u3068\u540c\u3058\u6271\u3044\u3067\u4f7f\u3044\u7d9a\u3051\u308b\u3053\u3068\u306e\u4e21\u65b9\u3067\u3042\u308b\u3002\u524d\u8005\u3067\u306f\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u306e\u4fa1\u5024\u3092\u904e\u5c0f\u8a55\u4fa1\u3059\u308b\u3002\u5f8c\u8005\u3067\u306f\u3001\u4fdd\u5b88\u7d42\u4e86\u3057\u305f\u65b9\u5f0f\u3092\u7121\u671f\u9650\u306b\u4e3b\u7cfb\u3078\u6b8b\u3059\u3053\u3068\u306b\u306a\u308b\u3002\u9069\u5207\u306a\u306e\u306f\u3001\u73fe\u884c\u4e3b\u7cfb\u3067\u306f\u306a\u304f\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u307e\u305f\u306f\u79fb\u884c\u5bfe\u8c61\u3068\u3057\u3066\u5f79\u5272\u3092\u660e\u793a\u3057\u3001\u78ba\u8a8d\u3001\u66f4\u65b0\u3001\u540c\u671f\u3001\u9000\u5f79\u306e\u6761\u4ef6\u3092\u904b\u7528\u8a2d\u8a08\u306b\u843d\u3068\u3057\u8fbc\u3080\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u3092\u5358\u7d14\u306b\u300c\u53e4\u3044\u306e\u3067\u5ec3\u6b62\u300d\u3068\u5224\u65ad\u3057\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u4fdd\u5b88\u7d42\u4e86\u306f\u91cd\u8981\u306a\u30ea\u30b9\u30af\u3067\u3042\u308b\u304c\u3001\u9577\u671f\u904b\u7528\u3067\u306f\u904e\u53bb\u8cc7\u7523\u306b\u5230\u9054\u3067\u304d\u308b\u3053\u3068\u81ea\u4f53\u3082\u5fa9\u5143\u53ef\u80fd\u6027\u306e\u4e00\u90e8\u3067\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001TrueCrypt \/ TCRYPT \u306f\u65b0\u898f\u4e3b\u7cfb\u3068\u3057\u3066\u306f\u63a1\u7528\u305b\u305a\u3001\u65e2\u5b58\u8cc7\u7523\u306b\u3064\u3044\u3066\u306f\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u3001\u9650\u5b9a\u66f4\u65b0\u5bfe\u8c61\u3001\u79fb\u884c\u5bfe\u8c61\u3001\u9000\u5f79\u5019\u88dc\u3068\u3057\u3066\u5206\u985e\u3057\u3001\u5f79\u5272\u304c\u3042\u308b\u9593\u306f\u7ba1\u7406\u3057\u3001\u5f79\u5272\u304c\u7d42\u308f\u3063\u305f\u3089\u5fa9\u5143\u7d4c\u8def\u3092\u640d\u306a\u308f\u305a\u306b\u9000\u5f79\u3055\u305b\u308b\u3002<\/p>\n<hr>\n<h2>16. \u5b9a\u671f\u70b9\u691c\u3067\u306f\u89e3\u9664\u53ef\u80fd\u6027\u3001\u9375\u3001\u5a92\u4f53\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5b9a\u671f\u70b9\u691c\u306f\u3001\u6bce\u65e5\u306e\u901a\u5e38\u904b\u7528\u3067\u6a5f\u68b0\u7684\u306b\u5b9f\u884c\u3059\u308b\u3082\u306e\u3067\u306f\u306a\u3044\u3002\u76ee\u7684\u306f\u3001\u5e73\u6642\u306b\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3051\u308b\u3053\u3068\u3001\u5fc5\u8981\u306a\u89e3\u9664\u624b\u6bb5\u304c\u751f\u304d\u3066\u3044\u308b\u3053\u3068\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3068 key slot \u304c\u53f0\u5e33\u3069\u304a\u308a\u3067\u3042\u308b\u3053\u3068\u3001keyfile \u304c\u60f3\u5b9a\u3069\u304a\u308a\u4fdd\u5168\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3001\u7269\u7406\u5a92\u4f53\u306b\u52a3\u5316\u5146\u5019\u304c\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u901a\u5e38\u904b\u7528\u3067\u306f open\u3001mount\u3001sync\u3001umount\u3001close \u3092\u5b9f\u65bd\u3059\u308c\u3070\u3088\u3044\u304c\u3001\u305d\u308c\u3060\u3051\u3067\u306f\u300c\u975e\u5e38\u6642\u306b\u3082\u958b\u3051\u308b\u304b\u300d\u300c\u53e4\u3044 key slot \u304c\u6b8b\u3063\u3066\u3044\u306a\u3044\u304b\u300d\u300ckeyfile \u304c\u5225\u7269\u306b\u7f6e\u304d\u63db\u308f\u3063\u3066\u3044\u306a\u3044\u304b\u300d\u300c\u5a92\u4f53\u304c\u52a3\u5316\u3057\u3066\u3044\u306a\u3044\u304b\u300d\u306f\u5206\u304b\u3089\u306a\u3044\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u5b9a\u671f\u70b9\u691c\u306f\u65e5\u5e38\u306e\u5229\u7528\u624b\u9806\u3067\u306f\u306a\u304f\u3001\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u7dad\u6301\u3059\u308b\u305f\u3081\u306e\u4fdd\u5b88\u624b\u9806\u3068\u3057\u3066\u4f4d\u7f6e\u4ed8\u3051\u308b\u3002<\/p>\n<p>\u70b9\u691c\u983b\u5ea6\u306f\u3001\u3059\u3079\u3066\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u540c\u3058\u306b\u3059\u308b\u5fc5\u8981\u306f\u306a\u3044\u3002\u66f4\u65b0\u983b\u5ea6\u304c\u9ad8\u304f\u3001\u73fe\u5728\u306e\u4e3b\u7cfb\u3068\u3057\u3066\u4f7f\u3063\u3066\u3044\u308b\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u306f\u3001\u6708\u6b21\u307e\u305f\u306f\u56db\u534a\u671f\u3067\u78ba\u8a8d\u3059\u308b\u4fa1\u5024\u304c\u3042\u308b\u3002\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3084\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u306f\u3001\u983b\u7e41\u306b\u89e6\u308b\u3088\u308a\u3082\u3001\u534a\u5e74\u307e\u305f\u306f\u5e74 1 \u56de\u306e\u68da\u5378\u3057\u3067\u3001\u958b\u3051\u308b\u3053\u3068\u3001\u8aad\u3081\u308b\u3053\u3068\u3001\u5a92\u4f53\u72b6\u614b\u306b\u7570\u5e38\u304c\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u307b\u3046\u304c\u73fe\u5b9f\u7684\u3067\u3042\u308b\u3002\u3055\u3089\u306b\u3001key slot \u306e\u8ffd\u52a0\u3084\u524a\u9664\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u53d6\u5f97\u3001OS \u306e\u30e1\u30b8\u30e3\u30fc\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3001cryptsetup \u66f4\u65b0\u3001\u5a92\u4f53\u4ea4\u63db\u3001\u79fb\u884c\u4f5c\u696d\u3001\u9000\u5f79\u5224\u65ad\u306e\u524d\u5f8c\u3067\u306f\u3001\u5b9a\u671f\u5468\u671f\u3068\u306f\u5225\u306b\u90fd\u5ea6\u70b9\u691c\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5951\u6a5f<\/th>\n<th>\u5b9f\u65bd\u983b\u5ea6<\/th>\n<th>\u76ee\u7684<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u4e3b\u7cfb\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af<\/td>\n<td>\u6708\u6b21\u307e\u305f\u306f\u56db\u534a\u671f\u3067\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u901a\u5e38\u904b\u7528\u3067\u4f7f\u3046\u89e3\u9664\u624b\u6bb5\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u5a92\u4f53\u72b6\u614b\u304c\u7d99\u7d9a\u3057\u3066\u6b63\u5e38\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7<\/td>\n<td>\u534a\u5e74\u307e\u305f\u306f\u5e74 1 \u56de\u3067\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u666e\u6bb5\u4f7f\u308f\u306a\u3044\u65e7\u69cb\u6210\u304c\u3001\u5fa9\u65e7\u7d4c\u8def\u3068\u3057\u3066\u307e\u3060\u958b\u3051\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6<\/td>\n<td>\u5e74 1 \u56de\u307e\u305f\u306f\u91cd\u8981\u306a\u68da\u5378\u3057\u6642\u306b\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u904e\u53bb\u30c7\u30fc\u30bf\u3092\u8aad\u3081\u308b\u72b6\u614b\u304c\u7dad\u6301\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>key slot \u5909\u66f4\u524d\u5f8c<\/td>\n<td>\u5909\u66f4\u306e\u90fd\u5ea6\u5b9f\u65bd\u3059\u308b\u3002<\/td>\n<td>\u901a\u5e38\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u610f\u56f3\u3069\u304a\u308a\u6b8b\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>OS \/ cryptsetup \u66f4\u65b0\u524d\u5f8c<\/td>\n<td>\u66f4\u65b0\u306e\u90fd\u5ea6\u5b9f\u65bd\u3059\u308b\u3002<\/td>\n<td>\u66f4\u65b0\u5f8c\u3082\u65e2\u5b58\u306e LUKS \u30c7\u30d0\u30a4\u30b9\u3084 TCRYPT \u65e2\u5b58\u8cc7\u7523\u3092\u958b\u3051\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u79fb\u884c\u30fb\u9000\u5f79\u5224\u65ad\u524d<\/td>\n<td>\u5224\u65ad\u306e\u90fd\u5ea6\u5b9f\u65bd\u3059\u308b\u3002<\/td>\n<td>\u79fb\u884c\u5143\u304c\u8aad\u3081\u308b\u3053\u3068\u3001\u79fb\u884c\u5148\u304c\u5fa9\u5143\u53ef\u80fd\u3067\u3042\u308b\u3053\u3068\u3001\u9000\u5f79\u5f8c\u3082\u5fa9\u65e7\u7d4c\u8def\u304c\u6b8b\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5b9a\u671f\u70b9\u691c\u3067\u306f\u3001\u6697\u53f7\u5316\u5c64\u3001\u9375\u7ba1\u7406\u5c64\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u5c64\u3001\u5a92\u4f53\u5c64\u3092\u5206\u3051\u3066\u78ba\u8a8d\u3059\u308b\u3002\u6697\u53f7\u5316\u5c64\u3067\u306f luksDump \u306b\u3088\u308a LUKS version\u3001UUID\u3001\u6697\u53f7\u65b9\u5f0f\u3001key slot\u3001KDF \u3092\u78ba\u8a8d\u3059\u308b\u3002\u9375\u7ba1\u7406\u5c64\u3067\u306f\u3001\u901a\u5e38\u904b\u7528\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u4e21\u65b9\u3067 test-passphrase \u3092\u884c\u3044\u3001\u3069\u3061\u3089\u306e\u89e3\u9664\u7d4c\u8def\u3082\u6a5f\u80fd\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u5a92\u4f53\u5c64\u3067\u306f smartctl \u306b\u3088\u308a S.M.A.R.T. \u60c5\u5831\u3092\u78ba\u8a8d\u3059\u308b\u3002smartmontools \u306f SMART \u60c5\u5831\u3092\u53d6\u5f97\u3059\u308b\u4ee3\u8868\u7684\u306a\u30c4\u30fc\u30eb\u3067\u3042\u308a\u3001\u5a92\u4f53\u52a3\u5316\u306e\u5146\u5019\u3092\u628a\u63e1\u3059\u308b\u305f\u3081\u306b\u4f7f\u3048\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase \/dev\/sdX<br \/>\nsudo smartctl -a \/dev\/sdX<br \/>\nsudo sha256sum \/etc\/cryptsetup-keys\/crypt_name.key<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>luksDump \u3067\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304c\u53f0\u5e33\u306b\u8a18\u9332\u3055\u308c\u305f LUKS UUID \u3068\u4e00\u81f4\u3057\u3066\u3044\u308b\u3053\u3068\u3001\u6709\u52b9\u306a key slot \u304c\u60f3\u5b9a\u3069\u304a\u308a\u3067\u3042\u308b\u3053\u3068\u3001\u7528\u9014\u4e0d\u660e\u306e\u89e3\u9664\u5165\u53e3\u304c\u6b8b\u3063\u3066\u3044\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002test-passphrase \u306f\u3001\u5b9f\u969b\u306b mapper device \u3092\u4f5c\u3089\u305a\u3001\u89e3\u9664\u3067\u304d\u308b\u304b\u3060\u3051\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306b\u4f7f\u3046\u3002keyfile \u6307\u5b9a\u306e test-passphrase \u304c\u6210\u529f\u3059\u308c\u3070\u3001\u901a\u5e38\u904b\u7528\u7528 keyfile \u306b\u3088\u308b\u89e3\u9664\u7d4c\u8def\u304c\u751f\u304d\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308b\u3002keyfile \u3092\u6307\u5b9a\u3057\u306a\u3044 test-passphrase \u304c\u6210\u529f\u3059\u308c\u3070\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306b\u3088\u308b\u624b\u52d5\u89e3\u9664\u7d4c\u8def\u304c\u751f\u304d\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308b\u3002<\/p>\n<p>smartctl \u3067\u306f\u3001\u6697\u53f7\u5316\u3068\u306f\u5225\u306b\u7269\u7406\u5a92\u4f53\u306e\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u898b\u308b\u5bfe\u8c61\u306f \/dev\/mapper\/crypt_name \u3067\u306f\u306a\u304f\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308b \/dev\/sdX \u3067\u3042\u308b\u3002\u4ee3\u66ff\u51e6\u7406\u6e08\u307f\u30bb\u30af\u30bf\u30fc\u3001\u4fdd\u7559\u4e2d\u30bb\u30af\u30bf\u30fc\u3001\u8a02\u6b63\u4e0d\u80fd\u30a8\u30e9\u30fc\u3001\u901a\u96fb\u6642\u9593\u3001\u6e29\u5ea6\u3001\u81ea\u5df1\u8a3a\u65ad\u7d50\u679c\u306a\u3069\u3092\u78ba\u8a8d\u3057\u3001\u52a3\u5316\u50be\u5411\u304c\u3042\u308b\u5834\u5408\u306f\u79fb\u884c\u307e\u305f\u306f\u9000\u5f79\u3092\u691c\u8a0e\u3059\u308b\u3002USB \u63a5\u7d9a\u306e\u5916\u4ed8\u3051\u5a92\u4f53\u3067\u306f\u3001USB-SATA \u30d6\u30ea\u30c3\u30b8\u306e\u4ed5\u69d8\u306b\u3088\u308a SMART \u60c5\u5831\u304c\u53d6\u5f97\u3067\u304d\u306a\u3044\u5834\u5408\u304c\u3042\u308b\u305f\u3081\u3001\u305d\u306e\u5834\u5408\u306f\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3084\u540c\u671f\u6642\u306e I\/O \u30a8\u30e9\u30fc\u6709\u7121\u3082\u542b\u3081\u3066\u5224\u65ad\u3059\u308b\u3002<\/p>\n<p>sha256sum \u306b\u3088\u308b keyfile \u306e\u78ba\u8a8d\u306f\u3001keyfile \u306e\u5185\u5bb9\u304c\u53f0\u5e33\u306b\u8a18\u9332\u3055\u308c\u305f\u3082\u306e\u3068\u4e00\u81f4\u3059\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u306b\u4f7f\u3046\u3002\u305f\u3060\u3057\u3001keyfile \u306e hash \u3082\u6a5f\u5fae\u60c5\u5831\u306b\u6e96\u3058\u3066\u6271\u3046\u3079\u304d\u3067\u3042\u308a\u3001\u516c\u958b\u30ed\u30b0\u3084\u4e0d\u7528\u610f\u306a\u5171\u6709\u5834\u6240\u306b\u6b8b\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002keyfile \u305d\u306e\u3082\u306e\u3092\u8868\u793a\u3059\u308b\u306e\u3067\u306f\u306a\u304f\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3057\u305f hash \u3068\u7167\u5408\u3059\u308b\u3053\u3068\u3067\u3001\u8aa4\u3063\u3066\u5225\u30d5\u30a1\u30a4\u30eb\u306b\u7f6e\u304d\u63db\u308f\u3063\u3066\u3044\u306a\u3044\u304b\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304b\u3089\u5fa9\u5143\u3057\u305f keyfile \u304c\u6b63\u3057\u3044\u304b\u3092\u78ba\u8a8d\u3067\u304d\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u78ba\u8a8d\u5bfe\u8c61<\/th>\n<th>\u78ba\u8a8d\u65b9\u6cd5<\/th>\n<th>\u6b63\u5e38\u3068\u5224\u65ad\u3067\u304d\u308b\u72b6\u614b<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>LUKS \u30d8\u30c3\u30c0\u30fc<\/td>\n<td>luksDump \u3067 Version\u3001UUID\u3001key slot\u3001KDF \u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u53f0\u5e33\u3068 UUID \u304c\u4e00\u81f4\u3057\u3001\u6709\u52b9 key slot \u304c\u60f3\u5b9a\u3069\u304a\u308a\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u901a\u5e38\u7528 keyfile<\/td>\n<td>&#8211;key-file \u3092\u6307\u5b9a\u3057\u3066 test-passphrase \u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>mapper \u3092\u4f5c\u3089\u305a\u306b\u89e3\u9664\u78ba\u8a8d\u304c\u6210\u529f\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba<\/td>\n<td>keyfile \u306a\u3057\u3067 test-passphrase \u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u89e3\u9664\u78ba\u8a8d\u304c\u6210\u529f\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7269\u7406\u5a92\u4f53<\/td>\n<td>smartctl \u3067 SMART \u60c5\u5831\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u91cd\u5927\u306a\u30a8\u30e9\u30fc\u3001\u5897\u52a0\u50be\u5411\u306e\u3042\u308b\u4e0d\u826f\u30bb\u30af\u30bf\u30fc\u3001\u9ad8\u6e29\u7d99\u7d9a\u306a\u3069\u304c\u306a\u3044\u3002<\/td>\n<\/tr>\n<tr>\n<td>keyfile \u306e\u540c\u4e00\u6027<\/td>\n<td>sha256sum \u3092\u53f0\u5e33\u306e\u5024\u3068\u7167\u5408\u3059\u308b\u3002<\/td>\n<td>\u53f0\u5e33\u306b\u8a18\u9332\u3057\u305f hash \u3068\u4e00\u81f4\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5b9a\u671f\u70b9\u691c\u306e\u7d50\u679c\u306f\u3001\u5b9f\u65bd\u3057\u3066\u7d42\u308f\u308a\u3067\u306f\u306a\u304f\u3001\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b\u3002\u8a18\u9332\u3059\u3079\u304d\u5185\u5bb9\u306f\u3001\u70b9\u691c\u65e5\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001LUKS UUID\u3001\u78ba\u8a8d\u3057\u305f key slot\u3001\u901a\u5e38\u7528 keyfile \u306e\u78ba\u8a8d\u7d50\u679c\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u78ba\u8a8d\u7d50\u679c\u3001SMART \u306e\u4e3b\u8981\u7d50\u679c\u3001\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u306e\u6709\u7121\u3001\u6b21\u56de\u5bfe\u5fdc\u3067\u3042\u308b\u3002\u7570\u5e38\u304c\u306a\u304b\u3063\u305f\u5834\u5408\u3067\u3082\u3001\u6700\u7d42\u78ba\u8a8d\u65e5\u304c\u66f4\u65b0\u3055\u308c\u308b\u3053\u3068\u306b\u610f\u5473\u304c\u3042\u308b\u3002\u9577\u671f\u904b\u7528\u3067\u306f\u3001\u300c\u5b58\u5728\u3059\u308b\u5a92\u4f53\u300d\u3067\u306f\u306a\u304f\u3001\u300c\u6700\u5f8c\u306b\u3044\u3064\u3001\u3069\u306e\u624b\u6bb5\u3067\u3001\u3069\u3053\u307e\u3067\u78ba\u8a8d\u3057\u305f\u5a92\u4f53\u306a\u306e\u304b\u300d\u304c\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u5de6\u53f3\u3059\u308b\u3002<\/p>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u5b9a\u671f\u70b9\u691c\u3092\u6c17\u307e\u3050\u308c\u306a\u78ba\u8a8d\u4f5c\u696d\u306b\u3057\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u65e5\u6b21\u3067\u6bce\u56de\u884c\u3046\u306b\u306f\u91cd\u3059\u304e\u308b\u304c\u3001\u5e74\u5358\u4f4d\u3067\u653e\u7f6e\u3059\u308b\u306b\u306f\u91cd\u8981\u3059\u304e\u308b\u3002\u4e3b\u7cfb\u306f\u6708\u6b21\u307e\u305f\u306f\u56db\u534a\u671f\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3084\u30a2\u30fc\u30ab\u30a4\u30d6\u306f\u534a\u5e74\u304b\u3089\u5e74 1 \u56de\u3001\u69cb\u6210\u5909\u66f4\u3084\u79fb\u884c\u3084\u9000\u5f79\u5224\u65ad\u306e\u524d\u5f8c\u3067\u306f\u90fd\u5ea6\u5b9f\u65bd\u3059\u308b\u3002\u5b9a\u671f\u70b9\u691c\u306e\u76ee\u7684\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u304c\u4eca\u65e5\u4f7f\u3048\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u5c06\u6765\u306e\u969c\u5bb3\u6642\u306b\u3082\u958b\u3051\u308b\u72b6\u614b\u3092\u7dad\u6301\u3057\u7d9a\u3051\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<hr>\n<h2>17. \u79fb\u884c\u3067\u306f\u65b0\u898f LUKS2 \u3092\u4f5c\u308a\u3001\u691c\u8a3c\u5f8c\u306b\u65e7\u69cb\u6210\u306e\u5f79\u5272\u3092\u5909\u66f4\u3059\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u79fb\u884c\u3067\u306f\u3001\u53e4\u3044\u69cb\u6210\u3092\u305d\u306e\u5834\u3067\u7121\u7406\u306b\u5909\u63db\u3059\u308b\u3088\u308a\u3001\u65b0\u3057\u3044 LUKS2 \u30c7\u30d0\u30a4\u30b9\u3092\u4f5c\u6210\u3057\u3001\u65e7\u69cb\u6210\u304b\u3089\u30c7\u30fc\u30bf\u3092\u540c\u671f\u3057\u3001\u5fa9\u5143\u78ba\u8a8d\u304c\u5b8c\u4e86\u3057\u3066\u304b\u3089\u65e7\u69cb\u6210\u306e\u5f79\u5272\u3092\u5909\u66f4\u3059\u308b\u307b\u3046\u304c\u5b89\u5168\u3067\u3042\u308b\u3002\u53e4\u3044 LUKS1\u3001AES-CBC-ESSIV\u3001PBKDF2\u3001\u7528\u9014\u4e0d\u660e key slot\u3001TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u3092\u767a\u898b\u3057\u305f\u5834\u5408\u3067\u3082\u3001\u6700\u521d\u306b\u884c\u3046\u3079\u304d\u3053\u3068\u306f\u5373\u6642\u524a\u9664\u3067\u306f\u306a\u3044\u3002\u307e\u305a\u79fb\u884c\u5143\u3092\u8aad\u3081\u308b\u72b6\u614b\u3067\u4fdd\u6301\u3057\u3001\u65b0\u3057\u3044\u79fb\u884c\u5148\u3092\u73fe\u5728\u306e\u6a19\u6e96\u306b\u8fd1\u3044\u69cb\u6210\u3067\u4f5c\u308a\u3001\u4e21\u65b9\u304c\u5b58\u5728\u3059\u308b\u671f\u9593\u3092\u78ba\u4fdd\u3059\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u65b9\u5f0f\u3092\u65b0\u3057\u304f\u3057\u306a\u304c\u3089\u3001\u79fb\u884c\u5931\u6557\u6642\u306e\u5fa9\u5143\u7d4c\u8def\u3092\u5931\u308f\u305a\u306b\u6e08\u3080\u3002<\/p>\n<p>\u79fb\u884c\u306e\u76ee\u7684\u306f\u3001\u5358\u306b\u65b0\u3057\u3044\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u4f5c\u308b\u3053\u3068\u3067\u306f\u306a\u3044\u3002\u76ee\u7684\u306f\u3001\u30c7\u30fc\u30bf\u3001\u6240\u6709\u8005\u3001\u6a29\u9650\u3001ACL\u3001\u62e1\u5f35\u5c5e\u6027\u3001hard link\u3001\u30de\u30a6\u30f3\u30c8\u624b\u9806\u3001\u89e3\u9664\u624b\u6bb5\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u53f0\u5e33\u3092\u3001\u65b0\u3057\u3044\u904b\u7528\u5358\u4f4d\u3078\u5b89\u5168\u306b\u79fb\u3059\u3053\u3068\u3067\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u79fb\u884c\u624b\u9806\u306f\u3001\u65b0\u898f LUKS2 \u4f5c\u6210\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u4f5c\u6210\u3001\u65e7\u9818\u57df\u306e\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3001rsync \u306b\u3088\u308b\u540c\u671f\u3001\u5dee\u5206\u518d\u540c\u671f\u3001\u79fb\u884c\u5148\u306e\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3001\u89e3\u9664\u78ba\u8a8d\u3001\u8d77\u52d5\u8a2d\u5b9a\u78ba\u8a8d\u3001\u65e7\u69cb\u6210\u306e\u5f79\u5272\u5909\u66f4\u3001\u9000\u5f79\u5224\u65ad\u307e\u3067\u3092\u542b\u3081\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<h3>17.1 \u79fb\u884c\u524d\u306b\u79fb\u884c\u5143\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u79fb\u884c\u4f5c\u696d\u306e\u6700\u521d\u306b\u884c\u3046\u306e\u306f\u3001\u79fb\u884c\u5143\u306e\u72b6\u614b\u78ba\u8a8d\u3067\u3042\u308b\u3002\u79fb\u884c\u5143\u304c LUKS1 \u306a\u306e\u304b LUKS2 \u306a\u306e\u304b\u3001TrueCrypt \/ TCRYPT \u306a\u306e\u304b\u3001\u3069\u306e key slot \u3067\u958b\u3051\u308b\u306e\u304b\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u8aad\u3081\u308b\u306e\u304b\u3001\u5a92\u4f53\u72b6\u614b\u306b\u7570\u5e38\u304c\u306a\u3044\u306e\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u79fb\u884c\u5143\u304c\u4e0d\u5b89\u5b9a\u306a\u72b6\u614b\u3067\u3042\u308c\u3070\u3001\u66f8\u304d\u8fbc\u307f\u3092\u907f\u3051\u3001\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u958b\u3044\u3066\u30c7\u30fc\u30bf\u6551\u51fa\u3092\u512a\u5148\u3059\u308b\u3002\u79fb\u884c\u5143\u306e\u78ba\u8a8d\u3092\u7701\u7565\u3059\u308b\u3068\u3001\u79fb\u884c\u5148\u306b\u4e0d\u5b8c\u5168\u306a\u30c7\u30fc\u30bf\u3092\u540c\u671f\u3057\u3066\u3082\u6c17\u3065\u3051\u306a\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/oldDevice<br \/>\nsudo cryptsetup open --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/oldDevice old_crypt<br \/>\nlsblk -f<br \/>\nsudo mount -o ro \/dev\/mapper\/old_crypt \/mnt\/old_crypt<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u624b\u9806\u3067\u306f\u3001\u307e\u305a luksDump \u3067\u79fb\u884c\u5143\u306e LUKS \u30d8\u30c3\u30c0\u30fc\u3068 key slot \u3092\u78ba\u8a8d\u3057\u3001\u6b21\u306b cryptsetup open \u3067\u79fb\u884c\u5143\u3092\u958b\u304d\u3001lsblk -f \u3067\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS\u3001mapper\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u306e\u5bfe\u5fdc\u3092\u78ba\u8a8d\u3059\u308b\u3002\u305d\u306e\u5f8c\u3001\u521d\u56de\u78ba\u8a8d\u3067\u306f\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u79fb\u884c\u5143\u304c\u6b63\u3057\u3044\u5bfe\u8c61\u3067\u3042\u308a\u3001\/mnt\/old_crypt \u304b\u3089\u65e2\u5b58\u30c7\u30fc\u30bf\u3092\u8aad\u3081\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u79fb\u884c\u5143\u304c\u901a\u5e38\u904b\u7528\u4e2d\u306e\u73fe\u5f79\u9818\u57df\u3067\u3001\u66f4\u65b0\u505c\u6b62\u6642\u9593\u3092\u8a2d\u3051\u3066\u79fb\u884c\u3059\u308b\u5834\u5408\u306f\u3001\u5f8c\u7d9a\u306e\u5dee\u5206\u540c\u671f\u306e\u305f\u3081\u306b\u3001\u3069\u306e\u6642\u70b9\u3067\u66f4\u65b0\u3092\u6b62\u3081\u308b\u304b\u3092\u6c7a\u3081\u3066\u304a\u304f\u3002<\/p>\n<h3>17.2 \u79fb\u884c\u5148\u306e LUKS2 \u30c7\u30d0\u30a4\u30b9\u3092\u65b0\u898f\u4f5c\u6210\u3059\u308b<\/h3>\n<p>\u79fb\u884c\u5148\u306f\u3001\u73fe\u5728\u306e\u4e3b\u7cfb\u3068\u3057\u3066\u4f7f\u3046\u524d\u63d0\u3067 LUKS2 \u3092\u660e\u793a\u3057\u3066\u4f5c\u6210\u3059\u308b\u3002\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u53d6\u308a\u9055\u3048\u308b\u3068\u79fb\u884c\u5143\u3084\u5225\u5a92\u4f53\u3092\u7834\u58ca\u3059\u308b\u305f\u3081\u3001luksFormat \u306e\u524d\u306b\u5fc5\u305a\u5bfe\u8c61\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u884c\u3046 luksFormat \u306f\u7834\u58ca\u7684\u64cd\u4f5c\u3067\u3042\u308a\u3001\/dev\/newDevice \u4e0a\u306e\u65e2\u5b58\u30c7\u30fc\u30bf\u306f\u5931\u308f\u308c\u308b\u3002\u79fb\u884c\u5148\u306f\u3001\u4f5c\u6210\u76f4\u5f8c\u306b keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u307e\u3067\u6574\u5099\u3057\u3066\u304a\u304f\u3068\u3001\u305d\u306e\u5f8c\u306e\u691c\u8a3c\u3068\u53f0\u5e33\u5316\u304c\u5b89\u5b9a\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksFormat --type luks2 \/dev\/newDevice<br \/>\nsudo cryptsetup open \/dev\/newDevice new_crypt<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/newDevice \u306b LUKS2 \u30d8\u30c3\u30c0\u30fc\u304c\u4f5c\u6210\u3055\u308c\u3001\/dev\/mapper\/new_crypt \u304c\u73fe\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e\u6642\u70b9\u3067\u306f\u3001\u79fb\u884c\u5148\u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3068\u3057\u3066\u958b\u304b\u308c\u3066\u3044\u308b\u3060\u3051\u3067\u3042\u308a\u3001\u307e\u3060\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306f\u5b58\u5728\u3057\u306a\u3044\u3002\u901a\u5e38\u904b\u7528\u3067 keyfile \u3092\u4f7f\u3046\u5834\u5408\u306f\u3001\u3053\u306e\u6bb5\u968e\u3067 keyfile \u3092\u8ffd\u52a0\u3057\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u6b8b\u3059\u304b\u3069\u3046\u304b\u3092\u8a2d\u8a08\u306b\u5f93\u3063\u3066\u6c7a\u3081\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksAddKey \/dev\/newDevice \/etc\/cryptsetup-keys\/crypt_name.key<br \/>\nsudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/newDevice<br \/>\nsudo cryptsetup luksDump \/dev\/newDevice<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u78ba\u8a8d\u306b\u3088\u308a\u3001\u79fb\u884c\u5148\u304c\u901a\u5e38\u904b\u7528\u7528 keyfile \u3067\u958b\u3051\u308b\u3053\u3068\u3001\u6709\u52b9\u306a key slot \u304c\u60f3\u5b9a\u3069\u304a\u308a\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5225 key slot \u306b\u6b8b\u3059\u5834\u5408\u306f\u3001keyfile \u306a\u3057\u306e test-passphrase \u3067\u3082\u78ba\u8a8d\u3059\u308b\u3002\u79fb\u884c\u5148\u306e key slot \u304c\u6574\u7406\u3055\u308c\u308b\u524d\u306b\u5927\u91cf\u30c7\u30fc\u30bf\u3092\u540c\u671f\u3059\u308b\u3068\u3001\u5f8c\u304b\u3089\u89e3\u9664\u7d4c\u8def\u3092\u898b\u5931\u3044\u3084\u3059\u3044\u305f\u3081\u3001\u89e3\u9664\u624b\u6bb5\u306f\u79fb\u884c\u521d\u671f\u306b\u78ba\u5b9a\u3057\u3066\u304a\u304f\u307b\u3046\u304c\u3088\u3044\u3002<\/p>\n<h3>17.3 \u79fb\u884c\u5148\u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3057\u3066\u30de\u30a6\u30f3\u30c8\u3059\u308b<\/h3>\n<p>\u79fb\u884c\u5148\u3092\u958b\u3044\u305f\u5f8c\u306f\u3001\u5fa9\u53f7\u5f8c\u306e mapper device \u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u4f5c\u6210\u3059\u308b\u3002mkfs.ext4 \u306e\u5bfe\u8c61\u306f \/dev\/newDevice \u3067\u306f\u306a\u304f\u3001\/dev\/mapper\/new_crypt \u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u524d\u306e\u5143\u30c7\u30d0\u30a4\u30b9\u306b mkfs \u3092\u5b9f\u884c\u3059\u308b\u3068 LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u58ca\u3059\u5371\u967a\u304c\u3042\u308b\u305f\u3081\u3001\u3053\u3053\u3067\u306f\u5fc5\u305a\u5fa9\u53f7\u5f8c\u306e mapper device \u3092\u5bfe\u8c61\u306b\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mkfs.ext4 \/dev\/mapper\/new_crypt<br \/>\nsudo mkdir -p \/mnt\/new_crypt<br \/>\nsudo mount \/dev\/mapper\/new_crypt \/mnt\/new_crypt<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/new_crypt \u304c\u7a7a\u306e\u79fb\u884c\u5148\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3068\u3057\u3066\u5229\u7528\u53ef\u80fd\u306b\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u3053\u3067 lsblk -f \u3092\u5b9f\u884c\u3057\u3001\/dev\/newDevice\u3001\/dev\/mapper\/new_crypt\u3001ext4\u3001\/mnt\/new_crypt \u306e\u5bfe\u5fdc\u3092\u78ba\u8a8d\u3059\u308b\u3002LVM \u3068\u7d44\u307f\u5408\u308f\u305b\u308b\u5834\u5408\u306f\u3001\u524d\u7ae0\u3067\u6574\u7406\u3057\u305f\u69cb\u6210\u306b\u5f93\u3044\u3001LUKS \u306e\u4e0a\u306b LVM \u3092\u4f5c\u308b\u306e\u304b\u3001LVM \u306e\u4e0a\u306b LUKS \u3092\u4f5c\u308b\u306e\u304b\u3092\u5148\u306b\u78ba\u5b9a\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<h3>17.4 rsync \u3067\u30c7\u30fc\u30bf\u3092\u540c\u671f\u3059\u308b<\/h3>\n<p>\u30c7\u30fc\u30bf\u540c\u671f\u3067\u306f\u3001\u5358\u7d14\u306b\u30d5\u30a1\u30a4\u30eb\u5185\u5bb9\u3060\u3051\u3092\u30b3\u30d4\u30fc\u3059\u308b\u306e\u3067\u306f\u306a\u304f\u3001\u6240\u6709\u8005\u3001\u30b0\u30eb\u30fc\u30d7\u3001\u6a29\u9650\u3001\u6642\u523b\u3001hard link\u3001ACL\u3001\u62e1\u5f35\u5c5e\u6027\u3092\u7dad\u6301\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u7279\u306b\u30b7\u30b9\u30c6\u30e0\u9818\u57df\u3084\u30db\u30fc\u30e0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30c7\u30fc\u30bf\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u9818\u57df\u3067\u306f\u3001\u6240\u6709\u8005\u3084\u6a29\u9650\u304c\u5909\u308f\u308b\u3060\u3051\u3067\u5fa9\u5143\u5f8c\u306b\u52d5\u4f5c\u304c\u5909\u308f\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u79fb\u884c\u3067\u306f cp \u3088\u308a\u3082 rsync \u3092\u4f7f\u3044\u3001\u4f55\u3092\u4fdd\u5b58\u3059\u308b\u304b\u3092 option \u3068\u3057\u3066\u660e\u793a\u3059\u308b\u307b\u3046\u304c\u3088\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo rsync -aHAX --numeric-ids \/mnt\/old_crypt\/ \/mnt\/new_crypt\/<br \/>\nsync<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e rsync \u306f\u3001\u79fb\u884c\u5143 \/mnt\/old_crypt\/ \u306e\u5185\u5bb9\u3092\u79fb\u884c\u5148 \/mnt\/new_crypt\/ \u3078\u540c\u671f\u3059\u308b\u3002-a \u306f archive mode \u3067\u3042\u308a\u3001\u57fa\u672c\u7684\u306a\u5c5e\u6027\u3092\u7dad\u6301\u3059\u308b\u3002-H \u306f hard link\u3001-A \u306f ACL\u3001-X \u306f\u62e1\u5f35\u5c5e\u6027\u3092\u7dad\u6301\u3059\u308b\u3002&#8211;numeric-ids \u306f\u30e6\u30fc\u30b6\u30fc\u540d\u3084\u30b0\u30eb\u30fc\u30d7\u540d\u3067\u306f\u306a\u304f\u6570\u5024 ID \u3068\u3057\u3066\u6240\u6709\u8005\u3092\u4fdd\u6301\u3059\u308b\u305f\u3081\u3001\u5225\u74b0\u5883\u3067\u30e6\u30fc\u30b6\u30fc\u540d\u306e\u89e3\u6c7a\u7d50\u679c\u304c\u5909\u308f\u308b\u5834\u5408\u306b\u3082\u610f\u5473\u304c\u305a\u308c\u306b\u304f\u3044\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u79fb\u884c\u5148\u306b\u79fb\u884c\u5143\u3068\u540c\u3058\u30d5\u30a1\u30a4\u30eb\u69cb\u9020\u304c\u518d\u73fe\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<p>\u672b\u5c3e\u306e slash \u3082\u91cd\u8981\u3067\u3042\u308b\u3002\/mnt\/old_crypt\/ \u306e\u3088\u3046\u306b\u672b\u5c3e\u306b slash \u3092\u4ed8\u3051\u308b\u3068\u3001old_crypt \u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u305d\u306e\u3082\u306e\u3067\u306f\u306a\u304f\u3001\u305d\u306e\u4e2d\u8eab\u304c \/mnt\/new_crypt\/ \u3078\u540c\u671f\u3055\u308c\u308b\u3002\u672b\u5c3e slash \u306e\u6709\u7121\u3092\u8aa4\u308b\u3068\u3001\u79fb\u884c\u5148\u306b \/mnt\/new_crypt\/old_crypt \u306e\u3088\u3046\u306a\u4f59\u5206\u306a\u968e\u5c64\u304c\u3067\u304d\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u79fb\u884c\u624b\u9806\u3067\u306f\u3001rsync \u306e option \u3060\u3051\u3067\u306a\u304f\u3001\u540c\u671f\u5143\u3068\u540c\u671f\u5148\u306e\u30d1\u30b9\u69cb\u9020\u3082\u53f0\u5e33\u307e\u305f\u306f\u4f5c\u696d\u624b\u9806\u66f8\u306b\u660e\u8a18\u3059\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>option<\/th>\n<th>\u610f\u5473<\/th>\n<th>\u79fb\u884c\u3067\u5fc5\u8981\u306a\u7406\u7531<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>-a<\/td>\n<td>\u518d\u5e30\u3001\u6a29\u9650\u3001\u6240\u6709\u8005\u3001\u30b0\u30eb\u30fc\u30d7\u3001\u6642\u523b\u3001\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u306a\u3069\u3092\u7dad\u6301\u3059\u308b\u3002<\/td>\n<td>\u901a\u5e38\u306e\u30d5\u30a1\u30a4\u30eb\u30b3\u30d4\u30fc\u3088\u308a\u3001\u5fa9\u5143\u5f8c\u306e\u72b6\u614b\u3092\u5143\u74b0\u5883\u306b\u8fd1\u3065\u3051\u3089\u308c\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>-H<\/td>\n<td>hard link \u306e\u95a2\u4fc2\u3092\u7dad\u6301\u3059\u308b\u3002<\/td>\n<td>\u540c\u3058\u5b9f\u4f53\u3092\u8907\u6570\u30d1\u30b9\u304b\u3089\u53c2\u7167\u3057\u3066\u3044\u308b\u69cb\u9020\u3092\u58ca\u3057\u306b\u304f\u304f\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>-A<\/td>\n<td>ACL \u3092\u7dad\u6301\u3059\u308b\u3002<\/td>\n<td>\u901a\u5e38\u306e Unix permission \u3060\u3051\u3067\u306f\u8868\u305b\u306a\u3044\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u3092\u4fdd\u6301\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>-X<\/td>\n<td>\u62e1\u5f35\u5c5e\u6027\u3092\u7dad\u6301\u3059\u308b\u3002<\/td>\n<td>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c5e\u6027\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u56fa\u6709\u5c5e\u6027\u3092\u4fdd\u6301\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>&#8211;numeric-ids<\/td>\n<td>\u30e6\u30fc\u30b6\u30fc\u540d\u3067\u306f\u306a\u304f\u6570\u5024 UID \/ GID \u3068\u3057\u3066\u6240\u6709\u8005\u3092\u6271\u3046\u3002<\/td>\n<td>\u79fb\u884c\u5148\u74b0\u5883\u3067\u540d\u524d\u89e3\u6c7a\u304c\u5909\u308f\u3063\u3066\u3082\u6240\u6709\u8005\u306e\u610f\u5473\u3092\u4fdd\u3061\u3084\u3059\u3044\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>17.5 \u66f4\u65b0\u304c\u3042\u308b\u9818\u57df\u3067\u306f\u5dee\u5206\u518d\u540c\u671f\u3092\u884c\u3046<\/h3>\n<p>\u79fb\u884c\u4e2d\u306b\u79fb\u884c\u5143\u304c\u66f4\u65b0\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u5834\u5408\u3001\u4e00\u5ea6\u306e rsync \u3060\u3051\u3067\u5b8c\u4e86\u3068\u307f\u306a\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002\u6700\u521d\u306e\u540c\u671f\u306f\u5927\u91cf\u30c7\u30fc\u30bf\u3092\u79fb\u3059\u305f\u3081\u306e\u521d\u56de\u540c\u671f\u3067\u3042\u308a\u3001\u305d\u306e\u5f8c\u306b\u66f4\u65b0\u3092\u505c\u6b62\u3057\u3066\u5dee\u5206\u518d\u540c\u671f\u3092\u884c\u3046\u3002Web \u30b5\u30fc\u30d3\u30b9\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3001\u30e1\u30fc\u30eb\u30b9\u30d7\u30fc\u30eb\u3001\u30ed\u30b0\u3001\u30db\u30fc\u30e0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306a\u3069\u306f\u3001\u79fb\u884c\u4e2d\u306b\u5909\u5316\u3057\u3084\u3059\u3044\u3002\u66f4\u65b0\u304c\u7d9a\u304f\u9818\u57df\u3067\u306f\u3001\u505c\u6b62\u6642\u9593\u3092\u8a2d\u3051\u308b\u304b\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3054\u3068\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u624b\u9806\u3092\u4f7f\u3046\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo rsync -aHAX --numeric-ids --delete \/mnt\/old_crypt\/ \/mnt\/new_crypt\/<br \/>\nsync<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u5dee\u5206\u518d\u540c\u671f\u3067\u306f\u3001&#8211;delete \u3092\u4ed8\u3051\u308b\u3053\u3068\u3067\u3001\u79fb\u884c\u5143\u3067\u524a\u9664\u6e08\u307f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u79fb\u884c\u5148\u304b\u3089\u3082\u524a\u9664\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u79fb\u884c\u5148\u304c\u79fb\u884c\u5143\u306e\u6700\u7d42\u72b6\u614b\u306b\u8fd1\u3065\u304f\u3053\u3068\u3067\u3042\u308b\u3002\u305f\u3060\u3057\u3001&#8211;delete \u306f\u5f37\u3044 option \u3067\u3042\u308a\u3001\u540c\u671f\u5143\u3068\u540c\u671f\u5148\u3092\u53d6\u308a\u9055\u3048\u308b\u3068\u79fb\u884c\u5148\u306e\u5fc5\u8981\u30c7\u30fc\u30bf\u3092\u524a\u9664\u3059\u308b\u5371\u967a\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001&#8211;delete \u3092\u4f7f\u3046\u306e\u306f\u3001\u521d\u56de\u540c\u671f\u5f8c\u3001\u540c\u671f\u65b9\u5411\u304c\u78ba\u5b9a\u3057\u3001\u79fb\u884c\u5148\u3092\u79fb\u884c\u5143\u306b\u63c3\u3048\u308b\u6bb5\u968e\u306b\u9650\u5b9a\u3059\u308b\u3002<\/p>\n<h3>17.6 \u79fb\u884c\u5148\u3092\u691c\u8a3c\u3059\u308b<\/h3>\n<p>\u79fb\u884c\u5b8c\u4e86\u5f8c\u306f\u3001\u79fb\u884c\u5148\u304c\u958b\u3051\u308b\u3053\u3068\u3001\u30de\u30a6\u30f3\u30c8\u3067\u304d\u308b\u3053\u3068\u3001\u4e3b\u8981\u30d5\u30a1\u30a4\u30eb\u304c\u8aad\u3081\u308b\u3053\u3068\u3001\u6240\u6709\u8005\u3068\u6a29\u9650\u304c\u7dad\u6301\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3001\u5bb9\u91cf\u3068\u30d5\u30a1\u30a4\u30eb\u6570\u304c\u5927\u304d\u304f\u305a\u308c\u3066\u3044\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u308b\u306e\u306f\u3001rsync \u304c\u7d42\u4e86\u3057\u305f\u304b\u3069\u3046\u304b\u3067\u306f\u306a\u304f\u3001\u79fb\u884c\u5148\u3092\u5fa9\u5143\u5148\u3068\u3057\u3066\u5b9f\u969b\u306b\u4f7f\u3048\u308b\u304b\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u79fb\u884c\u3067\u306f\u3001\u30c7\u30fc\u30bf\u540c\u671f\u3001\u89e3\u9664\u624b\u6bb5\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u30de\u30a6\u30f3\u30c8\u624b\u9806\u3092\u3059\u3079\u3066\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup close new_crypt<br \/>\nsudo cryptsetup open --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/newDevice new_crypt<br \/>\nsudo mount \/dev\/mapper\/new_crypt \/mnt\/new_crypt<br \/>\nls -la \/mnt\/new_crypt<br \/>\ndf -h \/mnt\/old_crypt \/mnt\/new_crypt<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u624b\u9806\u3067\u306f\u3001\u3044\u3063\u305f\u3093\u79fb\u884c\u5148\u3092\u9589\u3058\u3066\u304b\u3089\u3001\u901a\u5e38\u904b\u7528\u3067\u4f7f\u3046 keyfile \u3067\u518d\u5ea6\u958b\u304d\u76f4\u3057\u3066\u3044\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u79fb\u884c\u5148\u304c\u901a\u5e38\u904b\u7528\u3068\u540c\u3058\u624b\u9806\u3067\u958b\u304d\u3001\u30de\u30a6\u30f3\u30c8\u3067\u304d\u3001\u4e3b\u8981\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u8aad\u3081\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u5358\u306b\u4f5c\u6210\u76f4\u5f8c\u306e\u958b\u3044\u305f\u72b6\u614b\u3067\u8aad\u3081\u308b\u3060\u3051\u3067\u306f\u3001\u5fa9\u65e7\u624b\u9806\u3068\u3057\u3066\u306e\u78ba\u8a8d\u306b\u306f\u306a\u3089\u306a\u3044\u3002\u9589\u3058\u3066\u3001\u958b\u304d\u76f4\u3057\u3001\u30de\u30a6\u30f3\u30c8\u3057\u76f4\u3059\u3053\u3068\u3067\u3001\u5c06\u6765\u306e\u901a\u5e38\u5229\u7528\u3084\u5fa9\u65e7\u6642\u306b\u3082\u4f7f\u3048\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo find \/mnt\/old_crypt -xdev | wc -l<br \/>\nsudo find \/mnt\/new_crypt -xdev | wc -l<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u30d5\u30a1\u30a4\u30eb\u6570\u78ba\u8a8d\u306f\u5b8c\u5168\u306a\u540c\u4e00\u6027\u691c\u67fb\u3067\u306f\u306a\u3044\u304c\u3001\u5927\u304d\u306a\u6b20\u843d\u3092\u767a\u898b\u3059\u308b\u305f\u3081\u306e\u7c21\u6613\u78ba\u8a8d\u3068\u3057\u3066\u6709\u52b9\u3067\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u79fb\u884c\u5143\u3068\u79fb\u884c\u5148\u306e\u30d5\u30a1\u30a4\u30eb\u6570\u304c\u5927\u304d\u304f\u305a\u308c\u3066\u3044\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u305f\u3060\u3057\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u56fa\u6709\u306e lost+found\u3001\u540c\u671f\u9664\u5916\u3001\u5b9f\u884c\u4e2d\u306b\u5909\u5316\u3057\u305f\u30ed\u30b0\u306a\u3069\u306b\u3088\u308a\u3001\u5b8c\u5168\u4e00\u81f4\u3057\u306a\u3044\u5834\u5408\u3082\u3042\u308b\u3002\u91cd\u8981\u306a\u306e\u306f\u3001\u5dee\u7570\u304c\u8aac\u660e\u3067\u304d\u308b\u304b\u3069\u3046\u304b\u3067\u3042\u308b\u3002<\/p>\n<h3>17.7 \u8d77\u52d5\u6642\u81ea\u52d5\u89e3\u9664\u3084\u30de\u30a6\u30f3\u30c8\u8a2d\u5b9a\u3092\u5207\u308a\u66ff\u3048\u308b<\/h3>\n<p>\u79fb\u884c\u5148\u3092\u901a\u5e38\u5229\u7528\u306b\u5207\u308a\u66ff\u3048\u308b\u5834\u5408\u306f\u3001crypttab \u3068 fstab \u306e\u66f4\u65b0\u304c\u5fc5\u8981\u306b\u306a\u308b\u3002crypttab \u3067\u306f\u65b0\u3057\u3044 LUKS UUID\u3001mapper \u540d\u3001keyfile \u3092\u6307\u5b9a\u3057\u3001fstab \u3067\u306f\u65b0\u3057\u3044 mapper device \u307e\u305f\u306f\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID \u3068\u30de\u30a6\u30f3\u30c8\u30dd\u30a4\u30f3\u30c8\u3092\u5bfe\u5fdc\u3055\u305b\u308b\u3002\u3053\u3053\u3067\u65e7\u5a92\u4f53\u306e UUID \u3092\u6b8b\u3057\u305f\u307e\u307e\u306b\u3059\u308b\u3068\u3001\u8d77\u52d5\u6642\u306b\u65e7\u69cb\u6210\u3092\u958b\u3053\u3046\u3068\u3057\u305f\u308a\u3001\u610f\u56f3\u3057\u306a\u3044\u5a92\u4f53\u3092\u30de\u30a6\u30f3\u30c8\u3057\u3088\u3046\u3068\u3057\u305f\u308a\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/newDevice<br \/>\nsudo blkid<br \/>\ncat \/etc\/crypttab<br \/>\ncat \/etc\/fstab<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u6bb5\u968e\u3067\u306f\u3001\u3059\u3050\u306b\u8a2d\u5b9a\u3092\u66f8\u304d\u63db\u3048\u308b\u524d\u306b\u3001\u5fc5\u8981\u306a\u8b58\u5225\u5b50\u3092\u78ba\u8a8d\u3059\u308b\u3002luksDump \u3067\u65b0\u3057\u3044 LUKS UUID \u3092\u78ba\u8a8d\u3057\u3001blkid \u3067\u5fa9\u53f7\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID \u3092\u78ba\u8a8d\u3059\u308b\u3002crypttab \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u8a2d\u5b9a\u3067\u3042\u308a\u3001fstab \u306f\u958b\u3044\u305f\u5f8c\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u8a2d\u5b9a\u3067\u3042\u308b\u3002\u5207\u66ff\u5f8c\u306f\u3001\u518d\u8d77\u52d5\u307e\u305f\u306f systemd \u306e\u8a2d\u5b9a\u53cd\u6620\u306b\u3088\u308a\u3001\u65b0\u3057\u3044\u79fb\u884c\u5148\u304c\u60f3\u5b9a\u3069\u304a\u308a\u81ea\u52d5\u89e3\u9664\u30fb\u81ea\u52d5\u30de\u30a6\u30f3\u30c8\u3055\u308c\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<h3>17.8 \u65e7\u69cb\u6210\u306f\u3059\u3050\u6d88\u3055\u305a\u306b\u5f79\u5272\u3092\u5909\u66f4\u3059\u308b<\/h3>\n<p>\u79fb\u884c\u5f8c\u306e\u65e7\u69cb\u6210\u306f\u3001\u3059\u3050\u306b\u524a\u9664\u3059\u308b\u306e\u3067\u306f\u306a\u304f\u3001\u3044\u3063\u305f\u3093\u5f79\u5272\u3092\u5909\u66f4\u3059\u308b\u3002\u305f\u3068\u3048\u3070\u3001\u65e7 LUKS1 \u5a92\u4f53\u306f\u4e3b\u7cfb\u304b\u3089\u5916\u3057\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u3001\u9000\u5f79\u5019\u88dc\u306e\u3044\u305a\u308c\u304b\u3078\u5206\u985e\u3059\u308b\u3002TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u3082\u540c\u69d8\u306b\u3001\u73fe\u884c\u4e3b\u7cfb\u3067\u306f\u306a\u304f\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u9650\u5b9a\u66f4\u65b0\u5bfe\u8c61\u3001\u79fb\u884c\u6e08\u307f\u9000\u5f79\u5019\u88dc\u3068\u3057\u3066\u6271\u3046\u3002\u79fb\u884c\u76f4\u5f8c\u306f\u3001\u65b0\u69cb\u6210\u306b\u898b\u843d\u3068\u3057\u304c\u3042\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3001\u4e00\u5b9a\u671f\u9593\u306f\u65e7\u69cb\u6210\u3092\u5fa9\u5143\u7d4c\u8def\u3068\u3057\u3066\u4fdd\u6301\u3059\u308b\u307b\u3046\u304c\u5b89\u5168\u3067\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u65e7\u69cb\u6210\u306e\u6271\u3044<\/th>\n<th>\u6761\u4ef6<\/th>\n<th>\u904b\u7528<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7<\/td>\n<td>\u65e7\u69cb\u6210\u304c\u307e\u3060\u958b\u3051\u3001\u904e\u53bb\u74b0\u5883\u3084\u79fb\u884c\u5931\u6557\u6642\u306e\u9003\u3052\u9053\u3068\u3057\u3066\u4fa1\u5024\u304c\u3042\u308b\u3002<\/td>\n<td>\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3068\u70b9\u691c\u5468\u671f\u3092\u6c7a\u3081\u3001\u4e3b\u7cfb\u3068\u306f\u5225\u7cfb\u7d71\u3068\u3057\u3066\u4fdd\u6301\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6<\/td>\n<td>\u66f4\u65b0\u306f\u4e0d\u8981\u3060\u304c\u3001\u904e\u53bb\u72b6\u614b\u3092\u4fdd\u6301\u3059\u308b\u610f\u5473\u304c\u3042\u308b\u3002<\/td>\n<td>\u539f\u5247\u3068\u3057\u3066\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u6271\u3044\u3001\u5e74 1 \u56de\u7a0b\u5ea6\u306e\u68da\u5378\u3057\u3067\u958b\u3051\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u9000\u5f79\u5019\u88dc<\/td>\n<td>\u79fb\u884c\u5148\u3068\u5225\u7cfb\u7d71\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3067\u5fa9\u5143\u53ef\u80fd\u6027\u304c\u78ba\u4fdd\u3055\u308c\u3066\u3044\u308b\u3002<\/td>\n<td>\u4e00\u5b9a\u671f\u9593\u4fdd\u6301\u3057\u305f\u5f8c\u3001\u4fdd\u7ba1\u505c\u6b62\u307e\u305f\u306f\u5b89\u5168\u6d88\u53bb\u3092\u691c\u8a0e\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5b89\u5168\u6d88\u53bb\u5bfe\u8c61<\/td>\n<td>\u5f79\u5272\u304c\u7d42\u308f\u308a\u3001\u4fdd\u6301\u3059\u308b\u5fc5\u8981\u304c\u306a\u304f\u3001\u6f0f\u6d29\u30ea\u30b9\u30af\u3092\u6e1b\u3089\u3057\u305f\u3044\u3002<\/td>\n<td>\u30c7\u30fc\u30bf\u306e\u5b58\u5728\u78ba\u8a8d\u3001\u9000\u5f79\u627f\u8a8d\u3001\u53f0\u5e33\u66f4\u65b0\u5f8c\u306b\u6d88\u53bb\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>17.9 \u79fb\u884c\u5b8c\u4e86\u6761\u4ef6\u3092\u660e\u6587\u5316\u3059\u308b<\/h3>\n<p>\u79fb\u884c\u5b8c\u4e86\u306f\u3001rsync \u304c\u7d42\u4e86\u3057\u305f\u6642\u70b9\u3067\u306f\u306a\u3044\u3002\u79fb\u884c\u5148\u304c\u901a\u5e38\u624b\u9806\u3067\u958b\u3051\u308b\u3053\u3068\u3001\u30de\u30a6\u30f3\u30c8\u3067\u304d\u308b\u3053\u3068\u3001\u4e3b\u8981\u30c7\u30fc\u30bf\u3092\u8aad\u3081\u308b\u3053\u3068\u3001keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u6a5f\u80fd\u3059\u308b\u3053\u3068\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u5f97\u3057\u305f\u3053\u3068\u3001crypttab \u3068 fstab \u306e\u5207\u66ff\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3053\u3068\u3001\u65e7\u69cb\u6210\u306e\u5f79\u5272\u3092\u53f0\u5e33\u306b\u8a18\u9332\u3057\u305f\u3053\u3068\u307e\u3067\u78ba\u8a8d\u3057\u3066\u3001\u521d\u3081\u3066\u79fb\u884c\u5b8c\u4e86\u3068\u5224\u65ad\u3059\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u79fb\u884c\u3067\u306f\u3001\u30c7\u30fc\u30bf\u79fb\u52d5\u3088\u308a\u3082\u3001\u79fb\u884c\u5f8c\u306b\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u7dad\u6301\u3067\u304d\u308b\u304b\u304c\u672c\u8cea\u3067\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5b8c\u4e86\u6761\u4ef6<\/th>\n<th>\u78ba\u8a8d\u5185\u5bb9<\/th>\n<th>\u672a\u5b9f\u65bd\u6642\u306e\u30ea\u30b9\u30af<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u79fb\u884c\u5148\u306e\u89e3\u9664\u78ba\u8a8d<\/td>\n<td>\u901a\u5e38\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067 test-passphrase \u304c\u901a\u308b\u3002<\/td>\n<td>\u969c\u5bb3\u6642\u306b\u79fb\u884c\u5148\u3092\u958b\u3051\u306a\u3044\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u79fb\u884c\u5148\u306e mount \u78ba\u8a8d<\/td>\n<td>\u901a\u5e38\u904b\u7528\u3068\u540c\u3058\u624b\u9806\u3067 mount \u3067\u304d\u308b\u3002<\/td>\n<td>\u89e3\u9664\u306f\u3067\u304d\u3066\u3082\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u5229\u7528\u3067\u304d\u306a\u3044\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30c7\u30fc\u30bf\u78ba\u8a8d<\/td>\n<td>\u4e3b\u8981\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3001\u30d5\u30a1\u30a4\u30eb\u6570\u3001\u5bb9\u91cf\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u30cf\u30c3\u30b7\u30e5\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u6b20\u843d\u3084\u540c\u671f\u65b9\u5411\u306e\u8aa4\u308a\u306b\u6c17\u3065\u3051\u306a\u3044\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7<\/td>\n<td>\u79fb\u884c\u5148 LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u53d6\u5f97\u3057\u3001UUID \u3068\u53d6\u5f97\u65e5\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u7834\u640d\u6642\u306b\u5fa9\u65e7\u7d4c\u8def\u3092\u5931\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a<\/td>\n<td>crypttab\u3001fstab\u3001mapper \u540d\u3001UUID\u3001mount point \u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u518d\u8d77\u52d5\u5f8c\u306b\u81ea\u52d5\u89e3\u9664\u307e\u305f\u306f mount \u306b\u5931\u6557\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u65e7\u69cb\u6210\u306e\u5f79\u5272\u5909\u66f4<\/td>\n<td>\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u3001\u9000\u5f79\u5019\u88dc\u306e\u3044\u305a\u308c\u304b\u3078\u5206\u985e\u3059\u308b\u3002<\/td>\n<td>\u65e7\u5a92\u4f53\u3092\u4e3b\u7cfb\u306e\u307e\u307e\u4f7f\u3044\u7d9a\u3051\u305f\u308a\u3001\u5fc5\u8981\u306a\u5fa9\u5143\u7d4c\u8def\u3092\u8aa4\u3063\u3066\u6d88\u3057\u305f\u308a\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u79fb\u884c\u5b8c\u4e86\u5f8c\u306b\u306f\u3001\u79fb\u884c\u5148\u306e LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3057\u3001\u53f0\u5e33\u3092\u66f4\u65b0\u3059\u308b\u3002\u3053\u3053\u3067\u8a18\u9332\u3059\u308b\u3079\u304d\u5185\u5bb9\u306f\u3001\u65b0\u65e7\u30c7\u30d0\u30a4\u30b9\u306e by-id\u3001LUKS UUID\u3001mapper \u540d\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0 UUID\u3001mount point\u3001key slot \u69cb\u6210\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u5834\u6240\u3001\u540c\u671f\u5b9f\u65bd\u65e5\u3001\u6700\u7d42\u78ba\u8a8d\u65e5\u3001\u65e7\u69cb\u6210\u306e\u5f79\u5272\u3067\u3042\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u79fb\u884c\u4f5c\u696d\u304c\u305d\u306e\u5834\u9650\u308a\u306e\u30b3\u30d4\u30fc\u3067\u306f\u306a\u304f\u3001\u6b21\u56de\u4ee5\u964d\u306e\u901a\u5e38\u904b\u7528\u3068\u5fa9\u65e7\u624b\u9806\u306b\u63a5\u7d9a\u3055\u308c\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksHeaderBackup \/dev\/newDevice --header-backup-file luks-new_crypt-header-YYYYMMDD.img<br \/>\nsudo cryptsetup luksDump \/dev\/newDevice<br \/>\nsudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/newDevice<br \/>\nsudo cryptsetup open --test-passphrase \/dev\/newDevice<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u79fb\u884c\u3092\u300c\u53e4\u3044\u6697\u53f7\u65b9\u5f0f\u304b\u3089\u65b0\u3057\u3044\u6697\u53f7\u65b9\u5f0f\u3078\u79fb\u3059\u4f5c\u696d\u300d\u3068\u3060\u3051\u898b\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u79fb\u884c\u306f\u3001\u6697\u53f7\u5f62\u5f0f\u3001key slot\u3001\u30d8\u30c3\u30c0\u30fc\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u6240\u6709\u8005\u3001\u6a29\u9650\u3001\u8d77\u52d5\u8a2d\u5b9a\u3001\u53f0\u5e33\u3001\u65e7\u69cb\u6210\u306e\u5f79\u5272\u3092\u307e\u3068\u3081\u3066\u66f4\u65b0\u3059\u308b\u4f5c\u696d\u3067\u3042\u308b\u3002\u5b89\u5168\u306a\u79fb\u884c\u3068\u306f\u3001\u65e7\u69cb\u6210\u3092\u3059\u3050\u6d88\u3059\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u65b0\u69cb\u6210\u304c\u5341\u5206\u306b\u691c\u8a3c\u3055\u308c\u308b\u307e\u3067\u65e7\u69cb\u6210\u3092\u5fa9\u5143\u7d4c\u8def\u3068\u3057\u3066\u4fdd\u6301\u3057\u3001\u691c\u8a3c\u5f8c\u306b\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u3001\u9000\u5f79\u5019\u88dc\u3078\u5f79\u5272\u3092\u5909\u66f4\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<hr>\n<h2>18. \u5fa9\u65e7\u6642\u306f\u89b3\u6e2c\u3001\u89e3\u9664\u3001\u8aad\u307f\u53d6\u308a\u3001\u6551\u51fa\u3001\u4fee\u5fa9\u306e\u9806\u306b\u9032\u3081\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5fa9\u65e7\u3067\u306f\u3001\u3044\u304d\u306a\u308a fsck\u3001e2fsck\u3001luksHeaderRestore\u3001\u518d\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u3001\u518d\u540c\u671f\u3092\u5b9f\u884c\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002\u5fa9\u65e7\u6642\u306b\u6700\u521d\u306b\u884c\u3046\u3079\u304d\u3053\u3068\u306f\u3001\u58ca\u308c\u3066\u3044\u308b\u7b87\u6240\u3092\u76f4\u3059\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u3069\u306e\u5c64\u3067\u5931\u6557\u3057\u3066\u3044\u308b\u306e\u304b\u3092\u89b3\u6e2c\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306f\u3001\u7269\u7406\u5a92\u4f53\u3001\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001key slot\u3001mapper device\u3001LVM\u3001filesystem\u3001mount point \u3068\u3044\u3046\u8907\u6570\u306e\u5c64\u3067\u69cb\u6210\u3055\u308c\u308b\u3002\u3069\u306e\u5c64\u307e\u3067\u6b63\u5e38\u306b\u5230\u9054\u3067\u304d\u3001\u3069\u306e\u5c64\u3067\u5931\u6557\u3057\u3066\u3044\u308b\u304b\u3092\u5207\u308a\u5206\u3051\u306a\u3044\u307e\u307e\u4fee\u5fa9\u64cd\u4f5c\u3092\u884c\u3046\u3068\u3001\u307e\u3060\u6551\u51fa\u3067\u304d\u308b\u30c7\u30fc\u30bf\u3078\u66f8\u304d\u8fbc\u307f\u3092\u52a0\u3048\u3001\u5fa9\u65e7\u53ef\u80fd\u6027\u3092\u4e0b\u3052\u308b\u5371\u967a\u304c\u3042\u308b\u3002<\/p>\n<p>\u5fa9\u65e7\u624b\u9806\u306e\u57fa\u672c\u9806\u5e8f\u306f\u3001\u89b3\u6e2c\u3001\u89e3\u9664\u78ba\u8a8d\u3001\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u3001\u30c7\u30fc\u30bf\u6551\u51fa\u3001\u4fee\u5fa9\u5224\u65ad\u3001\u901a\u5e38\u5fa9\u5e30\u78ba\u8a8d\u3067\u3042\u308b\u3002\u89b3\u6e2c\u3067\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001UUID\u3001mapper\u3001LVM\u3001filesystem \u306e\u898b\u3048\u65b9\u3092\u78ba\u8a8d\u3059\u308b\u3002\u89e3\u9664\u78ba\u8a8d\u3067\u306f\u3001keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u4f7f\u3048\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u3067\u306f\u3001\u66f8\u304d\u8fbc\u307f\u3092\u884c\u308f\u305a\u306b\u30c7\u30fc\u30bf\u3078\u5230\u9054\u3067\u304d\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u30c7\u30fc\u30bf\u6551\u51fa\u3067\u306f\u3001\u4fee\u5fa9\u3088\u308a\u5148\u306b\u91cd\u8981\u30c7\u30fc\u30bf\u3092\u5225\u5a92\u4f53\u3078\u9000\u907f\u3059\u308b\u3002\u4fee\u5fa9\u5224\u65ad\u3067\u306f\u3001\u30d8\u30c3\u30c0\u30fc\u5fa9\u5143\u3084 e2fsck \u3092\u5b9f\u884c\u3059\u3079\u304d\u304b\u3092\u5224\u65ad\u3059\u308b\u3002\u901a\u5e38\u5fa9\u5e30\u78ba\u8a8d\u3067\u306f\u3001\u5fa9\u65e7\u5f8c\u306b\u901a\u5e38\u624b\u9806\u3067\u958b\u3051\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6bb5\u968e<\/th>\n<th>\u76ee\u7684<\/th>\n<th>\u5b9f\u65bd\u3059\u308b\u3053\u3068<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u89b3\u6e2c<\/td>\n<td>\u3069\u306e\u5c64\u307e\u3067\u898b\u3048\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>lsblk\u3001blkid\u3001luksDump\u3001LVM \u30b3\u30de\u30f3\u30c9\u3067\u5bfe\u8c61\u3068\u5c64\u306e\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u89e3\u9664\u78ba\u8a8d<\/td>\n<td>keyfile \u307e\u305f\u306f\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067 LUKS \u3092\u958b\u3051\u308b\u304b\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>test-passphrase \u3092\u4f7f\u3044\u3001mapper \u3092\u4f5c\u3089\u305a\u306b\u89e3\u9664\u53ef\u5426\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8<\/td>\n<td>\u66f8\u304d\u8fbc\u307f\u3092\u907f\u3051\u3066\u30c7\u30fc\u30bf\u3078\u5230\u9054\u3067\u304d\u308b\u304b\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u5fa9\u53f7\u5f8c\u306e mapper \u307e\u305f\u306f LV \u3092\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30c7\u30fc\u30bf\u6551\u51fa<\/td>\n<td>\u4fee\u5fa9\u524d\u306b\u91cd\u8981\u30c7\u30fc\u30bf\u3092\u5225\u5a92\u4f53\u3078\u9000\u907f\u3059\u308b\u3002<\/td>\n<td>rsync \u306a\u3069\u3067\u6551\u51fa\u5148\u3078\u30b3\u30d4\u30fc\u3057\u3001\u8aad\u307f\u53d6\u308a\u4e0d\u80fd\u7b87\u6240\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4fee\u5fa9\u5224\u65ad<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u5fa9\u5143\u3084 filesystem \u4fee\u5fa9\u3092\u5b9f\u884c\u3059\u3079\u304d\u304b\u5224\u65ad\u3059\u308b\u3002<\/td>\n<td>\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u53f0\u5e33\u3001\u5bfe\u8c61 UUID\u3001\u6551\u51fa\u72b6\u6cc1\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u4fee\u5fa9\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u901a\u5e38\u5fa9\u5e30\u78ba\u8a8d<\/td>\n<td>\u5fa9\u65e7\u5f8c\u306b\u901a\u5e38\u904b\u7528\u3078\u623b\u305b\u308b\u304b\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u901a\u5e38\u7528 keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001mount\u3001\u8aad\u307f\u53d6\u308a\u3092\u518d\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>18.1 \u307e\u305a\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u53d6\u308a\u9055\u3048\u3066\u3044\u306a\u3044\u304b\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u5fa9\u65e7\u6642\u306b\u6700\u3082\u907f\u3051\u308b\u3079\u304d\u4e8b\u6545\u306f\u3001\u58ca\u308c\u305f\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u306a\u304f\u6b63\u5e38\u306a\u30c7\u30d0\u30a4\u30b9\u3078\u4fee\u5fa9\u64cd\u4f5c\u3092\u884c\u3046\u3053\u3068\u3067\u3042\u308b\u3002\/dev\/sdX \u306f\u63a5\u7d9a\u9806\u3067\u5909\u308f\u308b\u305f\u3081\u3001\u5fa9\u65e7\u6642\u306b\u306f\u7279\u306b\u4fe1\u7528\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002\u307e\u305a lsblk -f \u3068 blkid \u3067\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS\u3001filesystem\u3001UUID\u3001mount point \u306e\u95a2\u4fc2\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u306e\u76ee\u7684\u306f\u3001\u5fa9\u65e7\u5bfe\u8c61\u304c\u672c\u5f53\u306b\u610f\u56f3\u3057\u305f\u5a92\u4f53\u3067\u3042\u308b\u3053\u3068\u3092\u3001\u5bb9\u91cf\u3001UUID\u3001filesystem type\u3001mount point\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066 \/dev\/disk\/by-id \u306b\u3088\u3063\u3066\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">lsblk -f<br \/>\nsudo blkid<br \/>\nls -l \/dev\/disk\/by-id\/<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u5fa9\u65e7\u5bfe\u8c61\u306e\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u3001LUKS UUID\u3001filesystem UUID\u3001mapper \u540d\u3001mount point \u306e\u5bfe\u5fdc\u3092\u8aac\u660e\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e\u6bb5\u968e\u3067\u5bfe\u8c61\u304c\u66d6\u6627\u306a\u5834\u5408\u3001\u5fa9\u65e7\u64cd\u4f5c\u3078\u9032\u3093\u3067\u306f\u306a\u3089\u306a\u3044\u3002\u7279\u306b luksHeaderRestore\u3001e2fsck\u3001rsync &#8211;delete\u3001mkfs \u306a\u3069\u306f\u3001\u5bfe\u8c61\u3092\u8aa4\u308b\u3068\u6b63\u5e38\u306a\u30c7\u30fc\u30bf\u3092\u7834\u58ca\u3059\u308b\u3002\u5fa9\u65e7\u6642\u306f\u3001\u5bfe\u8c61\u3092\u7279\u5b9a\u3067\u304d\u306a\u3044\u3053\u3068\u81ea\u4f53\u3092\u91cd\u5927\u306a\u7570\u5e38\u3068\u3057\u3066\u6271\u3046\u3002<\/p>\n<h3>18.2 LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u8aad\u3081\u308b\u304b\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304c\u78ba\u5b9a\u3057\u305f\u3089\u3001\u6b21\u306b LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u8aad\u3081\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002luksDump \u304c\u6b63\u5e38\u306b\u8aad\u3081\u308b\u5834\u5408\u3001\u5c11\u306a\u304f\u3068\u3082 LUKS \u30d8\u30c3\u30c0\u30fc\u306e\u57fa\u672c\u69cb\u9020\u306f\u8a8d\u8b58\u3067\u304d\u3066\u3044\u308b\u3002\u3053\u3053\u3067\u306f\u3001Version\u3001UUID\u3001cipher\u3001key slot\u3001KDF \u3092\u78ba\u8a8d\u3057\u3001\u53f0\u5e33\u3084\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u8a18\u9332\u3068\u7167\u5408\u3059\u308b\u3002luksDump \u304c\u5931\u6557\u3059\u308b\u5834\u5408\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e\u53d6\u308a\u9055\u3048\u3001LUKS \u3067\u306f\u306a\u3044\u9818\u57df\u3092\u898b\u3066\u3044\u308b\u3001\u30d8\u30c3\u30c0\u30fc\u7834\u640d\u3001\u7269\u7406\u5a92\u4f53\u306e I\/O \u30a8\u30e9\u30fc\u306a\u3069\u3092\u7591\u3046\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<br \/>\nsudo cryptsetup isLuks \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/sdX \u304c LUKS \u30c7\u30d0\u30a4\u30b9\u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3055\u308c\u305f UUID \u3068\u4e00\u81f4\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002isLuks \u306f\u5bfe\u8c61\u304c LUKS \u30c7\u30d0\u30a4\u30b9\u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u7c21\u6613\u5224\u5b9a\u3067\u3042\u308a\u3001luksDump \u306f\u3088\u308a\u8a73\u7d30\u306a\u30d8\u30c3\u30c0\u30fc\u60c5\u5831\u3092\u8868\u793a\u3059\u308b\u3002\u3053\u3053\u3067 UUID \u304c\u53f0\u5e33\u3068\u4e00\u81f4\u3057\u306a\u3044\u5834\u5408\u306f\u3001\u5225\u306e\u30c7\u30d0\u30a4\u30b9\u3092\u898b\u3066\u3044\u308b\u304b\u3001\u30d8\u30c3\u30c0\u30fc\u304c\u60f3\u5b9a\u5916\u306e\u72b6\u614b\u306b\u306a\u3063\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3001\u5fa9\u5143\u64cd\u4f5c\u3078\u9032\u307e\u305a\u3001\u5bfe\u8c61\u78ba\u8a8d\u3078\u623b\u308b\u3002<\/p>\n<h3>18.3 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u89e3\u9664\u3067\u304d\u308b\u304b\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u8aad\u3081\u308b\u5834\u5408\u3001\u6b21\u306b\u89e3\u9664\u624b\u6bb5\u304c\u751f\u304d\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u901a\u5e38\u904b\u7528\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u4e21\u65b9\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3001\u969c\u5bb3\u304c keyfile \u5074\u306b\u3042\u308b\u306e\u304b\u3001\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u5074\u306b\u3042\u308b\u306e\u304b\u3001key slot \u5074\u306b\u3042\u308b\u306e\u304b\u3092\u5207\u308a\u5206\u3051\u3089\u308c\u308b\u3002\u3053\u3053\u3067\u306f open &#8211;test-passphrase \u3092\u4f7f\u3046\u3002\u3053\u308c\u306f\u5b9f\u969b\u306b \/dev\/mapper \u4ee5\u4e0b\u3078 mapper device \u3092\u4f5c\u3089\u305a\u3001\u6307\u5b9a\u3057\u305f\u89e3\u9664\u624b\u6bb5\u3067\u958b\u3051\u308b\u304b\u3060\u3051\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u3001\u5fa9\u65e7\u521d\u671f\u306e\u5b89\u5168\u306a\u78ba\u8a8d\u306b\u5411\u3044\u3066\u3044\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u901a\u5e38\u904b\u7528\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u5c11\u306a\u304f\u3068\u3082\u3069\u3061\u3089\u304b\u3067\u89e3\u9664\u78ba\u8a8d\u304c\u6210\u529f\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002keyfile \u3067\u306f\u5931\u6557\u3057\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u306f\u6210\u529f\u3059\u308b\u5834\u5408\u3001keyfile \u306e\u30d1\u30b9\u3001\u5185\u5bb9\u3001\u6a29\u9650\u3001\u53f0\u5e33\u3068\u306e hash \u4e00\u81f4\u3092\u78ba\u8a8d\u3059\u308b\u3002\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u306f\u5931\u6557\u3057\u3001keyfile \u3067\u306f\u6210\u529f\u3059\u308b\u5834\u5408\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u8a18\u9332\u30df\u30b9\u3001\u524a\u9664\u6e08\u307f key slot\u3001\u5165\u529b\u30df\u30b9\u3092\u7591\u3046\u3002\u3069\u3061\u3089\u3082\u5931\u6557\u3059\u308b\u5834\u5408\u306f\u3001key slot\u3001\u30d8\u30c3\u30c0\u30fc\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001\u5165\u529b\u60c5\u5831\u306e\u3044\u305a\u308c\u304b\u306b\u554f\u984c\u304c\u3042\u308b\u3002<\/p>\n<h3>18.4 mapper \u3092\u4f5c\u6210\u3057\u3001\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u89e3\u9664\u78ba\u8a8d\u304c\u901a\u308b\u5834\u5408\u306f\u3001\u5fa9\u65e7\u7528\u306e mapper \u540d\u3067 LUKS \u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u3002\u5fa9\u65e7\u6642\u306b\u306f\u901a\u5e38\u904b\u7528\u3067\u4f7f\u3046 mapper \u540d\u3092\u305d\u306e\u307e\u307e\u4f7f\u3063\u3066\u3082\u3088\u3044\u304c\u3001\u72b6\u6cc1\u78ba\u8a8d\u3084\u4e00\u6642\u6551\u51fa\u3067\u306f recovery_crypt \u306e\u3088\u3046\u306a\u5fa9\u65e7\u7528\u306e\u540d\u524d\u3092\u4f7f\u3046\u3068\u3001\u901a\u5e38\u904b\u7528\u306e\u8a2d\u5b9a\u3068\u533a\u5225\u3057\u3084\u3059\u3044\u3002open \u304c\u6210\u529f\u3057\u305f\u3089\u3001cryptsetup status \u3068 lsblk -f \u3067\u3001mapper \u304c active \u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3001\u7269\u7406\u30c7\u30d0\u30a4\u30b9\u304b\u3089 mapper \u307e\u3067\u306e\u968e\u5c64\u304c\u60f3\u5b9a\u3069\u304a\u308a\u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX recovery_crypt<br \/>\nsudo cryptsetup status recovery_crypt<br \/>\nlsblk -f<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/mapper\/recovery_crypt \u304c\u4f5c\u6210\u3055\u308c\u3001cryptsetup status \u3067 active \u3068\u8868\u793a\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u306e\u6bb5\u968e\u3067 mapper \u304c\u4f5c\u6210\u3067\u304d\u308b\u306a\u3089\u3001\u6697\u53f7\u5316\u5c64\u306e\u89e3\u9664\u307e\u3067\u306f\u6210\u529f\u3057\u3066\u3044\u308b\u3002\u4ee5\u5f8c\u306e\u554f\u984c\u306f\u3001LVM\u3001filesystem\u3001mount\u3001\u5a92\u4f53\u8aad\u307f\u53d6\u308a\u306e\u3044\u305a\u308c\u304b\u306b\u3042\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u304f\u306a\u308b\u3002\u9006\u306b mapper \u304c\u4f5c\u6210\u3067\u304d\u306a\u3044\u5834\u5408\u306f\u3001\u307e\u3060 filesystem \u4fee\u5fa9\u3078\u9032\u3080\u6bb5\u968e\u3067\u306f\u306a\u3044\u3002<\/p>\n<h3>18.5 LVM \u69cb\u6210\u3067\u306f\u5148\u306b\u5c64\u306e\u9806\u5e8f\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>LUKS \u3068 LVM \u3092\u7d44\u307f\u5408\u308f\u305b\u3066\u3044\u308b\u5834\u5408\u3001\u5fa9\u65e7\u6642\u306e\u9806\u5e8f\u306f\u69cb\u6210\u306b\u3088\u3063\u3066\u5909\u308f\u308b\u3002LUKS \u306e\u4e0a\u306b LVM \u304c\u3042\u308b\u5834\u5408\u306f\u3001\u307e\u305a LUKS \u3092\u958b\u304d\u3001\u305d\u306e\u5f8c\u3067 VG \u3092\u6709\u52b9\u5316\u3057\u3001LV \u3092\u78ba\u8a8d\u3059\u308b\u3002LVM \u306e\u4e0a\u306b LUKS \u304c\u3042\u308b\u5834\u5408\u306f\u3001\u307e\u305a LVM \u3092\u8a8d\u8b58\u3057\u3001\u5bfe\u8c61 LV \u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u3001\u305d\u306e LV \u3092 LUKS \u3068\u3057\u3066\u958b\u304f\u3002\u9806\u5e8f\u3092\u9593\u9055\u3048\u308b\u3068\u3001\u5b58\u5728\u3059\u308b\u306f\u305a\u306e LV \u304c\u898b\u3048\u306a\u3044\u3001\u307e\u305f\u306f\u958b\u304f\u3079\u304d LUKS \u30c7\u30d0\u30a4\u30b9\u304c\u898b\u3064\u304b\u3089\u306a\u3044\u3088\u3046\u306b\u898b\u3048\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo pvs<br \/>\nsudo vgs<br \/>\nsudo lvs<br \/>\nsudo vgchange -ay<br \/>\nlsblk -f<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001PV\u3001VG\u3001LV \u304c\u53f0\u5e33\u3069\u304a\u308a\u306b\u8a8d\u8b58\u3055\u308c\u3001\u3069\u306e\u5c64\u306b LUKS \u304c\u3042\u308b\u306e\u304b\u3092\u8aac\u660e\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002LUKS \u306e\u4e0a\u306b LVM \u304c\u3042\u308b\u69cb\u6210\u3067\u306f\u3001recovery_crypt \u306e\u4e0a\u306b LVM2_member \u304c\u898b\u3048\u3001\u305d\u306e\u5185\u90e8\u306b LV \u304c\u73fe\u308c\u308b\u3002LVM \u306e\u4e0a\u306b LUKS \u304c\u3042\u308b\u69cb\u6210\u3067\u306f\u3001LV \u81ea\u4f53\u304c crypto_LUKS \u3068\u3057\u3066\u898b\u3048\u308b\u3002\u3053\u306e\u9055\u3044\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089 mount \u3078\u9032\u3080\u3002<\/p>\n<h3>18.6 \u307e\u305a\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u30de\u30a6\u30f3\u30c8\u3059\u308b<\/h3>\n<p>mapper \u307e\u305f\u306f LV \u304c\u898b\u3048\u305f\u3089\u3001\u6700\u521d\u306e mount \u306f\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3092\u57fa\u672c\u306b\u3059\u308b\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u306e\u76ee\u7684\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3078\u65b0\u305f\u306a\u66f8\u304d\u8fbc\u307f\u3092\u884c\u308f\u305a\u306b\u3001\u30c7\u30fc\u30bf\u3078\u5230\u9054\u3067\u304d\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u5fa9\u65e7\u6642\u306b\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e journal replay \u3084\u4fee\u5fa9\u66f8\u304d\u8fbc\u307f\u304c\u671b\u307e\u3057\u304f\u306a\u3044\u5834\u5408\u3082\u3042\u308b\u305f\u3081\u3001\u307e\u305a\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u72b6\u614b\u3092\u78ba\u8a8d\u3057\u3001\u91cd\u8981\u30c7\u30fc\u30bf\u3092\u6551\u51fa\u3067\u304d\u308b\u304b\u3092\u898b\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo mkdir -p \/mnt\/recovery<br \/>\nsudo mount -o ro \/dev\/mapper\/recovery_crypt \/mnt\/recovery<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>LVM \u306e\u4e0a\u306b\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u304c\u3042\u308b\u69cb\u6210\u3067\u306f\u3001mount \u5bfe\u8c61\u306f \/dev\/mapper\/recovery_crypt \u3067\u306f\u306a\u304f\u3001\/dev\/vg_name\/lv_name \u306b\u306a\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/mnt\/recovery \u4ee5\u4e0b\u3067\u65e2\u5b58\u30c7\u30fc\u30bf\u3092\u8aad\u307f\u53d6\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067 mount \u3067\u304d\u308b\u5834\u5408\u306f\u3001\u4fee\u5fa9\u3088\u308a\u5148\u306b\u30c7\u30fc\u30bf\u6551\u51fa\u3092\u884c\u3046\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u3082 mount \u3067\u304d\u306a\u3044\u5834\u5408\u306f\u3001filesystem \u7834\u640d\u3001\u672a\u5bfe\u5fdc filesystem\u3001LVM \u306e\u8a8d\u8b58\u4e0d\u6574\u5408\u3001\u5a92\u4f53 I\/O \u30a8\u30e9\u30fc\u306a\u3069\u3092\u7591\u3046\u3002<\/p>\n<h3>18.7 \u8aad\u3081\u308b\u3046\u3061\u306b\u91cd\u8981\u30c7\u30fc\u30bf\u3092\u6551\u51fa\u3059\u308b<\/h3>\n<p>\u5fa9\u65e7\u6642\u306b\u30c7\u30fc\u30bf\u3078\u5230\u9054\u3067\u304d\u305f\u5834\u5408\u3001\u6700\u521d\u306b\u884c\u3046\u3079\u304d\u3053\u3068\u306f\u4fee\u5fa9\u3067\u306f\u306a\u304f\u6551\u51fa\u3067\u3042\u308b\u3002\u4fee\u5fa9\u64cd\u4f5c\u306f\u72b6\u6cc1\u3092\u6539\u5584\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u4e00\u65b9\u3067\u3001\u72b6\u614b\u3092\u5909\u5316\u3055\u305b\u308b\u3002\u5a92\u4f53\u969c\u5bb3\u3084 filesystem \u7834\u640d\u304c\u3042\u308b\u5834\u5408\u3001\u4fee\u5fa9\u306e\u524d\u306b\u91cd\u8981\u30c7\u30fc\u30bf\u3092\u5225\u5a92\u4f53\u3078\u9000\u907f\u3059\u308b\u307b\u3046\u304c\u5b89\u5168\u3067\u3042\u308b\u3002\u6551\u51fa\u5148\u306f\u3001\u5341\u5206\u306a\u7a7a\u304d\u5bb9\u91cf\u304c\u3042\u308a\u3001\u5225\u306e\u7269\u7406\u5a92\u4f53\u3067\u3042\u308a\u3001\u53ef\u80fd\u3067\u3042\u308c\u3070\u65e2\u306b\u5065\u5168\u6027\u3092\u78ba\u8a8d\u3057\u305f\u9818\u57df\u306b\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo rsync -aHAX --numeric-ids \/mnt\/recovery\/ \/mnt\/rescue\/<br \/>\nsync<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u8aad\u307f\u53d6\u308c\u308b\u30c7\u30fc\u30bf\u304c \/mnt\/rescue\/ \u3078\u9000\u907f\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002I\/O \u30a8\u30e9\u30fc\u304c\u51fa\u308b\u5834\u5408\u306f\u3001\u3069\u306e\u30d1\u30b9\u3067\u5931\u6557\u3057\u305f\u304b\u3092\u8a18\u9332\u3059\u308b\u3002rsync \u306f\u9014\u4e2d\u3067\u5931\u6557\u3057\u3066\u3082\u3001\u518d\u5b9f\u884c\u306b\u3088\u3063\u3066\u8aad\u3081\u308b\u7bc4\u56f2\u3092\u7d99\u7d9a\u7684\u306b\u6551\u51fa\u3057\u3084\u3059\u3044\u3002\u6551\u51fa\u76ee\u7684\u3067\u306f\u3001\u5b8c\u5168\u306a\u540c\u671f\u3088\u308a\u3082\u3001\u8aad\u3081\u308b\u30c7\u30fc\u30bf\u3092\u78ba\u4fdd\u3059\u308b\u3053\u3068\u3092\u512a\u5148\u3059\u308b\u3002&#8211;delete \u306f\u6551\u51fa\u521d\u671f\u306b\u306f\u539f\u5247\u3068\u3057\u3066\u4f7f\u308f\u306a\u3044\u3002\u540c\u671f\u65b9\u5411\u3084\u6551\u51fa\u5148\u3092\u8aa4\u3063\u305f\u5834\u5408\u306b\u3001\u9000\u907f\u6e08\u307f\u30c7\u30fc\u30bf\u3092\u6d88\u3059\u5371\u967a\u304c\u3042\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/p>\n<h3>18.8 filesystem \u4fee\u5fa9\u306f\u6551\u51fa\u5f8c\u306b\u5224\u65ad\u3059\u308b<\/h3>\n<p>filesystem \u4fee\u5fa9\u306f\u3001\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u306e\u78ba\u8a8d\u3068\u53ef\u80fd\u306a\u7bc4\u56f2\u306e\u30c7\u30fc\u30bf\u6551\u51fa\u304c\u7d42\u308f\u3063\u3066\u304b\u3089\u5224\u65ad\u3059\u308b\u3002ext4 \u306e\u5834\u5408\u3001e2fsck \u306f\u6709\u52b9\u306a\u4fee\u5fa9\u624b\u6bb5\u3060\u304c\u3001\u672a\u30de\u30a6\u30f3\u30c8\u72b6\u614b\u3067\u5b9f\u884c\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u30de\u30a6\u30f3\u30c8\u4e2d\u306e filesystem \u306b\u5bfe\u3057\u3066\u4fee\u5fa9\u3092\u884c\u3046\u3068\u3001\u30ab\u30fc\u30cd\u30eb\u304c\u4fdd\u6301\u3059\u308b\u72b6\u614b\u3068 e2fsck \u306e\u4fee\u6b63\u304c\u885d\u7a81\u3059\u308b\u5371\u967a\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u4fee\u5fa9\u3059\u308b\u5834\u5408\u306f\u3001\u307e\u305a umount \u3057\u3001\u5bfe\u8c61\u304c\u5fa9\u53f7\u5f8c\u306e mapper \u307e\u305f\u306f LV \u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u5b9f\u884c\u3059\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo umount \/mnt\/recovery<br \/>\nsudo e2fsck -f \/dev\/mapper\/recovery_crypt<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>LVM \u69cb\u6210\u3067\u306f\u3001e2fsck \u306e\u5bfe\u8c61\u306f filesystem \u304c\u5b58\u5728\u3059\u308b LV \u306b\u306a\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001filesystem \u306e\u6574\u5408\u6027\u304c\u78ba\u8a8d\u307e\u305f\u306f\u4fee\u5fa9\u3055\u308c\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u305f\u3060\u3057\u3001\u91cd\u5927\u306a\u30a8\u30e9\u30fc\u304c\u591a\u6570\u51fa\u308b\u5834\u5408\u3084\u3001\u5a92\u4f53 I\/O \u30a8\u30e9\u30fc\u304c\u7d99\u7d9a\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u4fee\u5fa9\u3088\u308a\u3082\u5a92\u4f53\u8907\u88fd\u3084\u8ffd\u52a0\u6551\u51fa\u3092\u512a\u5148\u3059\u308b\u5224\u65ad\u3082\u3042\u308a\u5f97\u308b\u3002e2fsck \u306f\u300c\u3068\u308a\u3042\u3048\u305a\u5b9f\u884c\u3059\u308b\u5b89\u5168\u306a\u78ba\u8a8d\u300d\u3067\u306f\u306a\u304f\u3001filesystem \u3092\u5909\u66f4\u3057\u5f97\u308b\u4fee\u5fa9\u64cd\u4f5c\u3068\u3057\u3066\u6271\u3046\u3002<\/p>\n<h3>18.9 LUKS \u30d8\u30c3\u30c0\u30fc\u5fa9\u5143\u306f\u6700\u5f8c\u306e\u5fa9\u65e7\u624b\u6bb5\u3068\u3057\u3066\u6271\u3046<\/h3>\n<p>luksHeaderRestore \u306f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u7834\u640d\u3057\u3066\u3044\u308b\u5834\u5408\u3084 key slot \u5909\u66f4\u306b\u5931\u6557\u3057\u305f\u5834\u5408\u306b\u4f7f\u3046\u5fa9\u65e7\u624b\u6bb5\u3067\u3042\u308b\u3002\u305f\u3060\u3057\u3001\u3053\u308c\u306f\u8efd\u3044\u4fee\u5fa9\u3067\u306f\u306a\u3044\u3002\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u306e LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u3078\u623b\u3059\u64cd\u4f5c\u3067\u3042\u308a\u3001\u73fe\u5728\u306e key slot \u72b6\u614b\u3082\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u3078\u623b\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001luksDump \u304c\u6b63\u5e38\u306b\u8aad\u3081\u3001keyfile \u307e\u305f\u306f\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u89e3\u9664\u3067\u304d\u308b\u72b6\u614b\u3067\u306f\u3001\u901a\u5e38\u306f\u6700\u521d\u306b\u4f7f\u3046\u64cd\u4f5c\u3067\u306f\u306a\u3044\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksHeaderRestore \/dev\/sdX --header-backup-file luks-crypt_name-header-YYYYMMDD.img<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u64cd\u4f5c\u3092\u884c\u3046\u524d\u306b\u306f\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u53d6\u5f97\u65e5\u3001LUKS UUID\u3001\u5bfe\u8c61\u5a92\u4f53\u3001\u5fa9\u5143\u5f8c\u306b\u6709\u52b9\u306b\u306a\u308b key slot \u3092\u53f0\u5e33\u3067\u78ba\u8a8d\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u7834\u640d\u307e\u305f\u306f\u4e0d\u6574\u5408\u306b\u306a\u3063\u305f LUKS \u30d8\u30c3\u30c0\u30fc\u304c\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u306e\u72b6\u614b\u3078\u623b\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u4e00\u65b9\u3067\u3001\u8aa4\u3063\u305f\u30d8\u30c3\u30c0\u30fc\u3092\u8aa4\u3063\u305f\u30c7\u30d0\u30a4\u30b9\u3078 restore \u3059\u308b\u3068\u3001\u5fa9\u65e7\u5bfe\u8c61\u3092\u3055\u3089\u306b\u958b\u3051\u306a\u304f\u3059\u308b\u5371\u967a\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001luksHeaderRestore \u306f\u3001\u89b3\u6e2c\u3001\u5bfe\u8c61\u78ba\u8a8d\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u78ba\u8a8d\u3001\u6551\u51fa\u65b9\u91dd\u306e\u78ba\u8a8d\u3092\u7d42\u3048\u305f\u5f8c\u306b\u5b9f\u884c\u3059\u308b\u6700\u7d42\u7684\u306a\u5fa9\u65e7\u64cd\u4f5c\u3068\u3057\u3066\u6271\u3046\u3002<\/p>\n<h3>18.10 \u5fa9\u65e7\u5f8c\u306f\u901a\u5e38\u624b\u9806\u3067\u958b\u3051\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u6551\u51fa\u307e\u305f\u306f\u4fee\u5fa9\u304c\u7d42\u308f\u3063\u305f\u3089\u3001\u5fa9\u65e7\u7528 mapper \u3092\u9589\u3058\u3001\u901a\u5e38\u904b\u7528\u3068\u540c\u3058\u624b\u9806\u3067\u958b\u3051\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u5fa9\u65e7\u6642\u3060\u3051\u7279\u6b8a\u306a\u624b\u9806\u3067\u958b\u3051\u3066\u3082\u3001\u901a\u5e38\u904b\u7528\u306b\u623b\u305b\u306a\u3051\u308c\u3070\u5fa9\u65e7\u5b8c\u4e86\u3068\u306f\u8a00\u3048\u306a\u3044\u3002\u901a\u5e38\u7528 keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001crypttab\u3001fstab\u3001LVM\u3001mount point \u306e\u78ba\u8a8d\u307e\u3067\u884c\u3044\u3001\u53f0\u5e33\u3092\u66f4\u65b0\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sync<br \/>\nsudo umount \/mnt\/recovery<br \/>\nsudo cryptsetup close recovery_crypt<br \/>\nsudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u5fa9\u65e7\u7528\u306e\u4e00\u6642\u72b6\u614b\u304c\u9589\u3058\u3089\u308c\u3001\u901a\u5e38\u904b\u7528\u7528 keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u4e21\u65b9\u3067\u89e3\u9664\u78ba\u8a8d\u304c\u6210\u529f\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u305d\u306e\u5f8c\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u901a\u5e38 mapper \u540d\u3067 open \u3057\u3001\u901a\u5e38 mount point \u3078\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3002\u81ea\u52d5\u8d77\u52d5\u5bfe\u8c61\u3067\u3042\u308c\u3070\u3001crypttab \u3068 fstab \u306e UUID\u3001mapper \u540d\u3001mount point \u304c\u5fa9\u65e7\u5f8c\u306e\u72b6\u614b\u3068\u4e00\u81f4\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<h3>18.11 \u5fa9\u65e7\u7d50\u679c\u3092\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b<\/h3>\n<p>\u5fa9\u65e7\u4f5c\u696d\u306f\u3001\u30c7\u30fc\u30bf\u304c\u8aad\u3081\u305f\u6642\u70b9\u3067\u7d42\u308f\u308a\u3067\u306f\u306a\u3044\u3002\u4f55\u304c\u539f\u56e0\u3067\u3001\u3069\u306e\u5c64\u3067\u5931\u6557\u3057\u3001\u3069\u306e\u89e3\u9664\u624b\u6bb5\u304c\u6709\u52b9\u3067\u3001\u3069\u306e\u30c7\u30fc\u30bf\u3092\u6551\u51fa\u3057\u3001\u3069\u306e\u4fee\u5fa9\u3092\u5b9f\u884c\u3057\u3001\u3069\u306e\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u4f7f\u3063\u305f\u306e\u304b\u3092\u8a18\u9332\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u3053\u306e\u8a18\u9332\u304c\u306a\u3044\u3068\u3001\u6b21\u56de\u969c\u5bb3\u6642\u306b\u540c\u3058\u5207\u308a\u5206\u3051\u3092\u7e70\u308a\u8fd4\u3059\u3053\u3068\u306b\u306a\u308a\u3001\u5fa9\u65e7\u624b\u9806\u306e\u518d\u73fe\u6027\u304c\u5931\u308f\u308c\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u8a18\u9332\u9805\u76ee<\/th>\n<th>\u8a18\u9332\u3059\u308b\u5185\u5bb9<\/th>\n<th>\u76ee\u7684<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u767a\u751f\u65e5<\/td>\n<td>\u969c\u5bb3\u3092\u78ba\u8a8d\u3057\u305f\u65e5\u6642\u3068\u5fa9\u65e7\u4f5c\u696d\u65e5\u6642\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5a92\u4f53\u52a3\u5316\u3084\u969c\u5bb3\u518d\u767a\u306e\u5c65\u6b74\u3092\u8ffd\u8de1\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5bfe\u8c61\u5a92\u4f53<\/td>\n<td>by-id\u3001LUKS UUID\u3001mapper \u540d\u3001VG \/ LV \u540d\u3001mount point \u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u3069\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u5fa9\u65e7\u3057\u305f\u304b\u3092\u660e\u78ba\u306b\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5931\u6557\u3057\u305f\u5c64<\/td>\n<td>\u7269\u7406\u5a92\u4f53\u3001LUKS\u3001key slot\u3001LVM\u3001filesystem\u3001mount \u306e\u3069\u3053\u3067\u5931\u6557\u3057\u305f\u304b\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u6b21\u56de\u4ee5\u964d\u306e\u5207\u308a\u5206\u3051\u3092\u901f\u304f\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6709\u52b9\u3060\u3063\u305f\u89e3\u9664\u624b\u6bb5<\/td>\n<td>keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u3069\u306e key slot \u304c\u4f7f\u3048\u305f\u304b\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u9375\u7ba1\u7406\u306e\u898b\u76f4\u3057\u306b\u63a5\u7d9a\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6551\u51fa\u7d50\u679c<\/td>\n<td>\u6551\u51fa\u5148\u3001\u6551\u51fa\u7bc4\u56f2\u3001\u8aad\u307f\u53d6\u308a\u4e0d\u80fd\u3060\u3063\u305f\u30d1\u30b9\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5931\u308f\u308c\u305f\u53ef\u80fd\u6027\u306e\u3042\u308b\u30c7\u30fc\u30bf\u3092\u628a\u63e1\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4fee\u5fa9\u64cd\u4f5c<\/td>\n<td>e2fsck\u3001luksHeaderRestore\u3001\u8a2d\u5b9a\u4fee\u6b63\u306a\u3069\u3001\u5b9f\u884c\u3057\u305f\u64cd\u4f5c\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u72b6\u614b\u3092\u5909\u5316\u3055\u305b\u305f\u64cd\u4f5c\u3092\u8ffd\u8de1\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5fa9\u65e7\u5f8c\u78ba\u8a8d<\/td>\n<td>\u901a\u5e38\u624b\u9806\u3067 open\u3001mount\u3001\u8aad\u307f\u53d6\u308a\u3001test-passphrase \u304c\u6210\u529f\u3057\u305f\u304b\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5fa9\u65e7\u5b8c\u4e86\u6761\u4ef6\u3092\u6e80\u305f\u3057\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u5fa9\u65e7\u3092\u4e00\u767a\u306e\u4fee\u5fa9\u30b3\u30de\u30f3\u30c9\u3068\u3057\u3066\u6271\u308f\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5fa9\u65e7\u3067\u306f\u3001\u7269\u7406\u5a92\u4f53\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001key slot\u3001mapper\u3001LVM\u3001filesystem\u3001mount point \u3092\u9806\u306b\u78ba\u8a8d\u3057\u3001\u8aad\u3081\u308b\u6bb5\u968e\u3067\u30c7\u30fc\u30bf\u3092\u6551\u51fa\u3057\u3001\u4fee\u5fa9\u306f\u5fc5\u8981\u6027\u3068\u5bfe\u8c61\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u884c\u3046\u3002luksHeaderRestore \u3084 e2fsck \u306f\u6709\u52b9\u306a\u624b\u6bb5\u3060\u304c\u3001\u89b3\u6e2c\u3068\u6551\u51fa\u3088\u308a\u5148\u306b\u5b9f\u884c\u3059\u308b\u3082\u306e\u3067\u306f\u306a\u3044\u3002\u5fa9\u65e7\u3068\u306f\u3001\u58ca\u308c\u305f\u7b87\u6240\u3092\u614c\u3066\u3066\u76f4\u3059\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u3053\u308c\u4ee5\u4e0a\u5931\u308f\u306a\u3044\u9806\u5e8f\u3067\u72b6\u614b\u3092\u5207\u308a\u5206\u3051\u3001\u5fc5\u8981\u306a\u30c7\u30fc\u30bf\u3068\u904b\u7528\u7d4c\u8def\u3092\u56de\u53ce\u3059\u308b\u4f5c\u696d\u3067\u3042\u308b\u3002<\/p>\n<hr>\n<h2>19. \u9000\u5f79\u3067\u306f\u5fa9\u5143\u7d4c\u8def\u3092\u5931\u308f\u305a\u306b\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u9589\u3058\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9000\u5f79\u306f\u3001\u53e4\u3044\u30c7\u30a3\u30b9\u30af\u3092\u6d88\u3059\u4f5c\u696d\u3067\u306f\u306a\u304f\u3001\u305d\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u304c\u62c5\u3063\u3066\u3044\u305f\u5fa9\u5143\u7d4c\u8def\u3092\u5b89\u5168\u306b\u7d42\u4e86\u3055\u305b\u308b\u4f5c\u696d\u3067\u3042\u308b\u3002\u9000\u5f79\u3057\u3066\u3088\u3044\u306e\u306f\u3001\u65b0\u3057\u3044\u79fb\u884c\u5148\u3078\u30c7\u30fc\u30bf\u304c\u79fb\u3063\u3066\u3044\u308b\u3053\u3068\u3001\u5225\u7cfb\u7d71\u306e\u5fa9\u5143\u7d4c\u8def\u304c\u6b8b\u3063\u3066\u3044\u308b\u3053\u3068\u3001\u79fb\u884c\u5148\u3092\u901a\u5e38\u624b\u9806\u3067\u958b\u3051\u308b\u3053\u3068\u3001\u4e3b\u8981\u30c7\u30fc\u30bf\u3092\u8aad\u3081\u308b\u3053\u3068\u3001\u65e7\u5a92\u4f53\u3092\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u6b8b\u3059\u5fc5\u8981\u304c\u306a\u3044\u3053\u3068\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u53f0\u5e33\u306e\u6271\u3044\u304c\u6c7a\u307e\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u5f8c\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u3092\u6d88\u3059\u3060\u3051\u3067\u306a\u304f\u3001key slot \u3092\u6d88\u3059\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u7834\u68c4\u3059\u308b\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u9000\u5f79\u3055\u305b\u308b\u3001\u5a92\u4f53\u3092\u4fdd\u7ba1\u505c\u6b62\u3059\u308b\u3001\u7269\u7406\u5ec3\u68c4\u3059\u308b\u3001\u3068\u3044\u3046\u8907\u6570\u306e\u9000\u5f79\u65b9\u6cd5\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u9000\u5f79\u3067\u306f\u300c\u4f55\u3092\u6d88\u3059\u304b\u300d\u3088\u308a\u5148\u306b\u3001\u300c\u4f55\u3092\u6b8b\u305b\u3070\u5fa9\u5143\u53ef\u80fd\u6027\u304c\u7dad\u6301\u3055\u308c\u308b\u304b\u300d\u3092\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u9000\u5f79\u5224\u65ad\u306e\u6700\u521d\u306b\u884c\u3046\u3079\u304d\u3053\u3068\u306f\u3001\u65e7\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u304c\u73fe\u5728\u3069\u306e\u5f79\u5272\u3092\u6301\u3063\u3066\u3044\u308b\u304b\u3092\u5206\u985e\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u4e3b\u7cfb\u304b\u3089\u5916\u308c\u305f\u304b\u3089\u3068\u3044\u3063\u3066\u3001\u5373\u5ea7\u306b\u6d88\u53bb\u5bfe\u8c61\u306b\u306a\u308b\u3068\u306f\u9650\u3089\u306a\u3044\u3002\u65e7 LUKS1 \u5a92\u4f53\u3001TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u3001\u53e4\u3044 2.5-inch HDD\u3001\u904e\u53bb\u74b0\u5883\u3067\u4f5c\u6210\u3057\u305f\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u306f\u3001\u73fe\u884c\u4e3b\u7cfb\u3067\u306f\u306a\u304f\u3066\u3082\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u3001\u79fb\u884c\u5931\u6557\u6642\u306e\u9003\u3052\u9053\u3068\u3057\u3066\u610f\u5473\u3092\u6301\u3064\u5834\u5408\u304c\u3042\u308b\u3002\u4e00\u65b9\u3067\u3001\u5f79\u5272\u304c\u4e0d\u660e\u306a\u307e\u307e\u6b8b\u3059\u3068\u3001\u53e4\u3044 key slot\u3001\u53e4\u3044\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u6240\u5728\u4e0d\u660e\u306e\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u5a92\u4f53\u52a3\u5316\u304c\u7a4d\u307f\u4e0a\u304c\u308a\u3001\u7ba1\u7406\u4e0d\u80fd\u306a\u30ea\u30b9\u30af\u306b\u306a\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u4f4d\u7f6e\u4ed8\u3051<\/th>\n<th>\u610f\u5473<\/th>\n<th>\u9000\u5f79\u5224\u65ad<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u4e3b\u7cfb<\/td>\n<td>\u73fe\u5728\u306e\u901a\u5e38\u904b\u7528\u3067\u4f7f\u3063\u3066\u3044\u308b\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308b\u3002<\/td>\n<td>\u9000\u5f79\u5bfe\u8c61\u306b\u3059\u308b\u524d\u306b\u3001\u65b0\u3057\u3044\u4e3b\u7cfb\u3078\u306e\u79fb\u884c\u3001\u691c\u8a3c\u3001\u5207\u66ff\u3092\u5b8c\u4e86\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7<\/td>\n<td>\u65e7\u5f62\u5f0f\u3060\u304c\u3001\u904e\u53bb\u74b0\u5883\u3084\u79fb\u884c\u5931\u6557\u6642\u306e\u5fa9\u5143\u7d4c\u8def\u3068\u3057\u3066\u610f\u5473\u304c\u3042\u308b\u3002<\/td>\n<td>\u958b\u3051\u308b\u3053\u3068\u3001\u8aad\u3081\u308b\u3053\u3068\u3001\u4fdd\u7ba1\u7406\u7531\u304c\u660e\u78ba\u306a\u3089\u4fdd\u6301\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6<\/td>\n<td>\u66f4\u65b0\u3057\u306a\u3044\u304c\u3001\u904e\u53bb\u72b6\u614b\u3092\u4fdd\u6301\u3059\u308b\u305f\u3081\u306b\u6b8b\u3059\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308b\u3002<\/td>\n<td>\u5e74\u6b21\u70b9\u691c\u3067\u8aad\u3081\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3001\u5f79\u5272\u304c\u7d42\u308f\u308b\u307e\u3067\u4fdd\u6301\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u9000\u5f79\u5019\u88dc<\/td>\n<td>\u79fb\u884c\u6e08\u307f\u3067\u3042\u308a\u3001\u4e3b\u7cfb\u3067\u3082\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3067\u3082\u306a\u304f\u306a\u3063\u305f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308b\u3002<\/td>\n<td>\u5fa9\u5143\u7d4c\u8def\u304c\u5225\u306b\u6b8b\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u9000\u5f79\u3078\u9032\u3080\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6d88\u53bb\u5bfe\u8c61<\/td>\n<td>\u4fdd\u6301\u3059\u308b\u610f\u5473\u304c\u306a\u304f\u3001\u6f0f\u6d29\u30ea\u30b9\u30af\u3084\u7ba1\u7406\u8ca0\u8377\u3092\u4e0b\u3052\u308b\u305f\u3081\u306b\u7121\u52b9\u5316\u3059\u308b\u5bfe\u8c61\u3067\u3042\u308b\u3002<\/td>\n<td>\u53f0\u5e33\u66f4\u65b0\u3001\u5fa9\u5143\u7d4c\u8def\u78ba\u8a8d\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u65b9\u91dd\u6c7a\u5b9a\u5f8c\u306b\u6d88\u53bb\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>19.1 \u9000\u5f79\u524d\u306b\u79fb\u884c\u5148\u3068\u5225\u7cfb\u7d71\u306e\u5fa9\u5143\u7d4c\u8def\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u9000\u5f79\u524d\u306b\u306f\u3001\u65e7\u5a92\u4f53\u3067\u306f\u306a\u304f\u79fb\u884c\u5148\u3092\u78ba\u8a8d\u3059\u308b\u3002\u9000\u5f79\u3068\u306f\u65e7\u5a92\u4f53\u3092\u4f7f\u308f\u306a\u3044\u72b6\u614b\u3078\u79fb\u3059\u3053\u3068\u306a\u306e\u3067\u3001\u79fb\u884c\u5148\u304c\u901a\u5e38\u624b\u9806\u3067\u958b\u3051\u3001\u30de\u30a6\u30f3\u30c8\u3067\u304d\u3001\u4e3b\u8981\u30c7\u30fc\u30bf\u3092\u8aad\u3081\u308b\u3053\u3068\u304c\u524d\u63d0\u306b\u306a\u308b\u3002\u3055\u3089\u306b\u3001\u79fb\u884c\u5148\u3060\u3051\u306b\u4f9d\u5b58\u3059\u308b\u3068\u5358\u4e00\u969c\u5bb3\u70b9\u306b\u306a\u308b\u305f\u3081\u3001\u5225\u7cfb\u7d71\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3084\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u6b8b\u3063\u3066\u3044\u308b\u304b\u3082\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3092\u7701\u7565\u3057\u3066\u65e7\u5a92\u4f53\u3092\u6d88\u3059\u3068\u3001\u6697\u53f7\u65b9\u5f0f\u3068\u3057\u3066\u306f\u6574\u7406\u3055\u308c\u3066\u3082\u3001\u5fa9\u5143\u53ef\u80fd\u6027\u3068\u3057\u3066\u306f\u5f31\u304f\u306a\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/newDevice<br \/>\nsudo cryptsetup open --test-passphrase \/dev\/newDevice<br \/>\nsudo cryptsetup open --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/newDevice new_crypt<br \/>\nsudo mount \/dev\/mapper\/new_crypt \/mnt\/new_crypt<br \/>\nls -la \/mnt\/new_crypt<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u624b\u9806\u3067\u306f\u3001\u79fb\u884c\u5148\u304c\u901a\u5e38\u7528 keyfile \u3067\u958b\u3051\u308b\u3053\u3068\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u3082\u958b\u3051\u308b\u3053\u3068\u3001\u5b9f\u969b\u306b mapper \u3092\u4f5c\u6210\u3057\u3066\u30de\u30a6\u30f3\u30c8\u3067\u304d\u308b\u3053\u3068\u3001\u4e3b\u8981\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u8aad\u3081\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u3044\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u65e7\u5a92\u4f53\u304c\u306a\u304f\u3066\u3082\u79fb\u884c\u5148\u3060\u3051\u3067\u901a\u5e38\u5229\u7528\u307e\u305f\u306f\u5fa9\u65e7\u304c\u53ef\u80fd\u3060\u3068\u8aac\u660e\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u9000\u5f79\u5224\u65ad\u3067\u306f\u3001\u65e7\u5a92\u4f53\u306e\u72b6\u614b\u3088\u308a\u3082\u5148\u306b\u3001\u65e7\u5a92\u4f53\u3092\u5931\u3063\u305f\u5f8c\u306e\u5fa9\u5143\u7d4c\u8def\u304c\u6210\u7acb\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/p>\n<h3>19.2 \u9000\u5f79\u5bfe\u8c61\u306e\u73fe\u5728\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u79fb\u884c\u5148\u306e\u78ba\u8a8d\u304c\u7d42\u308f\u3063\u305f\u3089\u3001\u9000\u5f79\u5bfe\u8c61\u306e\u73fe\u5728\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u3053\u3053\u3067\u78ba\u8a8d\u3059\u308b\u306e\u306f\u3001\u9000\u5f79\u5bfe\u8c61\u304c\u672c\u5f53\u306b\u610f\u56f3\u3057\u305f\u5a92\u4f53\u3067\u3042\u308b\u3053\u3068\u3001LUKS UUID \u304c\u53f0\u5e33\u3068\u4e00\u81f4\u3059\u308b\u3053\u3068\u3001\u6709\u52b9\u306a key slot \u304c\u3044\u304f\u3064\u6b8b\u3063\u3066\u3044\u308b\u3053\u3068\u3001\u901a\u5e38\u7528 keyfile \u3084\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u307e\u3060\u958b\u3051\u308b\u3053\u3068\u3001\u6697\u53f7\u69cb\u6210\u304c\u4f55\u3067\u3042\u308b\u3053\u3068\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3001\u5a92\u4f53\u304c\u3069\u306e\u5f79\u5272\u304b\u3089\u9000\u304f\u306e\u304b\u3067\u3042\u308b\u3002\u5bfe\u8c61\u78ba\u8a8d\u3092\u305b\u305a\u306b\u6d88\u53bb\u7cfb\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3068\u3001\u6b63\u5e38\u306a\u5a92\u4f53\u3092\u9000\u5f79\u3055\u305b\u308b\u4e8b\u6545\u306b\u3064\u306a\u304c\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/>4<br \/>5<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">lsblk -f<br \/>\nsudo blkid<br \/>\nsudo cryptsetup luksDump \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/sdX \u304c\u9000\u5f79\u5bfe\u8c61\u306e LUKS \u30c7\u30d0\u30a4\u30b9\u3067\u3042\u308a\u3001\u53f0\u5e33\u4e0a\u306e LUKS UUID \u3068\u4e00\u81f4\u3057\u3001\u3069\u306e\u89e3\u9664\u624b\u6bb5\u304c\u307e\u3060\u6709\u52b9\u304b\u3092\u8aac\u660e\u3067\u304d\u308b\u3053\u3068\u3067\u3042\u308b\u3002keyfile \u3068\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u306e\u4e21\u65b9\u3067\u958b\u3051\u308b\u5834\u5408\u3001\u305d\u306e\u5a92\u4f53\u306f\u307e\u3060\u5fa9\u5143\u53ef\u80fd\u306a\u72b6\u614b\u306b\u3042\u308b\u3002\u3069\u3061\u3089\u304b\u4e00\u65b9\u3060\u3051\u3067\u958b\u3051\u308b\u5834\u5408\u306f\u3001\u9000\u5f79\u524d\u306b\u305d\u306e\u7406\u7531\u3092\u8a18\u9332\u3059\u308b\u3002\u3069\u3061\u3089\u3067\u3082\u958b\u3051\u306a\u3044\u5834\u5408\u306f\u3001\u9000\u5f79\u3068\u3044\u3046\u3088\u308a\u3001\u3059\u3067\u306b\u5fa9\u5143\u4e0d\u80fd\u307e\u305f\u306f\u5bfe\u8c61\u8aa4\u8a8d\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3001\u6d88\u53bb\u3067\u306f\u306a\u304f\u5207\u308a\u5206\u3051\u3078\u623b\u308b\u3002<\/p>\n<h3>19.3 \u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068 keyfile \u306e\u6271\u3044\u3092\u6c7a\u3081\u308b<\/h3>\n<p>LUKS \u306e\u9000\u5f79\u3067\u306f\u3001\u7269\u7406\u5a92\u4f53\u3060\u3051\u3092\u898b\u3066\u306f\u3044\u3051\u306a\u3044\u3002LUKS \u30d8\u30c3\u30c0\u30fc\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u6b8b\u3063\u3066\u3044\u308b\u5834\u5408\u3001\u73fe\u5728\u306e\u30c7\u30d0\u30a4\u30b9\u4e0a\u3067 key slot \u3092\u6d88\u3057\u3066\u3082\u3001\u904e\u53bb\u306e\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092 restore \u3059\u308c\u3070\u3001\u5f53\u6642\u306e key slot \u304c\u5fa9\u6d3b\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u3064\u307e\u308a\u3001\u9000\u5f79\u5bfe\u8c61\u306f\u3001\u7269\u7406\u5a92\u4f53\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u53f0\u5e33\u8a18\u9332\u306e\u96c6\u5408\u3067\u3042\u308b\u3002\u5a92\u4f53\u3060\u3051\u3092\u6d88\u3057\u3066\u3082\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068 keyfile \u306e\u6271\u3044\u304c\u66d6\u6627\u306a\u3089\u3001\u9000\u5f79\u306f\u5b8c\u4e86\u3057\u3066\u3044\u306a\u3044\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5bfe\u8c61<\/th>\n<th>\u9000\u5f79\u6642\u306b\u6c7a\u3081\u308b\u3053\u3068<\/th>\n<th>\u7406\u7531<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u7269\u7406\u5a92\u4f53<\/td>\n<td>\u4fdd\u7ba1\u7d99\u7d9a\u3001\u8aad\u307f\u53d6\u308a\u5c02\u7528\u4fdd\u7ba1\u3001\u5b89\u5168\u6d88\u53bb\u3001\u7269\u7406\u5ec3\u68c4\u306e\u3069\u308c\u306b\u3059\u308b\u304b\u3092\u6c7a\u3081\u308b\u3002<\/td>\n<td>\u5a92\u4f53\u81ea\u4f53\u304c\u5fa9\u5143\u7d4c\u8def\u307e\u305f\u306f\u6f0f\u6d29\u30ea\u30b9\u30af\u306b\u306a\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LUKS \u30d8\u30c3\u30c0\u30fc<\/td>\n<td>\u4fdd\u6301\u3059\u308b\u306e\u304b\u3001key slot \u3092\u6d88\u3059\u306e\u304b\u3001\u30d8\u30c3\u30c0\u30fc\u3092\u7834\u68c4\u3059\u308b\u306e\u304b\u3092\u6c7a\u3081\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u304c\u3042\u308b\u9650\u308a\u3001\u6b63\u3057\u3044\u89e3\u9664\u624b\u6bb5\u3068\u7d44\u307f\u5408\u308f\u305b\u308c\u3070\u5fa9\u53f7\u53ef\u80fd\u6027\u304c\u6b8b\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7<\/td>\n<td>\u4fdd\u5b58\u7d99\u7d9a\u3001\u5225\u4fdd\u7ba1\u3001\u524a\u9664\u3001\u9000\u5f79\u6e08\u307f\u30e9\u30d9\u30eb\u4ed8\u3051\u306e\u65b9\u91dd\u3092\u6c7a\u3081\u308b\u3002<\/td>\n<td>\u53e4\u3044 key slot \u3092\u5fa9\u6d3b\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>keyfile<\/td>\n<td>\u4ed6\u5a92\u4f53\u3067\u3082\u4f7f\u3046 keyfile \u304b\u3001\u9000\u5f79\u5bfe\u8c61\u5c02\u7528 keyfile \u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u5171\u7528 keyfile \u3092\u8aa4\u3063\u3066\u524a\u9664\u3059\u308b\u3068\u3001\u5225\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3051\u306a\u304f\u306a\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba<\/td>\n<td>\u9000\u5f79\u5bfe\u8c61\u5c02\u7528\u304b\u3001\u4ed6\u306e\u5a92\u4f53\u3067\u3082\u4f7f\u3063\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<td>\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u7ba1\u7406\u3092\u8aa4\u308b\u3068\u3001\u4e0d\u8981\u306a\u89e3\u9664\u5165\u53e3\u3084\u8aa4\u524a\u9664\u304c\u6b8b\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u53f0\u5e33<\/td>\n<td>\u9000\u5f79\u65e5\u3001\u9000\u5f79\u7406\u7531\u3001\u9000\u5f79\u65b9\u6cd5\u3001\u6b8b\u3057\u305f\u5fa9\u5143\u7d4c\u8def\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5f8c\u304b\u3089\u5a92\u4f53\u306e\u72b6\u614b\u3084\u6d88\u53bb\u6e08\u307f\u304b\u3069\u3046\u304b\u3092\u5224\u65ad\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>19.4 \u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u6b8b\u3059\u5834\u5408\u306f\u9000\u5f79\u3067\u306f\u306a\u304f\u5f79\u5272\u5909\u66f4\u306b\u3059\u308b<\/h3>\n<p>\u65e7\u5a92\u4f53\u3092\u3059\u3050\u306b\u6d88\u3055\u305a\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3084\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u3068\u3057\u3066\u6b8b\u3059\u5834\u5408\u3001\u305d\u306e\u4f5c\u696d\u306f\u9000\u5f79\u3067\u306f\u306a\u304f\u5f79\u5272\u5909\u66f4\u3067\u3042\u308b\u3002\u3053\u306e\u5834\u5408\u3001key slot \u3092\u6d88\u3057\u305f\u308a cryptsetup erase \u3092\u5b9f\u884c\u3057\u305f\u308a\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u3002\u5fc5\u8981\u306a\u306e\u306f\u3001\u4e3b\u7cfb\u304b\u3089\u5916\u3057\u305f\u3053\u3068\u3001\u901a\u5e38\u66f4\u65b0\u5bfe\u8c61\u3067\u306f\u306a\u3044\u3053\u3068\u3001\u6b21\u56de\u70b9\u691c\u65e5\u3001\u4fdd\u7ba1\u5834\u6240\u3001\u89e3\u9664\u624b\u6bb5\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u9000\u5f79\u518d\u5224\u65ad\u306e\u6761\u4ef6\u3092\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u53e4\u3044\u65b9\u5f0f\u3092\u6b8b\u3059\u3053\u3068\u81ea\u4f53\u304c\u60aa\u3044\u306e\u3067\u306f\u306a\u304f\u3001\u5f79\u5272\u4e0d\u660e\u306e\u307e\u307e\u653e\u7f6e\u3059\u308b\u3053\u3068\u304c\u554f\u984c\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/>2<br \/>3<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup luksDump \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase --key-file \/etc\/cryptsetup-keys\/crypt_name.key \/dev\/sdX<br \/>\nsudo cryptsetup open --test-passphrase \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u78ba\u8a8d\u306b\u3088\u308a\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u6b8b\u3059\u5a92\u4f53\u304c\u73fe\u5728\u3082\u958b\u3051\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\u901a\u5e38\u7528 keyfile \u307e\u305f\u306f\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3067\u89e3\u9664\u78ba\u8a8d\u304c\u6210\u529f\u3057\u3001\u53f0\u5e33\u306b\u8a18\u9332\u3055\u308c\u305f LUKS UUID \u3068\u4e00\u81f4\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u6b8b\u3059\u5834\u5408\u306e\u76ee\u7684\u306f\u3001\u73fe\u884c\u4e3b\u7cfb\u3068\u3057\u3066\u4f7f\u3044\u7d9a\u3051\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u79fb\u884c\u5f8c\u3082\u4e00\u5b9a\u671f\u9593\u3001\u5225\u7cfb\u7d71\u306e\u5fa9\u5143\u7d4c\u8def\u3092\u4fdd\u6301\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<h3>19.5 \u5fa9\u5143\u4e0d\u80fd\u5316\u3059\u308b\u5834\u5408\u306f cryptsetup erase \u306e\u610f\u5473\u3092\u7406\u89e3\u3059\u308b<\/h3>\n<p>cryptsetup erase \u306f\u3001LUKS \u30c7\u30d0\u30a4\u30b9\u4e0a\u306e\u5168 key slot \u3092\u6d88\u53bb\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u3053\u308c\u306f\u30c7\u30fc\u30bf\u672c\u4f53\u3092\u4e0a\u66f8\u304d\u3059\u308b\u64cd\u4f5c\u3067\u306f\u306a\u304f\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u3078\u5230\u9054\u3059\u308b\u305f\u3081\u306e\u89e3\u9664\u5165\u53e3\u3092\u6d88\u3059\u64cd\u4f5c\u3067\u3042\u308b\u3002LUKS \u3067\u306f\u30c7\u30fc\u30bf\u672c\u4f53\u306f volume key \u306b\u3088\u3063\u3066\u6697\u53f7\u5316\u3055\u308c\u3001\u305d\u306e volume key \u3092\u5404 key slot \u304b\u3089\u53d6\u308a\u51fa\u305b\u308b\u3088\u3046\u306b\u7ba1\u7406\u3057\u3066\u3044\u308b\u3002\u5168 key slot \u3092\u6d88\u3059\u3068\u3001\u901a\u5e38\u306f volume key \u3078\u5230\u9054\u3067\u304d\u306a\u304f\u306a\u308a\u3001\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u672c\u4f53\u304c\u6b8b\u3063\u3066\u3044\u3066\u3082\u5fa9\u53f7\u3067\u304d\u306a\u304f\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001cryptsetup erase \u306f\u901a\u5e38\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u3067\u306f\u306a\u304f\u3001\u5fa9\u5143\u4e0d\u80fd\u5316\u3092\u76ee\u7684\u306b\u3059\u308b\u9000\u5f79\u64cd\u4f5c\u3067\u3042\u308b\u3002<\/p>\n<div class=\"codecolorer-container text geshi\" style=\"overflow:auto;white-space:nowrap;width:1000px;\"><table cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td class=\"line-numbers\"><div>1<br \/><\/div><\/td><td><div class=\"text codecolorer\" style=\"white-space:nowrap\">sudo cryptsetup erase \/dev\/sdX<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n<p>\u3053\u306e\u64cd\u4f5c\u306e\u671f\u5f85\u3055\u308c\u308b\u7d50\u679c\u306f\u3001\/dev\/sdX \u4e0a\u306e LUKS key slot \u304c\u6d88\u53bb\u3055\u308c\u3001\u305d\u306e\u30c7\u30d0\u30a4\u30b9\u5358\u4f53\u3067\u306f\u89e3\u9664\u3067\u304d\u306a\u304f\u306a\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u305f\u3060\u3057\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u6b8b\u3063\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u306e\u30d8\u30c3\u30c0\u30fc\u3092 restore \u3059\u308b\u3053\u3068\u3067\u904e\u53bb\u306e key slot \u304c\u623b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001cryptsetup erase \u3092\u5b9f\u884c\u3057\u3066\u3082\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068 keyfile \u304c\u6b8b\u3063\u3066\u3044\u308c\u3070\u3001\u904b\u7528\u4e0a\u306e\u5fa9\u5143\u4e0d\u80fd\u5316\u306f\u5b8c\u4e86\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u304c\u3042\u308b\u3002\u9000\u5f79\u3067\u306f\u3001\u5a92\u4f53\u4e0a\u306e key slot \u3060\u3051\u3067\u306a\u304f\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u89e3\u9664\u624b\u6bb5\u306e\u6271\u3044\u307e\u3067\u540c\u6642\u306b\u6c7a\u3081\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<h3>19.6 \u7269\u7406\u5a92\u4f53\u3092\u518d\u5229\u7528\u3059\u308b\u5834\u5408\u3068\u5ec3\u68c4\u3059\u308b\u5834\u5408\u3092\u5206\u3051\u308b<\/h3>\n<p>\u9000\u5f79\u5f8c\u306e\u5a92\u4f53\u306b\u306f\u3001\u518d\u5229\u7528\u3059\u308b\u5834\u5408\u3068\u5ec3\u68c4\u3059\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u518d\u5229\u7528\u3059\u308b\u5834\u5408\u306f\u3001\u65e7 LUKS \u30d8\u30c3\u30c0\u30fc\u3084\u53e4\u3044\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u60c5\u5831\u3092\u6b8b\u3057\u305f\u307e\u307e\u306b\u305b\u305a\u3001\u65b0\u3057\u3044\u7528\u9014\u306b\u5408\u308f\u305b\u3066\u521d\u671f\u5316\u3059\u308b\u3002\u305f\u3060\u3057\u3001\u518d\u5229\u7528\u524d\u306b\u3001\u672c\u5f53\u306b\u9000\u5f79\u6761\u4ef6\u3092\u6e80\u305f\u3057\u3066\u3044\u308b\u304b\u3001\u5fc5\u8981\u306a\u30c7\u30fc\u30bf\u304c\u79fb\u884c\u6e08\u307f\u304b\u3001\u5225\u7cfb\u7d71\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u3042\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002\u5ec3\u68c4\u3059\u308b\u5834\u5408\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u3042\u3063\u3066\u3082\u3001key slot \u6d88\u53bb\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u51e6\u7406\u3001\u7269\u7406\u7834\u58ca\u3001\u5ec3\u68c4\u8a18\u9332\u306e\u3069\u308c\u3092\u63a1\u7528\u3059\u308b\u304b\u3092\u6c7a\u3081\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u9000\u5f79\u5f8c\u306e\u6271\u3044<\/th>\n<th>\u5b9f\u65bd\u5185\u5bb9<\/th>\n<th>\u6ce8\u610f\u70b9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u4fdd\u7ba1<\/td>\n<td>\u6d88\u53bb\u305b\u305a\u3001\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3068\u70b9\u691c\u5468\u671f\u3092\u8a2d\u5b9a\u3059\u308b\u3002<\/td>\n<td>\u4e3b\u7cfb\u3067\u306f\u306a\u3044\u3053\u3068\u3001\u66f4\u65b0\u53ef\u5426\u3001\u9000\u5f79\u518d\u5224\u65ad\u65e5\u3092\u53f0\u5e33\u5316\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u518d\u5229\u7528<\/td>\n<td>\u9000\u5f79\u78ba\u8a8d\u5f8c\u3001\u65b0\u3057\u3044\u7528\u9014\u306b\u5408\u308f\u305b\u3066\u521d\u671f\u5316\u3059\u308b\u3002<\/td>\n<td>\u518d\u5229\u7528\u524d\u306b\u79fb\u884c\u5148\u3068\u5225\u7cfb\u7d71\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u5b58\u5728\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5fa9\u5143\u4e0d\u80fd\u5316<\/td>\n<td>key slot \u6d88\u53bb\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u51e6\u7406\u3001keyfile \u7ba1\u7406\u898b\u76f4\u3057\u3092\u884c\u3046\u3002<\/td>\n<td>cryptsetup erase \u3060\u3051\u3067\u5b8c\u4e86\u3057\u305f\u3068\u8aa4\u89e3\u3057\u306a\u3044\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7269\u7406\u5ec3\u68c4<\/td>\n<td>\u5a92\u4f53\u3092\u7269\u7406\u7684\u306b\u5ec3\u68c4\u3057\u3001\u53f0\u5e33\u3078\u5ec3\u68c4\u65e5\u3068\u65b9\u6cd5\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5ec3\u68c4\u524d\u306b\u5fa9\u5143\u7d4c\u8def\u304c\u5931\u308f\u308c\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>19.7 \u9000\u5f79\u5b8c\u4e86\u6761\u4ef6\u3092\u660e\u6587\u5316\u3059\u308b<\/h3>\n<p>\u9000\u5f79\u5b8c\u4e86\u306f\u3001cryptsetup erase \u3092\u5b9f\u884c\u3057\u305f\u6642\u70b9\u3067\u3082\u3001\u30c7\u30a3\u30b9\u30af\u3092\u53d6\u308a\u5916\u3057\u305f\u6642\u70b9\u3067\u3082\u306a\u3044\u3002\u9000\u5f79\u5bfe\u8c61\u304c\u4e3b\u7cfb\u304b\u3089\u5916\u308c\u3066\u3044\u308b\u3053\u3068\u3001\u79fb\u884c\u5148\u304c\u691c\u8a3c\u6e08\u307f\u3067\u3042\u308b\u3053\u3068\u3001\u5225\u7cfb\u7d71\u306e\u5fa9\u5143\u7d4c\u8def\u304c\u6b8b\u3063\u3066\u3044\u308b\u3053\u3068\u3001\u65e7\u5a92\u4f53\u3092\u6b8b\u3059\u5fc5\u8981\u304c\u306a\u3044\u3053\u3068\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068 keyfile \u306e\u6271\u3044\u304c\u6c7a\u307e\u3063\u3066\u3044\u308b\u3053\u3068\u3001\u53f0\u5e33\u304c\u66f4\u65b0\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u3001\u521d\u3081\u3066\u9000\u5f79\u5b8c\u4e86\u3068\u5224\u65ad\u3067\u304d\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9000\u5f79\u3067\u306f\u3001\u30c7\u30fc\u30bf\u3092\u6d88\u3059\u3053\u3068\u3088\u308a\u3082\u3001\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u5931\u308f\u305a\u306b\u5f79\u5272\u3092\u9589\u3058\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5b8c\u4e86\u6761\u4ef6<\/th>\n<th>\u78ba\u8a8d\u5185\u5bb9<\/th>\n<th>\u672a\u78ba\u8a8d\u6642\u306e\u30ea\u30b9\u30af<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u79fb\u884c\u5148\u78ba\u8a8d<\/td>\n<td>\u79fb\u884c\u5148\u3092\u901a\u5e38\u624b\u9806\u3067 open\u3001mount\u3001\u8aad\u307f\u53d6\u308a\u3067\u304d\u308b\u3002<\/td>\n<td>\u65e7\u5a92\u4f53\u3092\u6d88\u3057\u305f\u5f8c\u306b\u4e3b\u7cfb\u304c\u4f7f\u3048\u306a\u3044\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5225\u7cfb\u7d71\u78ba\u8a8d<\/td>\n<td>\u79fb\u884c\u5148\u3068\u306f\u5225\u306b\u5fa9\u5143\u7d4c\u8def\u304c\u6b8b\u3063\u3066\u3044\u308b\u3002<\/td>\n<td>\u5358\u4e00\u5a92\u4f53\u969c\u5bb3\u3067\u5fa9\u5143\u4e0d\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u65e7\u5a92\u4f53\u306e\u5f79\u5272\u78ba\u8a8d<\/td>\n<td>\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3068\u3057\u3066\u6b8b\u3059\u304b\u3001\u9000\u5f79\u3059\u308b\u304b\u304c\u6c7a\u307e\u3063\u3066\u3044\u308b\u3002<\/td>\n<td>\u5fc5\u8981\u306a\u65e7\u8cc7\u7523\u3092\u6d88\u3057\u305f\u308a\u3001\u4e0d\u8981\u306a\u5a92\u4f53\u3092\u653e\u7f6e\u3057\u305f\u308a\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u65b9\u91dd<\/td>\n<td>\u4fdd\u5b58\u7d99\u7d9a\u3001\u524a\u9664\u3001\u9000\u5f79\u6e08\u307f\u4fdd\u7ba1\u306e\u65b9\u91dd\u304c\u6c7a\u307e\u3063\u3066\u3044\u308b\u3002<\/td>\n<td>\u53e4\u3044 key slot \u304c\u610f\u56f3\u305b\u305a\u5fa9\u6d3b\u53ef\u80fd\u306a\u72b6\u614b\u3067\u6b8b\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>keyfile \u65b9\u91dd<\/td>\n<td>\u9000\u5f79\u5bfe\u8c61\u5c02\u7528\u304b\u3001\u4ed6\u5a92\u4f53\u3068\u5171\u7528\u304b\u3092\u78ba\u8a8d\u3057\u3066\u3044\u308b\u3002<\/td>\n<td>\u5171\u7528 keyfile \u3092\u8aa4\u524a\u9664\u3057\u3001\u5225\u5a92\u4f53\u3092\u958b\u3051\u306a\u304f\u306a\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u53f0\u5e33\u66f4\u65b0<\/td>\n<td>\u9000\u5f79\u65e5\u3001\u9000\u5f79\u7406\u7531\u3001\u9000\u5f79\u65b9\u6cd5\u3001\u6b8b\u3057\u305f\u5fa9\u5143\u7d4c\u8def\u3092\u8a18\u9332\u3057\u3066\u3044\u308b\u3002<\/td>\n<td>\u5f8c\u304b\u3089\u72b6\u614b\u3092\u5224\u65ad\u3067\u304d\u305a\u3001\u518d\u8abf\u67fb\u304c\u5fc5\u8981\u306b\u306a\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u9000\u5f79\u3092\u524a\u9664\u4f5c\u696d\u3068\u3057\u3066\u6271\u308f\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9000\u5f79\u3067\u306f\u3001\u65e7\u5a92\u4f53\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001key slot\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u79fb\u884c\u5148\u3001\u5225\u7cfb\u7d71\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u53f0\u5e33\u304c\u76f8\u4e92\u306b\u95a2\u4fc2\u3059\u308b\u3002cryptsetup erase \u306f\u5f37\u529b\u306a\u5fa9\u5143\u4e0d\u80fd\u5316\u624b\u6bb5\u3060\u304c\u3001\u305d\u308c\u3060\u3051\u3067\u9000\u5f79\u304c\u5b8c\u4e86\u3059\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u3002\u9000\u5f79\u3068\u306f\u3001\u53e4\u3044\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u5f79\u5272\u3092\u9589\u3058\u3001\u5fc5\u8981\u306a\u5fa9\u5143\u7d4c\u8def\u3092\u6b8b\u3057\u3001\u4e0d\u8981\u306a\u89e3\u9664\u5165\u53e3\u3068\u5a92\u4f53\u3092\u7ba1\u7406\u5bfe\u8c61\u304b\u3089\u5916\u3059\u305f\u3081\u306e\u904b\u7528\u624b\u9806\u3067\u3042\u308b\u3002<\/p>\n<hr>\n<h2>20. \u3084\u3063\u3066\u306f\u3044\u3051\u306a\u3044\u64cd\u4f5c\u3092\u5834\u9762\u3054\u3068\u306b\u660e\u6587\u5316\u3059\u308b<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u3067\u306f\u3001\u6b63\u3057\u3044\u30b3\u30de\u30f3\u30c9\u3092\u77e5\u3063\u3066\u3044\u308b\u3060\u3051\u3067\u306f\u4e0d\u5341\u5206\u3067\u3042\u308b\u3002\u4e8b\u6545\u306f\u3001\u30b3\u30de\u30f3\u30c9\u306e\u6587\u6cd5\u3092\u77e5\u3089\u306a\u3044\u3053\u3068\u3088\u308a\u3082\u3001\u5b9f\u884c\u3057\u3066\u306f\u3044\u3051\u306a\u3044\u5834\u9762\u3067\u5f37\u3044\u64cd\u4f5c\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u306b\u3088\u3063\u3066\u8d77\u304d\u308b\u3002\u7279\u306b\u5371\u967a\u306a\u306e\u306f\u3001\u5bfe\u8c61\u78ba\u8a8d\u304c\u4e0d\u5341\u5206\u306a\u307e\u307e luksFormat\u3001mkfs\u3001luksKillSlot\u3001cryptsetup erase\u3001luksHeaderRestore\u3001rsync &#8211;delete \u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u308c\u3089\u306f\u3001\u6b63\u3057\u3044\u5834\u9762\u3067\u306f\u6709\u52b9\u306a\u7ba1\u7406\u624b\u6bb5\u3060\u304c\u3001\u8aa4\u3063\u305f\u5834\u9762\u3067\u306f\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u5931\u308f\u305b\u308b\u64cd\u4f5c\u306b\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u624b\u9806\u66f8\u3067\u306f\u300c\u4f55\u3092\u3057\u3066\u3088\u3044\u304b\u300d\u3060\u3051\u3067\u306a\u304f\u3001\u300c\u3069\u306e\u5834\u9762\u3067\u3001\u4f55\u3092\u3057\u3066\u306f\u3044\u3051\u306a\u3044\u304b\u300d\u3092\u660e\u6587\u5316\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u7981\u6b62\u4e8b\u9805\u306f\u3001\u5358\u306a\u308b\u6ce8\u610f\u66f8\u304d\u3067\u306f\u306a\u304f\u3001\u4e8b\u6545\u3092\u672a\u7136\u306b\u9632\u3050\u305f\u3081\u306e\u904b\u7528\u5883\u754c\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001key slot\u3001keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3001\u7269\u7406\u5a92\u4f53\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u76f8\u4e92\u306b\u95a2\u4fc2\u3057\u3066\u3044\u308b\u3002\u3042\u308b\u64cd\u4f5c\u304c 1 \u3064\u306e\u5c64\u3060\u3051\u306b\u898b\u3048\u3066\u3082\u3001\u5b9f\u969b\u306b\u306f\u5168\u4f53\u306e\u5fa9\u5143\u53ef\u80fd\u6027\u3078\u5f71\u97ff\u3059\u308b\u3002\u305f\u3068\u3048\u3070\u3001\u6700\u5f8c\u306e key slot \u3092\u6d88\u305b\u3070\u30c7\u30fc\u30bf\u672c\u4f53\u304c\u6b8b\u3063\u3066\u3044\u3066\u3082\u5fa9\u53f7\u4e0d\u80fd\u306b\u306a\u308a\u3001\u8aa4\u3063\u305f\u30d8\u30c3\u30c0\u30fc\u3092 restore \u3059\u308c\u3070\u73fe\u5728\u306e key slot \u72b6\u614b\u304c\u904e\u53bb\u3078\u623b\u308a\u3001rsync &#8211;delete \u306e\u540c\u671f\u65b9\u5411\u3092\u9593\u9055\u3048\u308c\u3070\u6b63\u3057\u3044\u30c7\u30fc\u30bf\u3092\u524a\u9664\u3059\u308b\u3002\u7981\u6b62\u4e8b\u9805\u306f\u3001\u3053\u306e\u3088\u3046\u306a\u4e0d\u53ef\u9006\u307e\u305f\u306f\u5fa9\u65e7\u56f0\u96e3\u306a\u5931\u6557\u3092\u9632\u3050\u305f\u3081\u306b\u5b9a\u7fa9\u3059\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5834\u9762<\/th>\n<th>\u3057\u3066\u306f\u3044\u3051\u306a\u3044\u64cd\u4f5c<\/th>\n<th>\u7406\u7531<\/th>\n<th>\u4ee3\u308f\u308a\u306b\u884c\u3046\u3053\u3068<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u5bfe\u8c61\u78ba\u8a8d\u524d<\/td>\n<td>\/dev\/sdX \u306e\u898b\u305f\u76ee\u3060\u3051\u3067 luksFormat\u3001mkfs\u3001pvcreate\u3001rsync &#8211;delete \u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>\/dev\/sdX \u306f\u63a5\u7d9a\u9806\u3067\u5909\u308f\u308b\u305f\u3081\u3001\u6b63\u5e38\u306a\u5225\u5a92\u4f53\u3092\u521d\u671f\u5316\u307e\u305f\u306f\u524a\u9664\u3059\u308b\u5371\u967a\u304c\u3042\u308b\u3002<\/td>\n<td>lsblk -f\u3001blkid\u3001\/dev\/disk\/by-id\u3001\u5bb9\u91cf\u3001\u30e2\u30c7\u30eb\u3001UUID\u3001\u53f0\u5e33\u3092\u7167\u5408\u3057\u3066\u304b\u3089\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u521d\u671f\u751f\u6210\u6642<\/td>\n<td>\u79fb\u884c\u5143\u3084\u65e2\u5b58\u30c7\u30fc\u30bf\u304c\u6b8b\u308b\u5a92\u4f53\u306b\u5bfe\u3057\u3066 luksFormat \u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>luksFormat \u306f LUKS \u30d8\u30c3\u30c0\u30fc\u3092\u4f5c\u6210\u3059\u308b\u7834\u58ca\u7684\u64cd\u4f5c\u3067\u3042\u308a\u3001\u65e2\u5b58\u30c7\u30fc\u30bf\u3078\u306e\u5230\u9054\u7d4c\u8def\u3092\u58ca\u3059\u3002<\/td>\n<td>\u65b0\u898f\u4f5c\u6210\u5bfe\u8c61\u3067\u3042\u308b\u3053\u3068\u3001\u9000\u907f\u6e08\u307f\u3067\u3042\u308b\u3053\u3068\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304c\u6b63\u3057\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u4f5c\u6210\u6642<\/td>\n<td>\u5fa9\u53f7\u5f8c\u306e mapper \u3067\u306f\u306a\u304f\u3001\u5143\u30c7\u30d0\u30a4\u30b9\u306b mkfs.ext4 \u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>\u5143\u30c7\u30d0\u30a4\u30b9\u306b mkfs \u3092\u5b9f\u884c\u3059\u308b\u3068\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3084\u6697\u53f7\u5316\u30b3\u30f3\u30c6\u30ca\u3092\u7834\u58ca\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>mkfs.ext4 \u306e\u5bfe\u8c61\u304c \/dev\/mapper\/crypt_name \u307e\u305f\u306f\u610f\u56f3\u3057\u305f LV \u3067\u3042\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>key slot \u5909\u66f4\u524d<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306a\u3057\u3067 luksAddKey\u3001luksRemoveKey\u3001luksKillSlot \u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>key slot \u64cd\u4f5c\u306b\u5931\u6557\u3057\u305f\u5834\u5408\u3001\u89e3\u9664\u5165\u53e3\u3092\u5931\u3044\u3001\u5fa9\u65e7\u3067\u304d\u306a\u304f\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>luksHeaderBackup \u3092\u53d6\u5f97\u3057\u3001\u5bfe\u8c61 UUID \u3068\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u53d6\u5f97\u65e5\u3092\u53f0\u5e33\u3078\u8a18\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>key slot \u524a\u9664\u6642<\/td>\n<td>keyfile \u7528 slot \u3084\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u7528 slot \u3092\u78ba\u8a8d\u305b\u305a\u306b luksKillSlot \u3059\u308b\u3002<\/td>\n<td>\u901a\u5e38\u904b\u7528\u307e\u305f\u306f\u975e\u5e38\u6642\u306e\u89e3\u9664\u5165\u53e3\u3092\u6d88\u3057\u3066\u3057\u307e\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>&#8211;test-passphrase \u3068 &#8211;key-slot \u3067\u3001\u3069\u306e\u89e3\u9664\u624b\u6bb5\u304c\u3069\u306e slot \u306b\u5bfe\u5fdc\u3059\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>key slot \u6574\u7406\u6642<\/td>\n<td>\u6700\u5f8c\u306e\u6709\u52b9 key slot \u3092\u524a\u9664\u3059\u308b\u3002<\/td>\n<td>\u5168 key slot \u304c\u5931\u308f\u308c\u308b\u3068\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u304c\u6b8b\u3063\u3066\u3044\u3066\u3082 volume key \u3078\u5230\u9054\u3067\u304d\u305a\u5fa9\u53f7\u4e0d\u80fd\u306b\u306a\u308b\u3002<\/td>\n<td>\u524a\u9664\u524d\u5f8c\u306b luksDump \u3068 test-passphrase \u3092\u5b9f\u884c\u3057\u3001\u5c11\u306a\u304f\u3068\u3082 1 \u3064\u4ee5\u4e0a\u306e\u6709\u52b9\u306a\u89e3\u9664\u5165\u53e3\u3092\u6b8b\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u901a\u5e38\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u6642<\/td>\n<td>cryptsetup erase \u3092\u901a\u5e38\u306e key slot \u6574\u7406\u3084\u8efd\u3044\u9000\u5f79\u78ba\u8a8d\u3068\u3057\u3066\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>cryptsetup erase \u306f\u5168 key slot \u3092\u6d88\u3059\u5fa9\u5143\u4e0d\u80fd\u5316\u64cd\u4f5c\u3067\u3042\u308a\u3001\u901a\u5e38\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u7528\u3067\u306f\u306a\u3044\u3002<\/td>\n<td>\u5fa9\u5143\u4e0d\u80fd\u5316\u304c\u76ee\u7684\u3067\u3042\u308a\u3001\u79fb\u884c\u5148\u3068\u5225\u7cfb\u7d71\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u78ba\u8a8d\u6e08\u307f\u306e\u5834\u5408\u306b\u9650\u3063\u3066\u691c\u8a0e\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d8\u30c3\u30c0\u30fc\u5fa9\u65e7\u6642<\/td>\n<td>luksHeaderRestore \u3092\u8efd\u3044\u4fee\u5fa9\u64cd\u4f5c\u3068\u3057\u3066\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u3068 key slot \u72b6\u614b\u304c\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u6642\u70b9\u3078\u623b\u308a\u3001\u73fe\u5728\u306e\u53f0\u5e33\u3084\u89e3\u9664\u624b\u6bb5\u3068\u4e0d\u4e00\u81f4\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>\u5bfe\u8c61 UUID\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u53d6\u5f97\u65e5\u3001\u5fa9\u5143\u5f8c\u306b\u6709\u52b9\u306b\u306a\u308b key slot\u3001\u6551\u51fa\u72b6\u6cc1\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5fa9\u65e7\u521d\u671f<\/td>\n<td>\u8aad\u307f\u53d6\u308a\u78ba\u8a8d\u3084\u30c7\u30fc\u30bf\u6551\u51fa\u306e\u524d\u306b e2fsck \u306e\u4fee\u5fa9\u3084\u30d8\u30c3\u30c0\u30fc\u5fa9\u5143\u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>\u4fee\u5fa9\u64cd\u4f5c\u306f\u72b6\u614b\u3092\u5909\u5316\u3055\u305b\u308b\u305f\u3081\u3001\u8aad\u3081\u308b\u30c7\u30fc\u30bf\u3092\u6551\u51fa\u3059\u308b\u524d\u306b\u72b6\u6cc1\u3092\u60aa\u5316\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>\u307e\u305a\u89b3\u6e2c\u3001\u89e3\u9664\u78ba\u8a8d\u3001\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30de\u30a6\u30f3\u30c8\u3001\u91cd\u8981\u30c7\u30fc\u30bf\u6551\u51fa\u3092\u884c\u3044\u3001\u305d\u306e\u5f8c\u306b\u4fee\u5fa9\u5224\u65ad\u3092\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u540c\u671f\u30fb\u79fb\u884c\u6642<\/td>\n<td>\u540c\u671f\u65b9\u5411\u3092\u78ba\u8a8d\u305b\u305a\u306b rsync &#8211;delete \u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<td>\u79fb\u884c\u5143\u3068\u79fb\u884c\u5148\u3092\u53d6\u308a\u9055\u3048\u308b\u3068\u3001\u6b63\u3057\u3044\u30c7\u30fc\u30bf\u3092\u524a\u9664\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>\u521d\u56de\u540c\u671f\u3067\u306f &#8211;delete \u3092\u907f\u3051\u3001\u5dee\u5206\u518d\u540c\u671f\u6642\u306e\u307f\u540c\u671f\u65b9\u5411\u3092\u660e\u793a\u3057\u3066\u304b\u3089\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>keyfile \u7ba1\u7406\u6642<\/td>\n<td>keyfile \u3092\u5e73\u6587\u3067\u7121\u9020\u4f5c\u306b\u8907\u88fd\u3001\u5171\u6709\u3001\u30ed\u30b0\u51fa\u529b\u3001\u524a\u9664\u3059\u308b\u3002<\/td>\n<td>keyfile \u306f\u89e3\u9664\u624b\u6bb5\u305d\u306e\u3082\u306e\u3067\u3042\u308a\u3001\u6f0f\u6d29\u3059\u308c\u3070\u958b\u3051\u3089\u308c\u3001\u55aa\u5931\u3059\u308c\u3070\u958b\u3051\u306a\u304f\u306a\u308b\u3002<\/td>\n<td>\u6240\u6709\u8005\u3001\u6a29\u9650\u3001\u4fdd\u7ba1\u5834\u6240\u3001hash\u3001\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u65b9\u91dd\u3092\u53f0\u5e33\u5316\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u7ba1\u7406\u6642<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u901a\u5e38\u30d5\u30a1\u30a4\u30eb\u306e\u3088\u3046\u306b\u7121\u9020\u4f5c\u306b\u4fdd\u5b58\u3059\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306b\u306f key slot \u60c5\u5831\u304c\u542b\u307e\u308c\u3001\u53e4\u3044\u89e3\u9664\u5165\u53e3\u3092\u5fa9\u6d3b\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>\u53d6\u5f97\u65e5\u3001\u5bfe\u8c61 UUID\u3001\u4fdd\u5b58\u5834\u6240\u3001\u6697\u53f7\u5316\u4fdd\u7ba1\u65b9\u6cd5\u3001\u9000\u5f79\u65b9\u91dd\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a\u6642<\/td>\n<td>crypttab \u3068 fstab \u306e\u5f79\u5272\u3092\u6df7\u540c\u3057\u3066\u8a2d\u5b9a\u3059\u308b\u3002<\/td>\n<td>crypttab \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u304f\u8a2d\u5b9a\u3067\u3042\u308a\u3001fstab \u306f\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u30de\u30a6\u30f3\u30c8\u3059\u308b\u8a2d\u5b9a\u3067\u3042\u308b\u305f\u3081\u3001\u6df7\u540c\u3059\u308b\u3068\u8d77\u52d5\u6642\u306b\u5931\u6557\u3059\u308b\u3002<\/td>\n<td>LUKS UUID\u3001mapper \u540d\u3001filesystem UUID\u3001mount point \u3092\u5206\u3051\u3066\u78ba\u8a8d\u3057\u3001\u8d77\u52d5\u78ba\u8a8d\u307e\u3067\u884c\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>LVM \u4f75\u7528\u6642<\/td>\n<td>LUKS \u306e\u4e0a\u306b LVM \u304c\u3042\u308b\u306e\u304b\u3001LVM \u306e\u4e0a\u306b LUKS \u304c\u3042\u308b\u306e\u304b\u3092\u78ba\u8a8d\u305b\u305a\u306b\u64cd\u4f5c\u3059\u308b\u3002<\/td>\n<td>\u5c64\u306e\u9806\u5e8f\u3092\u8aa4\u308b\u3068\u3001pvcreate\u3001mkfs\u3001mount\u3001fsck \u306e\u5bfe\u8c61\u3092\u9593\u9055\u3048\u308b\u5371\u967a\u304c\u3042\u308b\u3002<\/td>\n<td>lsblk -f\u3001pvs\u3001vgs\u3001lvs \u3067\u5c64\u306e\u9806\u5e8f\u3092\u78ba\u8a8d\u3057\u3001\u69cb\u6210\u3054\u3068\u306e\u624b\u9806\u306b\u5f93\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523<\/td>\n<td>\u4fdd\u5b88\u7d42\u4e86\u3092\u7406\u7531\u306b\u3001\u78ba\u8a8d\u305b\u305a\u5373\u524a\u9664\u3059\u308b\u3002<\/td>\n<td>\u65e7\u8cc7\u7523\u304c\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3084\u904e\u53bb\u30c7\u30fc\u30bf\u3078\u306e\u5fa9\u5143\u7d4c\u8def\u3068\u3057\u3066\u610f\u5473\u3092\u6301\u3064\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002<\/td>\n<td>\u958b\u3051\u308b\u3053\u3068\u3001\u8aad\u3081\u308b\u3053\u3068\u3001\u4fdd\u6301\u7406\u7531\u3001\u79fb\u884c\u5148\u3001\u9000\u5f79\u6761\u4ef6\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u6271\u3044\u3092\u6c7a\u3081\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u7279\u306b\u5371\u967a\u306a\u64cd\u4f5c\u306f\u3001\u901a\u5e38\u904b\u7528\u306e\u78ba\u8a8d\u30b3\u30de\u30f3\u30c9\u3068\u540c\u5217\u306b\u6271\u3063\u3066\u306f\u306a\u3089\u306a\u3044\u3002luksDump\u3001isLuks\u3001cryptsetup status\u3001lsblk -f\u3001blkid \u306f\u4e3b\u306b\u89b3\u6e2c\u306e\u305f\u3081\u306e\u30b3\u30de\u30f3\u30c9\u3067\u3042\u308a\u3001\u5bfe\u8c61\u306e\u72b6\u614b\u3092\u5927\u304d\u304f\u5909\u3048\u306a\u3044\u3002\u4e00\u65b9\u3001luksFormat\u3001mkfs.ext4\u3001pvcreate\u3001luksKillSlot\u3001cryptsetup erase\u3001luksHeaderRestore\u3001e2fsck \u306e\u4fee\u5fa9\u3001rsync &#8211;delete \u306f\u3001\u72b6\u614b\u3092\u5909\u5316\u3055\u305b\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u624b\u9806\u66f8\u3067\u306f\u3001\u3053\u306e\u4e8c\u7a2e\u985e\u3092\u5206\u3051\u3066\u6271\u3046\u5fc5\u8981\u304c\u3042\u308b\u3002\u89b3\u6e2c\u30b3\u30de\u30f3\u30c9\u3067\u5bfe\u8c61\u3092\u78ba\u8a8d\u3057\u3001\u53f0\u5e33\u3068\u7167\u5408\u3057\u3001\u5fa9\u5143\u7d4c\u8def\u3092\u78ba\u8a8d\u3057\u305f\u5f8c\u3067\u306a\u3051\u308c\u3070\u3001\u72b6\u614b\u5909\u66f4\u30b3\u30de\u30f3\u30c9\u3078\u9032\u3093\u3067\u306f\u306a\u3089\u306a\u3044\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5206\u985e<\/th>\n<th>\u4ee3\u8868\u4f8b<\/th>\n<th>\u6271\u3044\u65b9<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u89b3\u6e2c\u7cfb<\/td>\n<td>lsblk -f\u3001blkid\u3001luksDump\u3001isLuks\u3001cryptsetup status\u3001pvs\u3001vgs\u3001lvs<\/td>\n<td>\u5bfe\u8c61\u78ba\u8a8d\u3001\u53f0\u5e33\u7167\u5408\u3001\u5c64\u306e\u5207\u308a\u5206\u3051\u306b\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u89e3\u9664\u78ba\u8a8d\u7cfb<\/td>\n<td>open &#8211;test-passphrase<\/td>\n<td>mapper \u3092\u4f5c\u3089\u305a\u3001keyfile \u3084\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u6709\u52b9\u304b\u78ba\u8a8d\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u901a\u5e38\u64cd\u4f5c\u7cfb<\/td>\n<td>open\u3001mount\u3001sync\u3001umount\u3001close<\/td>\n<td>\u65e5\u5e38\u904b\u7528\u306e\u56fa\u5b9a\u624b\u9806\u3068\u3057\u3066\u4f7f\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u72b6\u614b\u5909\u66f4\u7cfb<\/td>\n<td>luksAddKey\u3001luksRemoveKey\u3001luksKillSlot\u3001mkfs.ext4\u3001pvcreate\u3001e2fsck<\/td>\n<td>\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u5bfe\u8c61\u78ba\u8a8d\u3001\u5fa9\u5143\u7d4c\u8def\u78ba\u8a8d\u5f8c\u306b\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7834\u58ca\u7684\u64cd\u4f5c\u7cfb<\/td>\n<td>luksFormat\u3001cryptsetup erase\u3001luksHeaderRestore\u3001rsync &#8211;delete<\/td>\n<td>\u5b9f\u884c\u76ee\u7684\u3001\u5bfe\u8c61\u3001\u5fa9\u65e7\u7d4c\u8def\u3001\u53f0\u5e33\u66f4\u65b0\u3092\u78ba\u8a8d\u3057\u305f\u5834\u5408\u306b\u9650\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u7981\u6b62\u4e8b\u9805\u3092\u7cbe\u795e\u8ad6\u306b\u3057\u306a\u3044\u3053\u3068\u3067\u3042\u308b\u3002\u300c\u6c17\u3092\u4ed8\u3051\u308b\u300d\u3067\u306f\u4e0d\u5341\u5206\u3067\u3042\u308a\u3001\u3069\u306e\u5834\u9762\u3067\u3001\u3069\u306e\u64cd\u4f5c\u3092\u6b62\u3081\u308b\u3079\u304d\u304b\u3092\u624b\u9806\u3068\u3057\u3066\u5b9a\u7fa9\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9577\u671f\u904b\u7528\u3067\u306f\u3001\u5931\u6557\u306e\u591a\u304f\u304c\u6697\u53f7\u65b9\u5f0f\u305d\u306e\u3082\u306e\u3067\u306f\u306a\u304f\u3001\u5bfe\u8c61\u53d6\u308a\u9055\u3048\u3001\u89e3\u9664\u5165\u53e3\u306e\u8aa4\u524a\u9664\u3001\u30d8\u30c3\u30c0\u30fc\u5fa9\u5143\u306e\u8aa4\u7528\u3001\u540c\u671f\u65b9\u5411\u306e\u8aa4\u308a\u3001keyfile \u3084\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u306e\u7ba1\u7406\u4e0d\u5099\u304b\u3089\u767a\u751f\u3059\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u3084\u3063\u3066\u306f\u3044\u3051\u306a\u3044\u64cd\u4f5c\u3092\u660e\u6587\u5316\u3059\u308b\u3053\u3068\u306f\u3001\u88dc\u8db3\u3067\u306f\u306a\u304f\u3001\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u5b88\u308b\u305f\u3081\u306e\u4e2d\u6838\u7684\u306a\u904b\u7528\u8a2d\u8a08\u3067\u3042\u308b\u3002<\/p>\n<hr>\n<h2>21. \u53f0\u5e33\u306b\u306f\u5fa9\u5143\u5224\u65ad\u306b\u5fc5\u8981\u306a\u9805\u76ee\u3060\u3051\u3092\u6b8b\u3059<\/h2>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9577\u671f\u904b\u7528\u3067\u306f\u3001\u3059\u3079\u3066\u306e\u60c5\u5831\u3092\u53f0\u5e33\u3078\u66f8\u3051\u3070\u3088\u3044\u308f\u3051\u3067\u306f\u306a\u3044\u3002\u73fe\u5b9f\u306e\u904b\u7528\u3067\u306f\u3001\u8a18\u9332\u9805\u76ee\u304c\u591a\u3059\u304e\u308b\u3068\u66f4\u65b0\u3055\u308c\u306a\u304f\u306a\u308a\u3001\u53f0\u5e33\u305d\u306e\u3082\u306e\u304c\u53e4\u304f\u306a\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u53f0\u5e33\u306b\u6b8b\u3059\u3079\u304d\u306a\u306e\u306f\u3001\u6570\u5e74\u5f8c\u306b\u5fa9\u5143\u3001\u79fb\u884c\u3001\u70b9\u691c\u3001\u9000\u5f79\u3092\u5224\u65ad\u3059\u308b\u3068\u304d\u306b\u5fc5\u8981\u306b\u306a\u308b\u60c5\u5831\u3067\u3042\u308b\u3002\u5358\u306a\u308b\u30b3\u30de\u30f3\u30c9\u5c65\u6b74\u3001\u6bce\u56de\u5909\u308f\u308b\u4e00\u6642\u7684\u306a \/dev\/sdX \u540d\u3001\u8abf\u3079\u308c\u3070\u3059\u3050\u5206\u304b\u308b\u304c\u5224\u65ad\u306b\u4f7f\u308f\u306a\u3044\u7d30\u90e8\u307e\u3067\u66f8\u304f\u5fc5\u8981\u306f\u306a\u3044\u3002\u53f0\u5e33\u306f\u767e\u79d1\u4e8b\u5178\u3067\u306f\u306a\u304f\u3001\u5fa9\u5143\u6761\u4ef6\u3092\u5931\u308f\u306a\u3044\u305f\u3081\u306e\u904b\u7528\u8a2d\u8a08\u66f8\u3067\u3042\u308b\u3002<\/p>\n<p>\u53f0\u5e33\u306b\u6b8b\u3059\u9805\u76ee\u306f\u3001\u660e\u78ba\u306a\u7406\u7531\u3092\u6301\u3064\u5fc5\u8981\u304c\u3042\u308b\u3002\u305f\u3068\u3048\u3070\u3001LUKS UUID \u306f\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3084 crypttab \u3068\u7167\u5408\u3059\u308b\u305f\u3081\u306b\u5fc5\u8981\u3067\u3042\u308b\u3002mapper \u540d\u3068 mount point \u306f\u3001\u8d77\u52d5\u6642\u8a2d\u5b9a\u3068\u901a\u5e38\u904b\u7528\u624b\u9806\u3092\u7d50\u3073\u4ed8\u3051\u308b\u305f\u3081\u306b\u5fc5\u8981\u3067\u3042\u308b\u3002key slot \u306e\u7528\u9014\u306f\u3001\u4e0d\u8981\u306a\u89e3\u9664\u5165\u53e3\u3092\u6d88\u3059\u3068\u304d\u306b\u6700\u5f8c\u306e\u6709\u52b9 slot \u3092\u8aa4\u3063\u3066\u524a\u9664\u3057\u306a\u3044\u305f\u3081\u306b\u5fc5\u8981\u3067\u3042\u308b\u3002\u4e00\u65b9\u3001luksDump \u306e\u5168\u51fa\u529b\u3092\u6bce\u56de\u8cbc\u308a\u4ed8\u3051\u308b\u5fc5\u8981\u306f\u306a\u3044\u3002\u5fc5\u8981\u306a\u306e\u306f\u3001\u5c06\u6765\u306e\u4f5c\u696d\u8005\u304c\u300c\u3053\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306f\u4f55\u3067\u3001\u4f55\u3067\u958b\u304d\u3001\u3069\u3053\u3078\u30de\u30a6\u30f3\u30c8\u3055\u308c\u3001\u3044\u3064\u78ba\u8a8d\u3055\u308c\u3001\u3044\u3064\u9000\u5f79\u3067\u304d\u308b\u306e\u304b\u300d\u3092\u5224\u65ad\u3067\u304d\u308b\u3053\u3068\u3060\u304b\u3089\u3067\u3042\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u53f0\u5e33\u9805\u76ee<\/th>\n<th>\u8a18\u9332\u3059\u308b\u5185\u5bb9<\/th>\n<th>\u6b8b\u3059\u7406\u7531<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u5f79\u5272<\/td>\n<td>system disk\u3001data disk\u3001backup disk\u3001archive\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u9000\u5f79\u5019\u88dc\u306a\u3069\u306e\u5f79\u5272\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u305d\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u4e3b\u7cfb\u3068\u3057\u3066\u6271\u3046\u306e\u304b\u3001\u5fa9\u65e7\u7d4c\u8def\u3068\u3057\u3066\u6b8b\u3059\u306e\u304b\u3001\u9000\u5f79\u5019\u88dc\u306b\u3059\u308b\u306e\u304b\u3092\u5224\u65ad\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7269\u7406\u5a92\u4f53<\/td>\n<td>vendor\u3001model\u3001serial\u3001capacity\u3001\u63a5\u7d9a\u5f62\u614b\u306a\u3069\u3001\u5a92\u4f53\u3092\u53d6\u308a\u9055\u3048\u306a\u3044\u305f\u3081\u306e\u8b58\u5225\u60c5\u5831\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\/dev\/sdX \u306f\u63a5\u7d9a\u9806\u3067\u5909\u308f\u308b\u305f\u3081\u3001\u7834\u58ca\u7684\u64cd\u4f5c\u306e\u5bfe\u8c61\u78ba\u8a8d\u306b\u306f\u7269\u7406\u5a92\u4f53\u306e\u8b58\u5225\u60c5\u5831\u304c\u5fc5\u8981\u3060\u304b\u3089\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6c38\u7d9a\u8b58\u5225\u5b50<\/td>\n<td>\/dev\/disk\/by-id\u3001LUKS UUID\u3001filesystem UUID\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066 PARTUUID \u3092\u533a\u5225\u3057\u3066\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>crypttab\u3001fstab\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u5b9f\u30c7\u30d0\u30a4\u30b9\u3092\u7167\u5408\u3057\u3001\u5225\u7269\u3092\u540c\u4e00\u8996\u3057\u306a\u3044\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6697\u53f7\u69cb\u6210<\/td>\n<td>LUKS1 \/ LUKS2\u3001cipher\u3001mode\u3001KDF\u3001sector size \u306a\u3069\u3001\u904b\u7528\u5224\u65ad\u306b\u5fc5\u8981\u306a\u7bc4\u56f2\u3067\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u73fe\u884c\u4e3b\u7cfb\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u79fb\u884c\u5bfe\u8c61\u3001\u9000\u5f79\u5019\u88dc\u306e\u3069\u308c\u3068\u3057\u3066\u6271\u3046\u304b\u3092\u5224\u65ad\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u89e3\u9664\u624b\u6bb5<\/td>\n<td>\u901a\u5e38\u7528 keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001token \u306e\u6709\u7121\u3001\u5bfe\u5fdc\u3059\u308b key slot \u306e\u7528\u9014\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>key slot \u6574\u7406\u6642\u306b\u5fc5\u8981\u306a\u89e3\u9664\u5165\u53e3\u3092\u8aa4\u3063\u3066\u6d88\u3055\u305a\u3001\u975e\u5e38\u6642\u306b\u3069\u306e\u624b\u6bb5\u3067\u958b\u3051\u308b\u304b\u3092\u5224\u65ad\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>keyfile \u7ba1\u7406<\/td>\n<td>keyfile \u306e path\u3001size\u3001owner\u3001mode\u3001hash\u3001\u4fdd\u7ba1\u65b9\u91dd\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>keyfile \u304c\u6b63\u3057\u3044\u3082\u306e\u304b\u3001\u6a29\u9650\u304c\u9069\u5207\u304b\u3001\u7d1b\u5931\u3084\u7f6e\u304d\u63db\u3048\u304c\u8d77\u304d\u3066\u3044\u306a\u3044\u304b\u3092\u78ba\u8a8d\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7<\/td>\n<td>filename\u3001\u53d6\u5f97\u65e5\u3001\u5bfe\u8c61 LUKS UUID\u3001\u4fdd\u5b58\u5834\u6240\u3001\u4fdd\u8b77\u65b9\u6cd5\u3001\u9000\u5f79\u65b9\u91dd\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u7834\u640d\u6642\u306e\u5fa9\u65e7\u7d4c\u8def\u3067\u3042\u308b\u4e00\u65b9\u3001\u53e4\u3044 key slot \u3092\u5fa9\u6d3b\u3055\u305b\u308b\u6a5f\u5fae\u60c5\u5831\u3067\u3082\u3042\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a<\/td>\n<td>crypttab entry\u3001fstab entry\u3001mapper name\u3001mount point\u3001initramfs \u306b\u95a2\u4fc2\u3059\u308b keyfile \u306e\u6271\u3044\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u8d77\u52d5\u6642\u306b\u4f55\u304c\u958b\u304b\u308c\u3001\u4f55\u304c\u30de\u30a6\u30f3\u30c8\u3055\u308c\u308b\u304b\u3092\u5fa9\u65e7\u6642\u306b\u518d\u73fe\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>LVM \u95a2\u4fc2<\/td>\n<td>PV\u3001VG\u3001LV\u3001\u304a\u3088\u3073 LUKS \u3068 LVM \u306e\u4e0a\u4e0b\u95a2\u4fc2\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5fa9\u65e7\u6642\u306b LUKS \u3092\u5148\u306b\u958b\u304f\u306e\u304b\u3001LVM \u3092\u5148\u306b\u8a8d\u8b58\u3059\u308b\u306e\u304b\u3092\u8aa4\u3089\u306a\u3044\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6700\u7d42\u78ba\u8a8d\u65e5<\/td>\n<td>last open test\u3001last mount test\u3001last read check\u3001last SMART check\u3001last restore-related check \u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u5b58\u5728\u3057\u3066\u3044\u308b\u3060\u3051\u306e\u5a92\u4f53\u3067\u306f\u306a\u304f\u3001\u6700\u5f8c\u306b\u3044\u3064\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u78ba\u8a8d\u3057\u305f\u5a92\u4f53\u306a\u306e\u304b\u3092\u5224\u65ad\u3059\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u9000\u5f79\u6761\u4ef6<\/td>\n<td>\u79fb\u884c\u5b8c\u4e86\u3001\u79fb\u884c\u5148\u691c\u8a3c\u3001\u5225\u7cfb\u7d71\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u78ba\u8a8d\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u65b9\u91dd\u3001\u6d88\u53bb\u65b9\u91dd\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<td>\u53e4\u3044\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u5fc5\u8981\u4ee5\u4e0a\u306b\u6b8b\u3055\u305a\u3001\u304b\u3064\u5fa9\u5143\u7d4c\u8def\u3092\u5931\u308f\u305a\u306b\u5f79\u5272\u3092\u9589\u3058\u308b\u305f\u3081\u3067\u3042\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u4e00\u65b9\u3067\u3001\u53f0\u5e33\u3078\u6b8b\u3055\u306a\u3044\u307b\u3046\u304c\u3088\u3044\u60c5\u5831\u3082\u3042\u308b\u3002\u305f\u3068\u3048\u3070\u3001\u5e73\u6587\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001keyfile \u306e\u4e2d\u8eab\u3001\u6bce\u56de\u306e\u30b3\u30de\u30f3\u30c9\u51fa\u529b\u5168\u6587\u3001\u4e00\u6642\u7684\u306a \/dev\/sdX \u540d\u3060\u3051\u306b\u4f9d\u5b58\u3057\u305f\u8a18\u9332\u3001\u5224\u65ad\u306b\u4f7f\u308f\u306a\u3044\u8a73\u7d30\u30ed\u30b0\u306f\u3001\u53f0\u5e33\u306e\u53ef\u8aad\u6027\u3068\u5b89\u5168\u6027\u3092\u4e0b\u3052\u308b\u3002\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3084 keyfile \u672c\u4f53\u306f\u3001\u53f0\u5e33\u3067\u306f\u306a\u304f\u5225\u306e\u4fdd\u7ba1\u8a2d\u8a08\u3067\u6271\u3046\u3002\u53f0\u5e33\u306b\u306f\u3001\u305d\u308c\u3089\u304c\u3069\u306e\u65b9\u91dd\u3067\u4fdd\u7ba1\u3055\u308c\u3001\u3069\u306e\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306b\u5bfe\u5fdc\u3057\u3001\u6700\u5f8c\u306b\u3044\u3064\u78ba\u8a8d\u3055\u308c\u305f\u304b\u3092\u8a18\u9332\u3059\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6b8b\u3055\u306a\u3044\u9805\u76ee<\/th>\n<th>\u7406\u7531<\/th>\n<th>\u4ee3\u308f\u308a\u306b\u6b8b\u3059\u3082\u306e<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u5e73\u6587\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba<\/td>\n<td>\u53f0\u5e33\u6f0f\u6d29\u6642\u306b\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u958b\u3051\u3089\u308c\u308b\u5371\u967a\u304c\u3042\u308b\u3002<\/td>\n<td>\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3001\u5bfe\u5fdc slot\u3001\u4fdd\u7ba1\u65b9\u91dd\u3001\u6700\u7d42\u78ba\u8a8d\u65e5\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>keyfile \u306e\u4e2d\u8eab<\/td>\n<td>keyfile \u306f\u89e3\u9664\u624b\u6bb5\u305d\u306e\u3082\u306e\u3067\u3042\u308a\u3001\u53f0\u5e33\u306b\u8cbc\u308b\u3079\u304d\u3067\u306f\u306a\u3044\u3002<\/td>\n<td>path\u3001size\u3001owner\u3001mode\u3001sha256\u3001\u4fdd\u7ba1\u65b9\u91dd\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>luksDump \u306e\u5168\u6587<\/td>\n<td>\u6bce\u56de\u5168\u6587\u3092\u8cbc\u308b\u3068\u53f0\u5e33\u304c\u80a5\u5927\u5316\u3057\u3001\u91cd\u8981\u9805\u76ee\u304c\u57cb\u3082\u308c\u308b\u3002<\/td>\n<td>LUKS version\u3001UUID\u3001cipher\u3001KDF\u3001key slot \u7528\u9014\u306a\u3069\u5224\u65ad\u306b\u4f7f\u3046\u8981\u70b9\u3060\u3051\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4e00\u6642\u7684\u306a \/dev\/sdX \u306e\u307f<\/td>\n<td>\u63a5\u7d9a\u9806\u3067\u5909\u308f\u308b\u305f\u3081\u3001\u5c06\u6765\u306e\u5bfe\u8c61\u78ba\u8a8d\u306b\u4f7f\u3048\u306a\u3044\u3002<\/td>\n<td>\/dev\/disk\/by-id\u3001model\u3001serial\u3001LUKS UUID\u3001filesystem UUID \u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5224\u65ad\u306b\u4f7f\u308f\u306a\u3044\u8a73\u7d30\u30ed\u30b0<\/td>\n<td>\u8a18\u9332\u91cf\u304c\u5897\u3048\u3059\u304e\u308b\u3068\u66f4\u65b0\u3055\u308c\u306a\u304f\u306a\u308a\u3001\u53f0\u5e33\u306e\u4fe1\u983c\u6027\u304c\u4e0b\u304c\u308b\u3002<\/td>\n<td>\u70b9\u691c\u7d50\u679c\u3001\u7570\u5e38\u6709\u7121\u3001\u6b21\u56de\u5bfe\u5fdc\u3001\u9000\u5f79\u5224\u65ad\u306b\u5fc5\u8981\u306a\u8981\u7d04\u3092\u8a18\u9332\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u7ae0\u306e\u8981\u70b9\u306f\u3001\u53f0\u5e33\u3092\u5927\u304d\u304f\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u304f\u3001\u5fa9\u5143\u5224\u65ad\u306b\u5fc5\u8981\u306a\u60c5\u5831\u3060\u3051\u3092\u6b8b\u3059\u3053\u3068\u3067\u3042\u308b\u3002\u53f0\u5e33\u304c\u73fe\u5b9f\u306b\u904b\u7528\u3055\u308c\u308b\u305f\u3081\u306b\u306f\u3001\u9805\u76ee\u6570\u3092\u5897\u3084\u3057\u3059\u304e\u305a\u3001\u5404\u9805\u76ee\u306b\u7406\u7531\u3092\u6301\u305f\u305b\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u53f0\u5e33\u306b\u5fc5\u8981\u306a\u306e\u306f\u3001\u5c06\u6765\u306e\u4f5c\u696d\u8005\u304c\u3001\u5bfe\u8c61\u3092\u53d6\u308a\u9055\u3048\u305a\u3001\u6b63\u3057\u3044\u89e3\u9664\u624b\u6bb5\u3092\u4f7f\u3044\u3001\u5fc5\u8981\u306a\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u898b\u3064\u3051\u3001\u8d77\u52d5\u6642\u8a2d\u5b9a\u3092\u518d\u73fe\u3057\u3001\u79fb\u884c\u3084\u9000\u5f79\u3092\u5224\u65ad\u3067\u304d\u308b\u3060\u3051\u306e\u60c5\u5831\u3067\u3042\u308b\u3002\u7406\u7531\u306e\u306a\u3044\u60c5\u5831\u306f\u6b8b\u3055\u305a\u3001\u5fa9\u5143\u6761\u4ef6\u306b\u95a2\u4fc2\u3059\u308b\u60c5\u5831\u3060\u3051\u3092\u7d99\u7d9a\u7684\u306b\u66f4\u65b0\u3059\u308b\u3002<\/p>\n<hr>\n<h2>22. \u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u624b\u9806\u306f\u30ec\u30b8\u30ea\u30a8\u30f3\u30b9\u306e\u5b9f\u88c5\u3067\u3042\u308b<\/h2>\n<p>cryptsetup \u306e\u624b\u9806\u3092\u4f53\u7cfb\u5316\u3059\u308b\u610f\u5473\u306f\u3001\u30b3\u30de\u30f3\u30c9\u3092\u6697\u8a18\u3059\u308b\u3053\u3068\u3067\u306f\u306a\u3044\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u521d\u671f\u751f\u6210\u3001\u901a\u5e38\u904b\u7528\u3001\u60c5\u5831\u78ba\u8a8d\u3001key slot \u7ba1\u7406\u3001keyfile \u7ba1\u7406\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001crypttab \/ fstab \u9023\u643a\u3001LVM \u78ba\u8a8d\u3001\u70b9\u691c\u3001\u79fb\u884c\u3001\u5fa9\u65e7\u3001\u9000\u5f79\u3092\u4e00\u3064\u306e\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u3068\u3057\u3066\u6271\u3044\u3001\u6642\u9593\u304c\u7d4c\u3063\u3066\u3082\u958b\u3051\u308b\u72b6\u614b\u3001\u8aad\u3081\u308b\u72b6\u614b\u3001\u79fb\u305b\u308b\u72b6\u614b\u3001\u9589\u3058\u3089\u308c\u308b\u72b6\u614b\u3092\u7dad\u6301\u3059\u308b\u3053\u3068\u306b\u3042\u308b\u3002\u6697\u53f7\u5316\u306f\u7b2c\u4e09\u8005\u304b\u3089\u30c7\u30fc\u30bf\u3092\u5b88\u308b\u304c\u3001\u540c\u6642\u306b\u3001\u6b63\u5f53\u306a\u5229\u7528\u8005\u3067\u3042\u3063\u3066\u3082\u89e3\u9664\u6761\u4ef6\u3092\u5931\u3048\u3070\u30c7\u30fc\u30bf\u3078\u5230\u9054\u3067\u304d\u306a\u304f\u306a\u308b\u69cb\u9020\u3092\u4f5c\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u3067\u306f\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u3060\u3051\u3067\u306a\u304f\u3001LUKS \u30d8\u30c3\u30c0\u30fc\u3001key slot\u3001keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8d77\u52d5\u8a2d\u5b9a\u3001LVM \u69cb\u6210\u3001\u5a92\u4f53\u8b58\u5225\u60c5\u5831\u3001\u70b9\u691c\u5c65\u6b74\u3001\u9000\u5f79\u6761\u4ef6\u307e\u3067\u3092\u5fa9\u5143\u6761\u4ef6\u3068\u3057\u3066\u6271\u3046\u5fc5\u8981\u304c\u3042\u308b\u3002<\/p>\n<p>\u672c\u7a3f\u3067\u6574\u7406\u3057\u305f\u624b\u9806\u306f\u3001\u500b\u5225\u306b\u306f\u5358\u7d14\u306a\u30b3\u30de\u30f3\u30c9\u64cd\u4f5c\u306b\u898b\u3048\u308b\u3002luksFormat \u306f\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u4f5c\u308b\u64cd\u4f5c\u3067\u3042\u308a\u3001open \u306f mapper \u3092\u4f5c\u308b\u64cd\u4f5c\u3067\u3042\u308a\u3001mount \u306f\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u5229\u7528\u53ef\u80fd\u306b\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308a\u3001luksDump \u306f\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308a\u3001luksAddKey \u3084 luksKillSlot \u306f\u89e3\u9664\u5165\u53e3\u3092\u7ba1\u7406\u3059\u308b\u64cd\u4f5c\u3067\u3042\u308b\u3002\u3057\u304b\u3057\u3001\u9577\u671f\u904b\u7528\u306e\u89b3\u70b9\u3067\u306f\u3001\u3053\u308c\u3089\u306f\u72ec\u7acb\u3057\u305f\u5c0f\u6280\u3067\u306f\u306a\u3044\u3002\u3069\u306e\u5bfe\u8c61\u306b\u5bfe\u3057\u3066\u5b9f\u884c\u3059\u308b\u306e\u304b\u3001\u5b9f\u884c\u524d\u306b\u4f55\u3092\u78ba\u8a8d\u3059\u308b\u306e\u304b\u3001\u5b9f\u884c\u5f8c\u306b\u4f55\u3092\u691c\u8a3c\u3059\u308b\u306e\u304b\u3001\u5931\u6557\u3057\u305f\u5834\u5408\u306b\u3069\u3053\u3078\u623b\u308c\u308b\u306e\u304b\u3001\u6570\u5e74\u5f8c\u306b\u540c\u3058\u5224\u65ad\u3092\u518d\u73fe\u3067\u304d\u308b\u306e\u304b\u304c\u91cd\u8981\u306b\u306a\u308b\u3002\u3064\u307e\u308a\u3001cryptsetup \u306e\u624b\u9806\u306f\u3001\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u3092\u64cd\u4f5c\u3059\u308b\u305f\u3081\u306e\u6280\u8853\u624b\u9806\u3067\u3042\u308b\u3068\u540c\u6642\u306b\u3001\u5fa9\u5143\u53ef\u80fd\u6027\u3092\u7dad\u6301\u3059\u308b\u305f\u3081\u306e\u904b\u7528\u8a2d\u8a08\u3067\u3042\u308b\u3002<\/p>\n<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u9577\u671f\u904b\u7528\u3067\u5931\u6557\u3057\u3084\u3059\u3044\u70b9\u306f\u3001\u6697\u53f7\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u305d\u306e\u3082\u306e\u3088\u308a\u3082\u3001\u5468\u8fba\u6761\u4ef6\u306e\u55aa\u5931\u306b\u3042\u308b\u3002\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u3092\u53d6\u308a\u9055\u3048\u308b\u3002keyfile \u3092\u5931\u3046\u3002\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u78ba\u8a8d\u3057\u3066\u3044\u306a\u3044\u3002\u7528\u9014\u4e0d\u660e\u306e key slot \u304c\u6b8b\u308b\u3002\u6700\u5f8c\u306e\u6709\u52b9 key slot \u3092\u6d88\u3059\u3002\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u5f97\u3057\u3066\u3044\u306a\u3044\u3002\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3092\u53d6\u5f97\u3057\u3066\u3082\u3001\u3069\u306e UUID \u306b\u5bfe\u5fdc\u3059\u308b\u306e\u304b\u5206\u304b\u3089\u306a\u3044\u3002crypttab \u3068 fstab \u306e\u95a2\u4fc2\u3092\u5fd8\u308c\u308b\u3002LVM \u3068 LUKS \u306e\u4e0a\u4e0b\u95a2\u4fc2\u3092\u8aa4\u308b\u3002\u79fb\u884c\u5f8c\u306b\u65e7\u5a92\u4f53\u3092\u6d88\u3057\u305f\u7d50\u679c\u3001\u5225\u7cfb\u7d71\u306e\u5fa9\u5143\u7d4c\u8def\u304c\u6d88\u3048\u308b\u3002\u3053\u308c\u3089\u306f\u6697\u53f7\u7406\u8ad6\u306e\u554f\u984c\u3067\u306f\u306a\u304f\u3001\u904b\u7528\u8a2d\u8a08\u306e\u554f\u984c\u3067\u3042\u308b\u3002\u3057\u305f\u304c\u3063\u3066\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u30ec\u30b8\u30ea\u30a8\u30f3\u30b9\u306f\u3001\u5f37\u3044\u6697\u53f7\u65b9\u5f0f\u3092\u9078\u3076\u3060\u3051\u3067\u306f\u6210\u7acb\u3057\u306a\u3044\u3002<\/p>\n<p>\u73fe\u5728\u306e\u6a19\u6e96\u3092\u63a1\u7528\u3059\u308b\u3053\u3068\u306f\u91cd\u8981\u3067\u3042\u308b\u3002\u65b0\u898f\u4f5c\u6210\u3067\u306f LUKS2\u3001AES-XTS\u3001Argon2id \u306e\u3088\u3046\u306a\u73fe\u884c\u69cb\u6210\u3078\u5bc4\u305b\u308b\u306e\u304c\u81ea\u7136\u3067\u3042\u308a\u3001\u53e4\u3044 LUKS1\u3001CBC-ESSIV\u3001PBKDF2\u3001TrueCrypt \/ TCRYPT \u65e2\u5b58\u8cc7\u7523\u3092\u65b0\u898f\u4e3b\u7cfb\u3068\u3057\u3066\u5897\u3084\u3059\u3079\u304d\u3067\u306f\u306a\u3044\u3002\u3057\u304b\u3057\u3001\u305d\u308c\u306f\u53e4\u3044\u69cb\u6210\u3092\u5373\u5ea7\u306b\u6d88\u3059\u3068\u3044\u3046\u610f\u5473\u3067\u306f\u306a\u3044\u3002\u53e4\u3044\u69cb\u6210\u306b\u306f\u3001\u904e\u53bb\u30c7\u30fc\u30bf\u3001\u904e\u53bb\u74b0\u5883\u3001\u904e\u53bb\u306e\u5fa9\u65e7\u7d4c\u8def\u304c\u6b8b\u3063\u3066\u3044\u308b\u5834\u5408\u304c\u3042\u308b\u3002\u30ec\u30b8\u30ea\u30a8\u30f3\u30b9\u3068\u306f\u3001\u53e4\u3044\u69cb\u6210\u3092\u7121\u6761\u4ef6\u306b\u6b8b\u3059\u3053\u3068\u3067\u3082\u3001\u3059\u3079\u3066\u3092\u6700\u65b0\u65b9\u5f0f\u3078\u7f6e\u304d\u63db\u3048\u308b\u3053\u3068\u3067\u3082\u306a\u3044\u3002\u4e3b\u7cfb\u3001\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u8aad\u307f\u53d6\u308a\u4e2d\u5fc3\u30a2\u30fc\u30ab\u30a4\u30d6\u3001\u79fb\u884c\u5bfe\u8c61\u3001\u9000\u5f79\u5019\u88dc\u3092\u5206\u985e\u3057\u3001\u305d\u308c\u305e\u308c\u306b\u78ba\u8a8d\u5468\u671f\u3001\u89e3\u9664\u624b\u6bb5\u3001\u4fdd\u7ba1\u65b9\u91dd\u3001\u9000\u5f79\u6761\u4ef6\u3092\u4e0e\u3048\u308b\u3053\u3068\u3067\u3042\u308b\u3002<\/p>\n<p>\u3053\u306e\u8003\u3048\u65b9\u3092\u4e00\u822c\u5316\u3059\u308b\u3068\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u3067\u5b88\u308b\u3079\u304d\u539f\u5247\u306f\u56db\u3064\u306b\u6574\u7406\u3067\u304d\u308b\u3002\u7b2c\u4e00\u306b\u3001\u89b3\u6e2c\u3057\u3066\u304b\u3089\u5909\u66f4\u3059\u308b\u3002lsblk\u3001blkid\u3001luksDump\u3001status\u3001pvs\u3001vgs\u3001lvs \u306b\u3088\u3063\u3066\u3001\u5bfe\u8c61\u3068\u5c64\u306e\u95a2\u4fc2\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u72b6\u614b\u5909\u66f4\u64cd\u4f5c\u3078\u9032\u3080\u3002\u7b2c\u4e8c\u306b\u3001\u89e3\u9664\u5165\u53e3\u3092\u610f\u56f3\u7684\u306b\u7ba1\u7406\u3059\u308b\u3002keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001token\u3001key slot \u3092\u7528\u9014\u3054\u3068\u306b\u5206\u985e\u3057\u3001\u4e0d\u8981\u306a\u5165\u53e3\u3092\u6b8b\u3055\u305a\u3001\u5fc5\u8981\u306a\u5165\u53e3\u3092\u8aa4\u3063\u3066\u6d88\u3055\u306a\u3044\u3002\u7b2c\u4e09\u306b\u3001\u5fa9\u5143\u6761\u4ef6\u3092\u30c7\u30fc\u30bf\u672c\u4f53\u3068\u540c\u3058\u91cd\u3055\u3067\u6271\u3046\u3002\u30d8\u30c3\u30c0\u30fc\u3001keyfile\u3001\u53f0\u5e33\u3001\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a\u3001LVM \u69cb\u6210\u3001\u70b9\u691c\u5c65\u6b74\u304c\u5931\u308f\u308c\u308c\u3070\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u304c\u6b8b\u3063\u3066\u3044\u3066\u3082\u5fa9\u5143\u3067\u304d\u306a\u3044\u3002\u7b2c\u56db\u306b\u3001\u79fb\u884c\u3068\u9000\u5f79\u3092\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u3068\u3057\u3066\u6271\u3046\u3002\u65b0\u3057\u3044\u69cb\u6210\u3078\u79fb\u3059\u3060\u3051\u3067\u306a\u304f\u3001\u79fb\u884c\u5148\u3092\u691c\u8a3c\u3057\u3001\u65e7\u69cb\u6210\u306e\u5f79\u5272\u3092\u5909\u66f4\u3057\u3001\u5fa9\u5143\u7d4c\u8def\u3092\u5931\u308f\u305a\u306b\u9000\u5f79\u3055\u305b\u308b\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u539f\u5247<\/th>\n<th>\u610f\u5473<\/th>\n<th>\u5177\u4f53\u7684\u306a\u904b\u7528<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u89b3\u6e2c\u3057\u3066\u304b\u3089\u5909\u66f4\u3059\u308b<\/td>\n<td>\u5bfe\u8c61\u3068\u5c64\u306e\u72b6\u614b\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u3001\u7834\u58ca\u7684\u64cd\u4f5c\u3084\u72b6\u614b\u5909\u66f4\u64cd\u4f5c\u3092\u884c\u3046\u3002<\/td>\n<td>luksFormat\u3001mkfs\u3001luksKillSlot\u3001erase\u3001HeaderRestore\u3001rsync &#8211;delete \u306e\u524d\u306b\u3001lsblk\u3001blkid\u3001luksDump\u3001\u53f0\u5e33\u7167\u5408\u3092\u884c\u3046\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u89e3\u9664\u5165\u53e3\u3092\u7ba1\u7406\u3059\u308b<\/td>\n<td>key slot \u306f\u540c\u3058\u6697\u53f7\u5316\u30c7\u30fc\u30bf\u3078\u5230\u9054\u3059\u308b\u5165\u53e3\u3067\u3042\u308a\u3001\u5897\u3084\u3057\u3059\u304e\u3066\u3082\u6d88\u3057\u3059\u304e\u3066\u3082\u5371\u967a\u3067\u3042\u308b\u3002<\/td>\n<td>\u901a\u5e38\u7528 keyfile\u3001\u975e\u5e38\u7528\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3001\u7528\u9014\u4e0d\u660e slot \u3092\u5206\u3051\u3001\u8ffd\u52a0\u3001\u78ba\u8a8d\u3001\u524a\u9664\u306e\u624b\u9806\u3092\u56fa\u5b9a\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5fa9\u5143\u6761\u4ef6\u3092\u4fdd\u5b58\u3059\u308b<\/td>\n<td>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u3001\u30c7\u30fc\u30bf\u672c\u4f53\u3060\u3051\u3067\u306a\u304f\u3001\u30d8\u30c3\u30c0\u30fc\u3001\u9375\u3001\u8a2d\u5b9a\u3001\u624b\u9806\u3001\u53f0\u5e33\u304c\u5fa9\u5143\u6761\u4ef6\u306b\u306a\u308b\u3002<\/td>\n<td>\u30d8\u30c3\u30c0\u30fc\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001keyfile \u7ba1\u7406\u3001crypttab \/ fstab\u3001LVM \u69cb\u6210\u3001\u6700\u7d42\u78ba\u8a8d\u65e5\u3001\u9000\u5f79\u6761\u4ef6\u3092\u53f0\u5e33\u5316\u3059\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u79fb\u884c\u3068\u9000\u5f79\u3092\u8a2d\u8a08\u3059\u308b<\/td>\n<td>\u73fe\u5728\u306e\u6a19\u6e96\u3082\u5c06\u6765\u306f\u53e4\u304f\u306a\u308b\u305f\u3081\u3001\u4f5c\u6210\u6642\u70b9\u304b\u3089\u79fb\u884c\u53ef\u80fd\u6027\u3068\u9000\u5f79\u6761\u4ef6\u3092\u6301\u305f\u305b\u308b\u3002<\/td>\n<td>\u65b0\u898f\u4e3b\u7cfb\u306f LUKS2 \u3078\u5bc4\u305b\u3001\u65e7\u69cb\u6210\u306f\u4e92\u63db\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3001\u79fb\u884c\u5bfe\u8c61\u3001\u9000\u5f79\u5019\u88dc\u3068\u3057\u3066\u5206\u985e\u3059\u308b\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u3053\u306e\u610f\u5473\u3067\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u624b\u9806\u306f\u30ec\u30b8\u30ea\u30a8\u30f3\u30b9\u306e\u5b9f\u88c5\u3067\u3042\u308b\u3002\u30ec\u30b8\u30ea\u30a8\u30f3\u30b9\u3068\u306f\u3001\u969c\u5bb3\u304c\u8d77\u304d\u306a\u3044\u72b6\u614b\u3092\u4f5c\u308b\u3053\u3068\u3067\u306f\u306a\u3044\u3002\u5a92\u4f53\u304c\u52a3\u5316\u3057\u3001OS \u304c\u66f4\u65b0\u3055\u308c\u3001\u6697\u53f7\u6a19\u6e96\u304c\u5909\u308f\u308a\u3001\u624b\u9806\u304c\u5fd8\u308c\u3089\u308c\u3001\u62c5\u5f53\u8005\u304c\u5909\u308f\u308a\u3001\u53e4\u3044\u69cb\u6210\u3068\u65b0\u3057\u3044\u69cb\u6210\u304c\u4f75\u5b58\u3059\u308b\u73fe\u5b9f\u306e\u4e2d\u3067\u3001\u305d\u308c\u3067\u3082\u30c7\u30fc\u30bf\u3078\u5230\u9054\u3067\u304d\u308b\u7d4c\u8def\u3092\u7dad\u6301\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3067\u306f\u3001\u3053\u306e\u7d4c\u8def\u306f\u81ea\u7136\u306b\u306f\u6b8b\u3089\u306a\u3044\u3002\u9375\u3001\u30d8\u30c3\u30c0\u30fc\u3001\u8a2d\u5b9a\u3001\u53f0\u5e33\u3001\u70b9\u691c\u3001\u79fb\u884c\u3001\u9000\u5f79\u3092\u610f\u56f3\u7684\u306b\u7ba1\u7406\u3057\u3066\u521d\u3081\u3066\u6b8b\u308b\u3002<\/p>\n<p>\u3057\u305f\u304c\u3063\u3066\u3001\u672c\u7a3f\u306e\u7d50\u8ad6\u306f\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u5b89\u5168\u306b\u4f5c\u308b\u305f\u3081\u306b\u306f cryptsetup \u306e\u4f7f\u3044\u65b9\u3092\u899a\u3048\u308c\u3070\u3088\u3044\u3001\u3068\u3044\u3046\u3082\u306e\u3067\u306f\u306a\u3044\u3002\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u9577\u671f\u904b\u7528\u3059\u308b\u306b\u306f\u3001\u6697\u53f7\u5316\u3001\u89e3\u9664\u3001\u78ba\u8a8d\u3001\u70b9\u691c\u3001\u79fb\u884c\u3001\u5fa9\u65e7\u3001\u9000\u5f79\u3092\u4e00\u3064\u306e\u904b\u7528\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u3068\u3057\u3066\u8a2d\u8a08\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u6700\u65b0\u65b9\u5f0f\u3092\u63a1\u7528\u3059\u308b\u3053\u3068\u306f\u51fa\u767a\u70b9\u3067\u3042\u308a\u3001\u6700\u7d42\u76ee\u7684\u3067\u306f\u306a\u3044\u3002\u6700\u7d42\u76ee\u7684\u306f\u3001\u5c06\u6765\u306e\u3042\u308b\u6642\u70b9\u3067\u3001\u5bfe\u8c61\u3092\u53d6\u308a\u9055\u3048\u305a\u3001\u6b63\u3057\u3044\u89e3\u9664\u624b\u6bb5\u3092\u4f7f\u3044\u3001\u5fc5\u8981\u306a\u30c7\u30fc\u30bf\u3092\u8aad\u307f\u53d6\u308a\u3001\u5fc5\u8981\u306a\u3089\u65b0\u3057\u3044\u69cb\u6210\u3078\u79fb\u3057\u3001\u5f79\u5272\u3092\u7d42\u3048\u305f\u53e4\u3044\u69cb\u6210\u3092\u5b89\u5168\u306b\u9589\u3058\u3089\u308c\u308b\u72b6\u614b\u3092\u7dad\u6301\u3059\u308b\u3053\u3068\u3067\u3042\u308b\u3002\u3053\u308c\u304c\u3001\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u3092\u9577\u671f\u904b\u7528\u3059\u308b\u305f\u3081\u306e\u8a2d\u8a08\u3067\u3042\u308a\u3001cryptsetup \u624b\u9806\u3092\u624b\u9806\u66f8\u3068\u3057\u3066\u6b8b\u3059\u672c\u8cea\u7684\u306a\u7406\u7531\u3067\u3042\u308b\u3002<\/p>\n<hr>\n<h2>\u53c2\u8003\u6587\u732e<\/h2>\n<ol>\n<li id=\"ref1\">id774, \u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u3092\u9577\u671f\u904b\u7528\u3059\u308b\u305f\u3081\u306e\u8a2d\u8a08\uff082026-05-30\uff09. <a href=\"https:\/\/blog.id774.net\/entry\/2026\/05\/30\/4818\/\">https:\/\/blog.id774.net\/entry\/2026\/05\/30\/4818\/<\/a><\/li>\n<li id=\"ref2\">cryptsetup project, cryptsetup. <a href=\"https:\/\/gitlab.com\/cryptsetup\/cryptsetup\">https:\/\/gitlab.com\/cryptsetup\/cryptsetup<\/a><\/li>\n<li id=\"ref3\">Linux Kernel Documentation, dm-crypt. <a href=\"https:\/\/docs.kernel.org\/admin-guide\/device-mapper\/dm-crypt.html\">https:\/\/docs.kernel.org\/admin-guide\/device-mapper\/dm-crypt.html<\/a><\/li>\n<li id=\"ref4\">man7.org, cryptsetup(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup.8.html<\/a><\/li>\n<li id=\"ref5\">Arch manual pages, cryptsetup(8). <a href=\"https:\/\/man.archlinux.org\/man\/cryptsetup.8\">https:\/\/man.archlinux.org\/man\/cryptsetup.8<\/a><\/li>\n<li id=\"ref6\">Debian manpages, cryptsetup(8). <a href=\"https:\/\/manpages.debian.org\/stretch\/cryptsetup-bin\/cryptsetup.8.en.html\">https:\/\/manpages.debian.org\/stretch\/cryptsetup-bin\/cryptsetup.8.en.html<\/a><\/li>\n<li id=\"ref7\">Red Hat Documentation, Encrypting block devices using LUKS. <a href=\"https:\/\/docs.redhat.com\/en\/documentation\/red_hat_enterprise_linux\/9\/html\/security_hardening\/encrypting-block-devices-using-luks_security-hardening\">https:\/\/docs.redhat.com\/en\/documentation\/red_hat_enterprise_linux\/9\/html\/security_hardening\/encrypting-block-devices-using-luks_security-hardening<\/a><\/li>\n<li id=\"ref8\">cryptsetup Wiki, Frequently Asked Questions. <a href=\"https:\/\/gitlab.com\/cryptsetup\/cryptsetup\/-\/wikis\/FrequentlyAskedQuestions\">https:\/\/gitlab.com\/cryptsetup\/cryptsetup\/-\/wikis\/FrequentlyAskedQuestions<\/a><\/li>\n<li id=\"ref9\">cryptsetup Wiki, LUKS standard on-disk format specification version 1.2.1. <a href=\"https:\/\/gitlab.com\/cryptsetup\/cryptsetup\/-\/wikis\/LUKS-standard\/on-disk-format.pdf\">https:\/\/gitlab.com\/cryptsetup\/cryptsetup\/-\/wikis\/LUKS-standard\/on-disk-format.pdf<\/a><\/li>\n<li id=\"ref10\">cryptsetup Wiki, LUKS2 On-Disk Format Specification. <a href=\"https:\/\/gitlab.com\/cryptsetup\/LUKS2-docs\/-\/blob\/main\/luks2_doc_wip.pdf\">https:\/\/gitlab.com\/cryptsetup\/LUKS2-docs\/-\/blob\/main\/luks2_doc_wip.pdf<\/a><\/li>\n<li id=\"ref11\">man7.org, cryptsetup-open(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup-open.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup-open.8.html<\/a><\/li>\n<li id=\"ref12\">man7.org, mke2fs(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/mke2fs.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/mke2fs.8.html<\/a><\/li>\n<li id=\"ref13\">man7.org, cryptsetup-close(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup-close.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup-close.8.html<\/a><\/li>\n<li id=\"ref14\">man7.org, lsblk(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/lsblk.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/lsblk.8.html<\/a><\/li>\n<li id=\"ref15\">man7.org, blkid(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/blkid.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/blkid.8.html<\/a><\/li>\n<li id=\"ref16\">man7.org, cryptsetup-luksRemoveKey(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup-luksRemoveKey.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup-luksRemoveKey.8.html<\/a><\/li>\n<li id=\"ref17\">systemd, crypttab. <a href=\"https:\/\/www.freedesktop.org\/software\/systemd\/man\/latest\/crypttab.html\">https:\/\/www.freedesktop.org\/software\/systemd\/man\/latest\/crypttab.html<\/a><\/li>\n<li id=\"ref18\">systemd, systemd-cryptsetup-generator. <a href=\"https:\/\/www.freedesktop.org\/software\/systemd\/man\/latest\/systemd-cryptsetup-generator.html\">https:\/\/www.freedesktop.org\/software\/systemd\/man\/latest\/systemd-cryptsetup-generator.html<\/a><\/li>\n<li id=\"ref19\">man7.org, fstab(5). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man5\/fstab.5.html\">https:\/\/man7.org\/linux\/man-pages\/man5\/fstab.5.html<\/a><\/li>\n<li id=\"ref20\">man7.org, systemd.mount(5). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man5\/systemd.mount.5.html\">https:\/\/man7.org\/linux\/man-pages\/man5\/systemd.mount.5.html<\/a><\/li>\n<li id=\"ref21\">Red Hat Documentation, The Device Mapper. <a href=\"https:\/\/docs.redhat.com\/en\/documentation\/red_hat_enterprise_linux\/7\/html\/logical_volume_manager_administration\/device_mapper\">https:\/\/docs.redhat.com\/en\/documentation\/red_hat_enterprise_linux\/7\/html\/logical_volume_manager_administration\/device_mapper<\/a><\/li>\n<li id=\"ref22\">Red Hat Documentation, Configuring and managing logical volumes. <a href=\"https:\/\/docs.redhat.com\/en\/documentation\/red_hat_enterprise_linux\/8\/html-single\/configuring_and_managing_logical_volumes\/index\">https:\/\/docs.redhat.com\/en\/documentation\/red_hat_enterprise_linux\/8\/html-single\/configuring_and_managing_logical_volumes\/index<\/a><\/li>\n<li id=\"ref23\">man7.org, e2fsck(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/e2fsck.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/e2fsck.8.html<\/a><\/li>\n<li id=\"ref24\">man7.org, fsck(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/fsck.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/fsck.8.html<\/a><\/li>\n<li id=\"ref25\">smartmontools, smartmontools. <a href=\"https:\/\/www.smartmontools.org\/\">https:\/\/www.smartmontools.org\/<\/a><\/li>\n<li id=\"ref26\">NIST, FIPS 197, Advanced Encryption Standard (AES). <a href=\"https:\/\/csrc.nist.gov\/pubs\/fips\/197\/final\">https:\/\/csrc.nist.gov\/pubs\/fips\/197\/final<\/a><\/li>\n<li id=\"ref27\">NIST, SP 800-38A, Recommendation for Block Cipher Modes of Operation. <a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/38\/a\/final\">https:\/\/csrc.nist.gov\/pubs\/sp\/800\/38\/a\/final<\/a><\/li>\n<li id=\"ref28\">NIST, SP 800-38E, Recommendation for Block Cipher Modes of Operation: The XTS-AES Mode for Confidentiality on Storage Devices. <a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/38\/e\/final\">https:\/\/csrc.nist.gov\/pubs\/sp\/800\/38\/e\/final<\/a><\/li>\n<li id=\"ref29\">IETF, RFC 8018, PKCS #5: Password-Based Cryptography Specification Version 2.1. <a href=\"https:\/\/datatracker.ietf.org\/doc\/html\/rfc8018\">https:\/\/datatracker.ietf.org\/doc\/html\/rfc8018<\/a><\/li>\n<li id=\"ref30\">IETF, RFC 9106, Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work Applications. <a href=\"https:\/\/datatracker.ietf.org\/doc\/rfc9106\/\">https:\/\/datatracker.ietf.org\/doc\/rfc9106\/<\/a><\/li>\n<li id=\"ref31\">NIST, Proposal to Update SP 800-38E. <a href=\"https:\/\/csrc.nist.gov\/News\/2023\/proposal-to-update-sp-800-38e\">https:\/\/csrc.nist.gov\/News\/2023\/proposal-to-update-sp-800-38e<\/a><\/li>\n<li id=\"ref32\">NIST, SP 800-57 Part 1 Rev. 5, Recommendation for Key Management. <a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/57\/pt1\/r5\/final\">https:\/\/csrc.nist.gov\/pubs\/sp\/800\/57\/pt1\/r5\/final<\/a><\/li>\n<li id=\"ref33\">NIST, SP 800-131A, Transitioning the Use of Cryptographic Algorithms and Key Lengths. <a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/131\/a\/r2\/final\">https:\/\/csrc.nist.gov\/pubs\/sp\/800\/131\/a\/r2\/final<\/a><\/li>\n<li id=\"ref34\">TrueCrypt Foundation, TrueCrypt User Guide. <a href=\"https:\/\/garykessler.net\/library\/crypto\/TrueCrypt%20User%20Guide.pdf\">https:\/\/garykessler.net\/library\/crypto\/TrueCrypt%20User%20Guide.pdf<\/a><\/li>\n<li id=\"ref35\">BSI, Security Analysis of TrueCrypt. <a href=\"https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/EN\/BSI\/Publications\/Studies\/Truecrypt\/Truecrypt.html\">https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/EN\/BSI\/Publications\/Studies\/Truecrypt\/Truecrypt.html<\/a><\/li>\n<li id=\"ref36\">BSI, Security Analysis of TrueCrypt PDF. <a href=\"https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/EN\/BSI\/Publications\/Studies\/Truecrypt\/Truecrypt.pdf?__blob=publicationFile&amp;v=2\">https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/EN\/BSI\/Publications\/Studies\/Truecrypt\/Truecrypt.pdf?__blob=publicationFile=2<\/a><\/li>\n<li id=\"ref37\">NCC Group, Truecrypt Phase Two Audit Announced. <a href=\"https:\/\/cryptoservices.github.io\/blog\/2015-02-18-truecrypt-phase-two\/\">https:\/\/cryptoservices.github.io\/blog\/2015-02-18-truecrypt-phase-two\/<\/a><\/li>\n<li id=\"ref38\">man7.org, cryptsetup-tcryptDump(8). <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup-tcryptDump.8.html\">https:\/\/man7.org\/linux\/man-pages\/man8\/cryptsetup-tcryptDump.8.html<\/a><\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>\u6697\u53f7\u5316\u30c7\u30d0\u30a4\u30b9\u306e\u904b\u7528\u306f\u3001\u6697\u53f7\u5316\u9818\u57df\u3092\u4e00\u5ea6\u4f5c\u6210\u3057\u3066\u7d42\u308f\u308b\u4f5c\u696d\u3067\u306f\u306a\u3044\u3002\u6697\u53f7\u5316\u9818\u57df\u306f\u3001\u4f5c\u6210\u3057\u305f\u77ac\u9593\u306b\u306f\u6b63\u3057\u304f\u898b\u3048\u3066\u3082\u3001\u6642\u9593\u304c\u7d4c\u3064\u306b\u3064\u308c\u3066\u3001\u5a92\u4f53\u306e\u52a3\u5316\u3001 OS \u306e\u66f4\u65b0\u3001 cryptsetup \u306e\u4ed5\u69d8\u5909\u66f4\u3001\u6697\u53f7\u65b9\u5f0f\u306e\u4e16\u4ee3\u4ea4\u4ee3\u3001\u9375 &#8230; <a title=\"\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u904b\u7528\u624b\u9806\u3092\u6574\u7406\u3059\u308b\" class=\"read-more\" href=\"https:\/\/blog.id774.net\/entry\/2026\/05\/31\/4829\/\" aria-label=\"\u6697\u53f7\u5316\u30c7\u30a3\u30b9\u30af\u904b\u7528\u624b\u9806\u3092\u6574\u7406\u3059\u308b \u306b\u3064\u3044\u3066\u3055\u3089\u306b\u8aad\u3080\">\u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33,31,14],"tags":[],"class_list":["post-4829","post","type-post","status-publish","format-standard","hentry","category-cryptography","category-resilience","category-tech"],"_links":{"self":[{"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/posts\/4829","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/comments?post=4829"}],"version-history":[{"count":1,"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/posts\/4829\/revisions"}],"predecessor-version":[{"id":4830,"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/posts\/4829\/revisions\/4830"}],"wp:attachment":[{"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/media?parent=4829"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/categories?post=4829"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.id774.net\/entry\/wp-json\/wp\/v2\/tags?post=4829"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}