encrypted fylesystem

depois de arrancar com uma live distro do debian:

sudo -s
apt install linux-headers-$(uname -r) zfs-dkms
zpool export -a
zpool import -N -R /mnt rpool
zpool import -N -R /mnt bpool
zfs load-key -a
zfs mount rpool/ROOT/debian
zfs mount bpool/BOOT/debian
zfs mount -a


de seguida montar os sistemas de ficheiros essenciais para o chroot fazer o chroot:
for i in proc sys dev run tmp; do mount -o bind /$i /mnt/$i; done
chroot /mnt /bin/bash --login
mount -a


Preparation

Prepare a mount point for your data and change ownership.
# Create a mount point
sudo mkdir /media/cryptoUSB
# Set permissions for the owner
sudo chown stefan:stefan /media/cryptoUSB

Create an Encrypted Device

Encrypt the device with LUKS. Note that all data on the partition will be overwritten during this process.
# Create encrypted device
sudo cryptsetup --verify-passphrase luksFormat /dev/sdX -c aes -s 256 -h sha256

apt-get install cryptsetup
vgscan
vgchange -a y vg00
lvscan
mkdir /media/home
cryptsetup luksOpen /dev/vg00/home home_antigo
ls /dev/mapper
mount /dev/mapper/home_antigo /media/home

logical volume - /dev/vg00/home
luks_device - vg00-home_crypt
filesystem - /dev/mapper/vg00-home_crypt

#lvresize -L +50G /dev/vg00/home
#cryptsetup resize vg00-home_crypt
#resize2fs /dev/mapper/vg00-home_crypt


lvextend -l +1221 /dev/vg00/home

http://tofu.org/drupal/node/71