Disk encryption and working with encryption at rest

Here, we're going to take a look at using dm-crypt to encrypt our disk so that the data on the device is safe when removed from a machine. We'll touch on file encryption locally, too.

Getting ready

In this section, we're going to use both our sdb drives.

If you have rebuilt your VM, have a go at the previous sections to end up with a drive that has a simple filesystem atop a partition.

On your VM, first, make sure that any fstab entries you've added are removed; for me, this was a case of running the following sed command:

$ sudo sed -i 's#UUID=10572fe4-5f65-4df0-9e69-dcd885e9f01e /opt ext4 defaults 0 0##g' /etc/fstab

I then rebooted my system...