[3.磁盤加密]
1.磁盤加密
fdisk /dev/vdb
partprobe
cryptsetup luksFormat /dev/vdb1 **加密/dev/vdb1磁盤
cryptsetup open /dev/vdb1 redhat **開啓磁盤
mkfs.xfs /dev/mapper/redhat **格式化
mount /dev/mapper/redhat /mnt/ **將/dev/mapper/redhat掛載到/mnt
umount /mnt/ **卸載
cryptsetup close redhat **關閉redhat
2.加密磁盤永久掛載
vim /etc/crypttab **加密配置文件
[root@localhost ~]# cat /etc/crypttab
redaht /dev/vdb1 /root/lukspsfile
解密後設備管理文件 設備 加密字符
vim /root/lukspsfile **加密密碼配置
[root@localhost ~]# cat /root/lukspsfile
kile2583
chmod 600 /root/lukspsfile
cryptsetup luksAddKey /dev/vdb1 /root/lukspsfile **將/root/lukspsfile中的密碼應用到/dev/vdb1磁盤上
vim /etc/fstab **設置開機啓動的配置
[root@localhost ~]# cat /etc/fstab
/dev/mapper/redhat /mnt xfs defaults 0 0
reboot **重啓
[root@localhost mnt]# df **查看是否永久掛載
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/vda1 10473900 3124648 7349252 30% /
devtmpfs 927072 0 927072 0% /dev
tmpfs 942660 140 942520 1% /dev/shm
tmpfs 942660 17024 925636 2% /run
tmpfs 942660 0 942660 0% /sys/fs/cgroup
/dev/mapper/redhat 1043116 32932 1010184 4% /mnt
3.加密清除
vim /etc/fstab
> /etc/crypttab **清空/etc/crypttab文件信息
rm -rf /root/lukspsfile **刪除/root/lukspsfile
umount /mnt/ **卸載
cryptsetup close redhat **關閉磁盤
mkfs.xfs /dev/vdb1 -f **強制格式化
4.磁盤列陣
fdisk /dev/vdb **創建3個分區（fd）
Device Boot Start End Blocks Id System
/dev/vdb1 2048 2099199 1048576 fd Linux raid autodetect
/dev/vdb2 2099200 4196351 1048576 fd Linux raid autodetect
/dev/vdb3 4196352 6293503 1048576 fd Linux raid auto
partprobe **磁盤同步
cat /proc/partitions
ll /dev/md0
mdadm -C /dev/md0 -a yes -l 1 -n 2 -x 1 /dev/vdb{1..3}
mkfs.xfs /dev/md0
mount /dev/md0 /mnt
mdadm -f /dev/md0 /dev/vdb1 **破壞磁盤
mdadm -r /dev/md0 /dev/vdb1 **刪除磁盤（若正使用中需先卸載在刪除）
mdadm -a /dev/md0 /dev/vdb1 **添加新磁盤
mdadm -D /dev/md0 **查看正運行磁盤
mdadm -f /dev/md0 /dev/vdb1
mdadm -f /dev/md0 /dev/vdb2
mdadm -r /dev/md0 /dev/vdb1
mdadm -r /dev/md0 /dev/vdb2
umount /mnt/
[root@localhost mnt]# df
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/vda1 10473900 3124776 7349124 30% /
devtmpfs 927072 0 927072 0% /dev
tmpfs 942660 140 942520 1% /dev/shm
tmpfs 942660 17092 925568 2% /run
tmpfs 942660 0 942660 0% /sys/fs/cgroup
mdadm -S /dev/md0
然後要取消直接刪除vdb1 vdb2 vdb3
watch -n 1 cat /proc/mdstat **監控命令
[5.配額]
mount -o usrquota /dev/vdb1 /pub/
quotaon -uv /dev/vdb1
su - student
dd if=/dev/zero of=/pub/file bs=1M count=500
{1.lvm}
[1.lvm建立]
1.劃分物理分區並把分區id修改爲8e
pvs|pvdisplay
vgs|vgdisplay
lvs|lvdisplay
watch -n 1 'echo "=== pvinfo ===";pvs;echo "=== vginfo ===";vgs;echo "=== lvinfo ===";lvs'
pvcreate /dev/vdb1
vgcreate westos /dev/vdb1
lvcreate -L 100M -n lv0 westos
mkfs.xfs /dev/westos/lv0
mount /dev/westos/lv0 /mnt/
磁盤不夠用，再增加一塊：
lvextend -L 200 /dev/westos/lv0
mkfs.xfs /dev/westos/lv0
pvcreate /dev/vdb2
vgcreate westos /dev/vdb1
lvcreate -L 600M -n lv0 westos
xfs_growfs /dev/westos/lv0