{"id":35652,"date":"2019-10-31T22:05:33","date_gmt":"2019-10-31T19:05:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/rasshifrovka-luks-kontejnera-v-moment-zagruzki-sistemy\/"},"modified":"2019-10-31T22:05:33","modified_gmt":"2019-10-31T19:05:33","slug":"rasshifrovka-luks-kontejnera-v-moment-zagruzki-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rasshifrovka-luks-kontejnera-v-moment-zagruzki-sistemy","title":{"rendered":"Dekodimi i kontejnerit LUKS n\u00eb momentin e ngarkes\u00ebs s\u00eb sistemit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

T\u00eb gjith\u00ebve nj\u00eb dit\u00eb t\u00eb mbar\u00eb, nat\u00eb! Ky postim do t\u00eb jet\u00eb i dobish\u00ebm p\u00ebr ata q\u00eb p\u00ebrdorin enkriptimin e t\u00eb dh\u00ebnave LUKS dhe duan t\u00eb kryejn\u00eb dekodimin e disqeve n\u00ebn Linux (Debian, Ubuntu) n\u00eb faz\u00ebn e dekodimit t\u00eb seksionit root<\/b>. Dhe nuk kam arritur t\u00eb gjej nj\u00eb informacion t\u00eb till\u00eb n\u00eb internet.<\/p>\n

S\u00eb fundmi, me rritjen e numrit t\u00eb disqeve n\u00eb raft, u p\u00ebrballa me problemin e dekodimit t\u00eb disqeve duke p\u00ebrdorur metod\u00ebn e njohur p\u00ebrmes \/etc\/crypttab. Personalish, shoh disa probleme me p\u00ebrdorimin e k\u00ebsaj metode, konkretisht se ky skedar lexohen vet\u00ebm pas ngarkes\u00ebs (mount) s\u00eb seksionit root<\/b>, gj\u00eb q\u00eb ndikon negativisht n\u00eb importimin e ZFS, ve\u00e7an\u00ebrisht n\u00ebse ato jan\u00eb nd\u00ebrtuar nga seksione n\u00eb pajisjen *_crypt, ose raid mdadm gjithashtu t\u00eb nd\u00ebrtuara nga seksione. Ne t\u00eb gjith\u00eb e dim\u00eb se mund t\u00eb p\u00ebrdorim parted n\u00eb kontejner\u00ebt LUKS?<\/i> Dhe gjithashtu problemi i fillimit t\u00eb hersh\u00ebm t\u00eb sh\u00ebrbimeve t\u00eb tjera, kur masivat ende nuk ekzistojn\u00eb, por t\u00eb p\u00ebrdor\u00eb<\/b> m\u00eb duhet tashm\u00eb (punoj me Proxmox VE 5.x t\u00eb klustruar dhe ZFS mbi iSCSI).<\/p>\n

Pak p\u00ebr ZFS over iSCSI<\/b>iSCSI funksionon p\u00ebr mua p\u00ebrmes LIO, dhe realisht kur niset iscsi-target dhe nuk sheh pajisjet ZVOL, ato thjesht i heq nga konfigurimi, e cila nuk i lejon sistemet mysafire t\u00eb ngarkohen. Nga kjo, ose rikthimi i nj\u00eb b\u00ebrthame json skedari, ose shtimi manual i pajisjeve me identifikator\u00ebt e \u00e7do VM, q\u00eb \u00ebsht\u00eb v\u00ebrtet tmerr, kur ka dhjet\u00ebra makina dhe n\u00eb konfigurimin e secil\u00ebs m\u00eb shum\u00eb se 1 disk.<\/p>\n

Dhe pyetja e dyt\u00eb q\u00eb do t\u00eb shqyrtoj, \u00ebsht\u00eb se me \u00e7far\u00eb do t\u00eb b\u00ebhet dekodimi (ky \u00ebsht\u00eb nj\u00eb pik\u00eb ky\u00e7e e artikullit). Dhe p\u00ebr k\u00ebt\u00eb do t\u00eb flasim m\u00eb posht\u00eb, hyni n\u00eb n\u00ebnkategori!
\n<\/a><\/noindex>
\nM\u00eb shpesh n\u00eb hap\u00ebsirat e internetit p\u00ebrdoren \u00e7el\u00ebsat e skedarit (natyrisht t\u00eb shtuar m\u00eb par\u00eb n\u00eb slotin me komand\u00ebn \u2014 cryptsetup luksAddKey), ose n\u00eb raste t\u00eb rralla (n\u00eb internetin n\u00eb gjuh\u00ebn ruse ka informacion t\u00eb kufizuar) \u2014 skripti decrypt_derived, q\u00eb ndodhet n\u00eb \/lib\/cryptsetup\/script\/ (sigurisht, ka edhe m\u00ebnyra t\u00eb tjera, por un\u00eb kam p\u00ebrdorur k\u00ebto dy, q\u00eb i hodha n\u00eb baz\u00eb t\u00eb artikullit). Po ashtu, synoja nj\u00eb aktivizim t\u00eb plot\u00eb autonom pas rinisjeve, pa asnj\u00eb komand\u00eb shtes\u00eb n\u00eb konsol\u00eb, q\u00eb gjith\u00e7ka t\u00eb \"fluturoj\u00eb\" menj\u00ebher\u00eb. Prandaj, pse t\u00eb presim? \u2014 <\/p>\n

Le t\u00eb fillojm\u00eb!<\/p>\n

Supozoni nj\u00eb sistem, p\u00ebr shembull Debian, i instaluar n\u00eb ndarjen e kriptuar sda3_crypt dhe dhjet\u00eb disqe t\u00eb gatshme p\u00ebr kriptim dhe krijimin e \u00e7far\u00ebdo q\u00eb d\u00ebshiron. Ne kemi nj\u00eb fraz\u00eb ky\u00e7e (passphrase) p\u00ebr t\u00eb \u00e7elur sda3_crypt dhe pik\u00ebrisht nga kjo ndarje do t\u00eb marrim \"hash\" nga fjal\u00ebkalimi dhe do ta shtojm\u00eb n\u00eb disqet e tjera. \u00cbsht\u00eb shum\u00eb e thjesht\u00eb, n\u00eb konsol\u00eb zbatojm\u00eb:<\/p>\n

\/lib\/cryptsetup\/scripts\/decrypt_derived sda3_crypt | cryptsetup luksFormat \/dev\/sdX<\/code><\/pre>\n
\nku X jan\u00eb disk\u00ebt tan\u00eb, ndarjet etj.<\/p>\n
Pas kriptimit t\u00eb disqeve me \"hash\" nga fraza jon\u00eb ky\u00e7e, \u00ebsht\u00eb e nevojshme t\u00eb dihet UUID ose ID - sipas asaj \u00e7far\u00eb preferon kush. Marrim t\u00eb dh\u00ebnat nga \/dev\/disk\/by-uuid dhe by-id p\u00ebrkat\u00ebsisht.<\/p>\n
Hapi tjet\u00ebr \u00ebsht\u00eb p\u00ebrgatitja e skedave dhe mini-skripteve p\u00ebr funksionet q\u00eb na nevojiten, le t\u00eb fillojm\u00eb:<\/p>\n
cp -p \/usr\/share\/initramfs-tools\/hooks\/cryptroot \/etc\/initramfs-tools\/hooks\/\ncp -p \/usr\/share\/initramfs-tools\/scripts\/local-top\/cryptroot \/etc\/initramfs-tools\/scripts\/local-top\/<\/code><\/pre>\n
\nm\u00eb pas<\/p>\n
touch \/etc\/initramfs-tools\/hooks\/decrypt && chmod +x \/etc\/initramfs-tools\/hooks\/decrypt<\/code><\/pre>\n
\nP\u00ebrmbajtja e ..\/decrypt<\/b><\/p>\n
#!\/bin\/sh\n\ncp -p \/lib\/cryptsetup\/scripts\/decrypt_derived \"$DESTDIR\/bin\/decrypt_derived\"<\/code><\/pre>\n
m\u00eb pas<\/p>\n
touch \/etc\/initramfs-tools\/hooks\/partcopy && chmod +x \/etc\/initramfs-tools\/hooks\/partcopy<\/code><\/pre>\n
\nP\u00ebrmbajtja e ..\/partcopy<\/b><\/p>\n
#!\/bin\/sh\n\ncp -p \/sbin\/partprobe \"$DESTDIR\/bin\/partprobe\"\ncp -p \/lib\/x86_64-linux-gnu\/libparted.so.2 \"$DESTDIR\/lib\/x86_64-linux-gnu\/libparted.so.2\"\ncp -p \/lib\/x86_64-linux-gnu\/libreadline.so.7 \"$DESTDIR\/lib\/x86_64-linux-gnu\/libreadline.so.7\"<\/code><\/pre>\n
pak m\u00eb shum\u00eb<\/p>\n
touch \/etc\/initramfs-tools\/scripts\/local-bottom\/partprobe && chmod +x \/etc\/initramfs-tools\/scripts\/local-bottom\/partprobe<\/code><\/pre>\n
\nP\u00ebrmbajtja e ..\/partprobe<\/b><\/p>\n
#!\/bin\/sh\n\n$DESTDIR\/bin\/partprobe<\/code><\/pre>\n
dhe e fundit, para update-initramfs, duhet t\u00eb redaktohet skedari \/etc\/initramfs-tools\/scripts\/local-top\/cryptroot, duke filluar nga rreshti ~360, pjesa e kodit m\u00eb posht\u00eb<\/p>\n
Originali<\/b><\/p>\n
\n                # decrease $count by 1, apparently last try was successful.\n                count=$(( $count - 1 ))\n                \n                message \"cryptsetup ($crypttarget): set up successfully\"\n                break\n<\/code><\/pre>\n
dhe e \u00e7ojm\u00eb n\u00eb k\u00ebt\u00eb form\u00eb<\/p>\n
E redaktuar<\/b><\/p>\n
\n                # decrease $count by 1, apparently last try was successful.\n                count=$(( $count - 1 ))\n                \n\n                \/bin\/decrypt_derived $crypttarget | cryptsetup luksOpen \/dev\/disk\/by-uuid\/ *CRYPT_MAP*\n                \/bin\/decrypt_derived $crypttarget | cryptsetup luksOpen \/dev\/disk\/by-id\/ *CRYPT_MAP*\n\n                message \"cryptsetup ($crypttarget): set up successfully\"\n                break<\/code><\/pre>\n
Vini re se k\u00ebtu mund t\u00eb p\u00ebrdoret ose UUID ose ID. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb q\u00eb driver\u00ebt e nevojsh\u00ebm p\u00ebr pajisjet HDD\/SSD t\u00eb jen\u00eb shtuar n\u00eb \/etc\/initramfs-tools\/modules. Mund t\u00eb m\u00ebsoni driverin q\u00eb po p\u00ebrdoret me komand\u00ebn udevadm info -a -n \/dev\/sdX | egrep 'looking|DRIVER'<\/i>.<\/p>\n
Tani, kur kemi p\u00ebrfunduar dhe t\u00eb gjitha skedat jan\u00eb n\u00eb vend, fillojm\u00eb update-initramfs -u -k all -v<\/i>, n\u00eb regjistrim nuk duhet t\u00eb ket\u00eb<\/b> gabime n\u00eb ekzekutimin e skripteve tona. Rindiznim, futim fraz\u00ebn ky\u00e7e dhe presim pak, n\u00eb var\u00ebsi t\u00eb numrit t\u00eb disqeve. M\u00eb pas sistemi do t\u00eb niset dhe n\u00eb faz\u00ebn p\u00ebrfundimtare t\u00eb nisjes, pik\u00ebrisht pas \"mounting\" t\u00eb ndarjes root, do t\u00eb ekzekutohet komanda partprobe - ajo do t\u00eb gjej\u00eb dhe do t\u00eb lidh\u00eb t\u00eb gjitha ndarjet e krijuara n\u00eb pajisjet LUKS dhe \u00e7do masiv, qoft\u00eb ZFS apo mdadm do t\u00eb r\u00e9unoheshin pa probleme! Dhe gjith\u00eb kjo para ngarkimit<\/b> sl\u00ebvizjeve dhe sh\u00ebrbimeve kryesore, t\u00eb cilat k\u00ebrkojn\u00eb k\u00ebto disqe\/masive.<\/p>\n
update1<\/b>: Si v\u00ebrejta<\/a><\/noindex> AEP<\/a><\/noindex>, kjo m\u00ebnyr\u00eb funksionon vet\u00ebm p\u00ebr LUKS1.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u0441\u0435\u043c \u0434\u043e\u0431\u0440\u043e\u0433\u043e \u0434\u043d\u044f, \u043d\u043e\u0447\u0438! \u042d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u0435\u043d \u0442\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 LUKS \u0438 \u0445\u043e\u0447\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c decrypt\u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u0434\u0438\u0441\u043a\u043e\u0432 \u043f\u043e\u0434 Linux (Debian, Ubuntu) \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 root \u0440\u0430\u0437\u0434\u0435\u043b\u0430. \u0418 \u0442\u0430\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u044f \u043d\u0430\u0439\u0442\u0438 \u043d\u0435 \u0441\u043c\u043e\u0433. \u0421\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0441 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0434\u0438\u0441\u043a\u043e\u0432 \u0432 \u043f\u043e\u043b\u043a\u0430\u0445, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0434\u0438\u0441\u043a\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35652","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dekryptimi i kontenierit LUKS gjat\u00eb ngarkimit t\u00eb sistemit | ProHoster","description":"T\u00eb gjith\u00ebve nj\u00eb dit\u00eb dhe nat\u00eb t\u00eb mbar\u00eb! Ky postim do t\u00eb jet\u00eb i dobish\u00ebm p\u00ebr ata q\u00eb p\u00ebrdorin enkriptimin e t\u00eb dh\u00ebnave LUKS dhe duan t\u00eb kryejn\u00eb dekryptimin e disk\u00ebve n\u00ebn Linux (Debian, Ubuntu) n\u00eb faz\u00ebn e dekryptimit t\u00eb pjes\u00ebs root.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rasshifrovka-luks-kontejnera-v-moment-zagruzki-sistemy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0430 LUKS \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u0434\u043e\u0431\u0440\u043e\u0433\u043e \u0434\u043d\u044f, \u043d\u043e\u0447\u0438! \u042d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u0435\u043d \u0442\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 LUKS \u0438 \u0445\u043e\u0447\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c decrypt\u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u0434\u0438\u0441\u043a\u043e\u0432 \u043f\u043e\u0434 Linux (Debian, Ubuntu) \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 root \u0440\u0430\u0437\u0434\u0435\u043b\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/rasshifrovka-luks-kontejnera-v-moment-zagruzki-sistemy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:33+00:00","article:modified_time":"2019-10-31T19:05:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35652","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:12:43","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:58:29","updated":"2026-01-22 00:12:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35652","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=35652"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35652\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=35652"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=35652"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=35652"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}