Teach mount(8) to mount LUKS containers directly
Building on the technique pioneered by Tobias
Kienzler, luks-mount extends
mount command so it can mount LUKS volumes directly, handling all the
cryptsetup work itself.
In other words, this:
cryptsetup luksOpen /dev/mapper/somevg-somevol somevol mount /dev/mapper/somevol /some/mountpoint
Becomes simplified to:
mount /dev/mapper/somevg-somevol /some/mountpoint
Once you've added an entry to
UUID=... /some/mountpoint crypto_LUKS defaults,noauto 0 1
luks-mount is meant to be complementary to
If you want to unlock an encrypted volume at boot and have it stay unlocked,
crypttab handle that for you.
On the other hand, if you want to mount an encrypted volume on demand — and unmount it when you're done with it so it stays safe — that's where luks-mount can help. By default, 15 minutes after you mount a LUKS volume, luks-mount will begin to monitor the mount point and wait for you to finish using it. As soon as it's no longer in use, luks-mount will unmount the encrypted volume and automatically close it for you.
sudo add-apt-repository ppa:mkropat/ppa sudo apt-get update sudo apt-get install luks-mount
git clone https://github.com/mkropat/luks-mount.git cd luks-mount make deb sudo dpkg -i luks-mount*all.deb sudo apt-get install -f # if there were missing dependencies
git clone https://github.com/mkropat/luks-mount.git cd luks-mount make && sudo make install