mirror of
https://github.com/LCTT/TranslateProject.git
synced 2025-01-25 23:11:02 +08:00
Merge pull request #7810 from Auk7F7/patch-4
20180214 How to Encrypt Files with Tomb on Ubuntu 16.04 LTS.md
This commit is contained in:
Xingyu.Wang
GitHub
commit
16cb3e86e2
@ -1,259 +0,0 @@
|
||||
translating by Auk7F7
|
||||
|
||||
How to Encrypt Files with Tomb on Ubuntu 16.04 LTS
|
||||
==================================================
|
||||
|
||||
Most people regard file encryption as a necessity nowadays, even on Linux systems. If, like me, you were originally attracted to Ubuntu because of the enhanced security of Linux systems, I’m afraid I’ve got bad news for you: Linux has become a victim of its own success. The vast increase in the number of users over recent years has led to attacks and theft on such systems growing exponentially.
|
||||
|
||||
There used to be a pretty easy solution to encrypting files on Linux systems like Ubuntu: it was called [Truecrypt](https://www.fossmint.com/secure-encrypt-files-folders-with-truecrypt-in-linux/). Up until 2015, it offered varying levels of military-grade encryption, and worked well with most Linux systems. Unfortunately, it has since been discontinued, and has therefore become pretty insecure.
|
||||
|
||||
### The Alternatives
|
||||
|
||||
Luckily, there are a few alternatives to Truecrypt. The direct successor of Truecrypt was [Veracrypt](https://www.fossmint.com/veracrypt-is-a-secure-alternative-encryption-tool-to-truecrypt-for-linux/), made by a group of developers who took the source code from Truecrypt and kept it updated.
|
||||
|
||||
The project has since grown into an impressive standalone system, but is now showing its age. Old systems, and especially those that deal with security, can only be updated so many times without introducing vulnerabilities.
|
||||
|
||||
For this reason, among many others, it’s worth looking a bit further afield for encryption software. My choice would be Tomb.
|
||||
|
||||
### Why Tomb?
|
||||
|
||||
In some ways, Tomb is pretty similar to other encryption software. It stores encrypted files in dedicated “Tomb Folders”, allowing you to quickly see which files you have encrypted.
|
||||
|
||||
It also uses a similar encryption standard to Veracrypt, [AES-256](https://www.dyne.org/software/tomb/). This standard is Applied by everyone from the NSA to Microsoft to Apple, and is regarded as one of the most secure encryption ciphers available. If you’re new to encryption, it’s worth reading a bit of [the background behind the technology](https://thebestvpn.com/advanced-encryption-standard-aes/), but if you just want fast, secure encryption, don’t worry: Tomb will deliver.
|
||||
|
||||
There are a couple of big differences with Tomb. The first is that it has been developed specifically for GNU/Linux systems, cutting out some of the compatibility issues of broader encryption software.
|
||||
|
||||
The second is that, although Tomb is open source, it makes use of statically linked libraries so that its source code is hard to audit. That means that it is not considered free by some OS distributors, but when it comes to security software this is actually a good thing: it means that Tomb is less likely to be hacked than completely “free” software.
|
||||
|
||||
Lastly, it has several advanced features like **steganography**, which allows you to hide your key files within another file. And though Tomb is primarily a command-line tool, it also comes with a GUI interface, gtomb, which allows beginners to use it graphically.
|
||||
|
||||
Sold? Well, before I take you through how to use Tomb, it’s worth noting that no encryption software can offer total protection. Tomb will not hide your online computing from your ISP, and nor does it protect files stored in the cloud. If you want to fully encrypt cloud storage, you’ll need to log into your preferred storage service using the Tor browser and a zero-logging VPN. There are plenty of options available here, but [Trust Zone](https://privacyaustralia.org/trust-zone-vpn-review/) is a good browser, and [Tinc](https://www.howtoforge.com/tutorial/how-to-properly-set-up-tinc-vpn-on-ubuntu-linux/) is a good VPN tool.
|
||||
|
||||
All that said, if you are looking for fast, easy, secure encryption for Ubuntu 16.04, Tomb is undoubtedly the way to go. Let’s get you started.
|
||||
|
||||
### Installing Tomb on Ubuntu 16.04
|
||||
|
||||
Because Tomb was made especially for Linux, install is super easy.
|
||||
|
||||
A couple of years back, the guys over at SparkyLinux (which is a pretty good Debian derivative in its own right) added Tomb to their official repositories. You can install it on your Ubuntu system by adding these repositories.
|
||||
|
||||
To do this, open a terminal and add a repository file:
|
||||
|
||||
`sudo vi /etc/apt/sources.list.d/sparky-repo.list`
|
||||
|
||||
And then add the following lines to the file:
|
||||
|
||||
```
|
||||
deb https://sparkylinux.org/repo stable main
|
||||
deb-src https://sparkylinux.org/repo stable main
|
||||
deb https://sparkylinux.org/repo testing main
|
||||
deb-src https://sparkylinux.org/repo testing main
|
||||
|
||||
```
|
||||
|
||||
Save and close that file.
|
||||
|
||||
You now need to install the Sparky public key, using either:
|
||||
|
||||
```
|
||||
sudo apt-get install sparky-keyring
|
||||
|
||||
```
|
||||
|
||||
Or:
|
||||
|
||||
```
|
||||
wget -O - https://sparkylinux.org/repo/sparkylinux.gpg.key | sudo apt-key add -
|
||||
|
||||
```
|
||||
|
||||
You then need to update your repositories, using the standard command:
|
||||
|
||||
```
|
||||
sudo apt-get update
|
||||
|
||||
```
|
||||
|
||||
And then simply install Tomb using apt:
|
||||
|
||||
```
|
||||
sudo apt-get install tomb
|
||||
|
||||
```
|
||||
|
||||
If you want the GUI, install is just as easy. Just use apt to install gtomb:
|
||||
|
||||
```
|
||||
sudo apt-get install gtomb
|
||||
|
||||
```
|
||||
|
||||
And that’s it: you should now have a working version of Tomb installed. Let’s look at how to use it.
|
||||
|
||||
### Using Tomb
|
||||
|
||||
#### Using Tomb Through The Command Line
|
||||
|
||||
Tomb is primarily a command line tool, so I’ll cover this usage first. If you are not comfortable with using a terminal, you can skip this section and look below.
|
||||
|
||||
Actually, scratch that. If you’ve never used the command line before, Tomb is a great place to start, because it uses simple commands and there is little chance of you messing something up as long as you are careful.
|
||||
|
||||
Tomb actually uses a pretty amusing set of commands, all graveyard-themed. Each encrypted folder is referred to as a “tomb”, and (as I’ll come to shortly) they can be worked with using similarly Gothic commands.
|
||||
|
||||
First, let’s make a new tomb. You can specify the name and the size of your new tomb, so let’s use “Tomb1”, and make it 100mb.
|
||||
|
||||
You need root privileges, so open a terminal and type (or copy):
|
||||
|
||||
```
|
||||
sudo tomb dig -s 100 Tomb1.tomb
|
||||
|
||||
```
|
||||
|
||||
This should give you output similar to:
|
||||
|
||||
```
|
||||
tomb . Commanded to dig tomb Tomb1.tomb
|
||||
tomb (*) Creating a new tomb in Tomb1.tomb
|
||||
tomb . Generating Tomb1.tomb of 100MiB
|
||||
100 blocks (100Mb) written.
|
||||
100+0 records in
|
||||
100+0 records out
|
||||
-rw------- 1 Tomb1 Tomb1 100M Jul 4 18:53 Tomb1.tomb
|
||||
tomb (*) Done digging Tomb1
|
||||
tomb . Your tomb is not yet ready, you need to forge a key and lock it:
|
||||
tomb . tomb forge Tomb1.tomb.key
|
||||
tomb . tomb lock Tomb1.tomb -k Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
As the output helpfully states, you now need to create a keyfile to lock your tomb:
|
||||
|
||||
```
|
||||
sudo tomb forge Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
If, at this point, you get an error that mentions “an active swap partition”, you need to deactivate all of your active swap partititions:
|
||||
|
||||
```
|
||||
sudo swapoff -a
|
||||
|
||||
```
|
||||
|
||||
And then run the keyfile command above.
|
||||
|
||||
It might take a few minutes to generate a keyfile, depending on the speed of your system. After it is done, however, you’ll be asked to enter a new password to secure the key:
|
||||
|
||||
[](https://www.howtoforge.com/images/how_to_setup_and_install_tomb_on_ubuntu_1604/big/tomb1.png)
|
||||
|
||||
Enter it twice, and your new keyfile will be made.
|
||||
|
||||
You now need to lock your tomb using your new key. You can do this like this:
|
||||
|
||||
```
|
||||
sudo tomb lock Tomb1.tomb -k Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
You will be asked to enter your password. Do this, and you should get something like the following output:
|
||||
|
||||
```
|
||||
tomb . Commanded to lock tomb Tomb1.tomb
|
||||
|
||||
[sudo] Enter password for user Tomb1 to gain superuser privileges
|
||||
|
||||
tomb . Checking if the tomb is empty (we never step on somebody else's bones).
|
||||
tomb . Fine, this tomb seems empty.
|
||||
tomb . Key is valid.
|
||||
tomb . Locking using cipher: aes-xts-plain64:sha256
|
||||
tomb . A password is required to use key Tomb1.tomb.key
|
||||
tomb . Password OK.
|
||||
tomb (*) Locking Tomb1.tomb with Tomb1.tomb.key
|
||||
tomb . Formatting Luks mapped device.
|
||||
tomb . Formatting your Tomb with Ext3/Ext4 filesystem.
|
||||
tomb . Done locking Tomb1 using Luks dm-crypt aes-xts-plain64:sha256
|
||||
tomb (*) Your tomb is ready in Tomb1.tomb and secured with key Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
Now everything is set up, you can start using your new tomb.
|
||||
|
||||
A note here: because I’m just showing you what to do, I’ve stored my key and tomb in the same directory (in this case $HOME). You shouldn’t do this – store your key somewhere else, preferably where no-one but you is going to find it.
|
||||
|
||||
You’ll need to remember where you stored it, however, because you need it to unlock your tomb. To do this, enter:
|
||||
|
||||
```
|
||||
sudo tomb open Tomb1.tomb -k path/to/your/Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
Enter your password, and you should be in. Tomb will generate something like:
|
||||
|
||||
```
|
||||
tomb (*) Success unlocking tomb Tomb1
|
||||
tomb . Checking filesystem via /dev/loop0
|
||||
fsck from util-linux 2.27.1
|
||||
Tomb1: clean, 11/25168 files, 8831/100352 blocks
|
||||
tomb (*) Success opening Tomb1.tomb on /media/Tomb1
|
||||
|
||||
```
|
||||
|
||||
And then you should see your new tomb, mounted in the finder window.
|
||||
|
||||
You can now save and open files from the tomb, but note that you will need root privileges in order to do so.
|
||||
|
||||
To unmount your tomb after you have finished using it, close it by using:
|
||||
|
||||
```
|
||||
sudo tomb close
|
||||
|
||||
```
|
||||
|
||||
Or, if you want to force close all open tombs, you can use:
|
||||
|
||||
```
|
||||
sudo tomb slam all
|
||||
|
||||
```
|
||||
|
||||
#### **Using Tomb Through The GUI**
|
||||
|
||||
If you are uncomfortable using the command line, or simply just want a graphical interface, you can use gtomb. Unlike a lot of GUI wrappers, gtomb is pretty straightforward to use.
|
||||
|
||||
Let’s look at how to set up a new tomb using gtomb. First, launch gtomb from the Menu. It will probably look like this:
|
||||
|
||||
[](https://www.howtoforge.com/images/how_to_setup_and_install_tomb_on_ubuntu_1604/big/tomb2.png)
|
||||
|
||||
Everything is pretty self-explanatory, but for the sake of completeness I’ll run through how to set up your first tomb.
|
||||
|
||||
To start, click on the first option, “dig”. Click OK, and then choose a location.
|
||||
|
||||
Next, enter the size of your tomb:
|
||||
|
||||
[](https://www.howtoforge.com/images/how_to_setup_and_install_tomb_on_ubuntu_1604/big/tomb3.png)
|
||||
|
||||
You’ve now got a new tomb, but you need to make a key before you can use it. To do this, click “forge” from the main menu:
|
||||
|
||||
[](https://www.howtoforge.com/images/how_to_setup_and_install_tomb_on_ubuntu_1604/big/tomb4.png)
|
||||
|
||||
Tomb will ask you to enter a passcode twice, so do that.
|
||||
|
||||
Then lock your tomb using the key by clicking, you’ve guessed it, “lock”. To open it, click “open” and enter your passcode again.
|
||||
|
||||
As you can see from the screenshot above, usage of gtomb is really easy, and you shouldn’t encounter any problems. Most common tasks can be done with a few clicks, and for anything more complicated you can use the command line.
|
||||
|
||||
### Final Thoughts
|
||||
|
||||
That’s it! You should now have your first tomb set up and ready to go. Store anything you want to keep secret and secure in tombs, and this information will be much more secure.
|
||||
|
||||
You can use multiple tombs at the same time, and bind the files in them to your $HOME directory, so your programs don’t get confused.
|
||||
|
||||
I hope this guide has helped you get started. Using your tombs is just like using a standard folder, but for more complex commands you can always check the Tomb [Official Guide](https://www.dyne.org/software/tomb/).
|
||||
|
||||
* * *
|
||||
|
||||
via: [https://www.howtoforge.com/tutorial/how-to-install-and-use-tomb-file-encryption-on-ubuntu-1604/](https://www.howtoforge.com/tutorial/how-to-install-and-use-tomb-file-encryption-on-ubuntu-1604/)
|
||||
|
||||
作者: [Dan Fries](https://www.howtoforge.com/) 选题者: [@lujun9972](https://github.com/lujun9972) 译者: [译者ID](https://github.com/译者ID) 校对: [校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
@ -0,0 +1,264 @@
|
||||
如何在 Ubuntu 16.04 LTS 上用 Tomb 加密文件
|
||||
==================================================
|
||||
|
||||
|
||||
现在大多数人认为文件加密是必要的, 甚至在 Linux 系统上也是如此。 如果你和我一样, 最初被 Ubuntu 所吸引是因为 Linux 系统的安全性增强了, 恐怕我有个坏消息要告诉你: Linux 已经成为它自身‘成功’的受害者。 近年来, 用户数量的大幅度增加导致了这类系统的攻击和盗窃活动呈指数级增长。
|
||||
|
||||
|
||||
曾经有一个非常简单的解决方案来加密像 Ubuntu 这样的 Linux 系统上的文件: 它叫做 [Truecrypt](https://www.fossmint.com/secure-encrypt-files-folders-with-truecrypt-in-linux/)。 直到 2015 年, 它提供了不同程度的军事级别的加密, 并且在大多数 Linux 系统中运行良好。不幸的是, 它已经停止开发了, 因此变得相当不安全。
|
||||
|
||||
### 替代品
|
||||
|
||||
幸运的是, 除了 Truecrypt, 还有一些选择。 Truecrypt 的直接继承者是 [Veracrypt](https://www.fossmint.com/veracrypt-is-a-secure-alternative-encryption-tool-to-truecrypt-for-linux/) ，由一群开发者从 Truecrypt 获取源代码并保持更新。
|
||||
|
||||
该项目已经发展成为令人印象深刻的独立系统，但现在正在显示其年龄。旧系统，尤其是那些处理安全问题的系统，只能更新多次而才不会引入漏洞。
|
||||
|
||||
出于这个原因，在其他许多方面，加密软件的价值看起来有点远了。我选择的将是 Tomb。
|
||||
|
||||
### 为什么是 Tomb
|
||||
|
||||
在某些方面，Tomb 与其他加密软件非常相似。它将加密文件存储在专用的“Tomb 文件夹 ”中，而且让你快速查看您已加密的文件。
|
||||
|
||||
它还使用与 Veracrypt 类似的 [AES-256](https://www.dyne.org/software/tomb/) 加密标准。这个标准适用于从 NSA 到微软到 Mac 的每个人，并被认为是最安全的加密密码之一。如果你不熟悉加密技术，则应该阅读 [技术背景知识](https://thebestvpn.com/advanced-encryption-standard-aes/)，但如果你只想快速、安全地加密，请不要担心: Tomb 将不负所望。
|
||||
|
||||
Tomb 有很大的不同。首先，它是专门为 GNU/Linux 系统开发的，可以解决一些更广泛的加密软件的兼容性问题。
|
||||
|
||||
第二, 尽管 Tomb 是开源的, 但它使用的是静态链接库以至于其源代码难以审计。 这意味着一些操作系统的分销商并不认为它是免费的, 但是当涉及到安全软件时, 这实际上是一件好事: 这意味着与完全“免费”软件相比, Tomb 被黑客攻击的可能性更小。
|
||||
|
||||
最后, 它有几个先进的功能, 如**隐写术**, 这使你可以隐藏你的关键文件在其他文件。 尽管 Tomb 主要是一个命令行工具, 它也带有 GUI 界面-- gtomb, 它允许初学者用图形化的方式使用它。
|
||||
|
||||
卖掉了? 好吧, 在我告诉你如何使用 Tomb 之前, 值得注意的是, 没有一个加密软件能提供完全的保 护。 Tomb 不会隐藏你 ISP 的中在线计算机，也不会保护存储在云中的文件。如果你想对云存储进行完全加密, 您需要使用 Tor 浏览器和零日志 VPN 登录到你喜欢的存储服务中。 这里有很多选项, 但是 [Trust Zone](https://privacyaustralia.org/trust-zone-vpn-review/) 是一个很好的浏览器, 而且 [Tinc](https://www.howtoforge.com/tutorial/how-to-properly-set-up-tinc-vpn-on-ubuntu-linux/) 是一个很好的 VPN 工具。
|
||||
|
||||
说了这么多，如果你正在寻找Ubuntu 16.04 的快速、简单、安全的加密，Tomb 无疑是一条可 行的路。让我们开始吧。
|
||||
|
||||
### 在 Ubuntu 16.04 上安装 Tomb
|
||||
|
||||
因为 Tomb 是专门为 Linux 设计的, 所以安装非常简单。
|
||||
|
||||
几年前, SparkyLinux (它本身就是一个非常好的 Debian 衍生产品)的开发者们将 “ Tomb ”添加到他们的官方存储库中。 你可以通过在 Ubuntu 系统上添加这些存储库来安装它。
|
||||
|
||||
要做到这一点， 打开一个终端并添加一个存储库文件：
|
||||
|
||||
|
||||
``` shell
|
||||
sudo vi /etc/apt/sources.list.d/sparky-repo.list
|
||||
```
|
||||
|
||||
然后在文件中添加以下行:
|
||||
|
||||
``` shell
|
||||
deb https://sparkylinux.org/repo stable main
|
||||
deb-src https://sparkylinux.org/repo stable main
|
||||
deb https://sparkylinux.org/repo testing main
|
||||
deb-src https://sparkylinux.org/repo testing main
|
||||
```
|
||||
|
||||
保存并关闭该文件。
|
||||
|
||||
你现在需要安装Sparky公钥，使用下列步骤:
|
||||
|
||||
``` shell
|
||||
sudo apt-get install sparky-keyring
|
||||
|
||||
```
|
||||
|
||||
或者：
|
||||
|
||||
``` shell
|
||||
wget -O - https://sparkylinux.org/repo/sparkylinux.gpg.key | sudo apt-key add -
|
||||
|
||||
```
|
||||
|
||||
然后你需要使用标准命令来更新你的存储库:
|
||||
|
||||
``` shell
|
||||
sudo apt-get update
|
||||
|
||||
```
|
||||
|
||||
然后简单地使用 apt 安装 Tomb:
|
||||
|
||||
``` shell
|
||||
sudo apt-get install tomb
|
||||
|
||||
```
|
||||
|
||||
如果你想要带有 GUI 的 Tomb，安装同样简单。只需使用 apt 来安装 gtomb:
|
||||
|
||||
``` shell
|
||||
sudo apt-get install gtomb
|
||||
|
||||
```
|
||||
|
||||
就是这样，你现在应该安装了一个工作版的 Tomb。 让我们看看如何使用它。
|
||||
|
||||
### 使用 Tomb
|
||||
|
||||
#### 通过命令行使用 Tomb
|
||||
|
||||
Tomb 主要是一个命令行工具, 所以我将首先介绍这个用法。 如果你不喜欢使用终端, 你可以跳过这节并查看下一部分。
|
||||
|
||||
实际上, 不用说了。 如果你以前从来没有使用过命令行, 那么 Tomb 是一个很好的开始, 因为它使用简单的命令, 只要你小心, 那么你很少有机会把事情搞砸。
|
||||
|
||||
Tomb 实际上使用了一组以 Tomb 为主题的非常有趣的命令集。 每个加密文件夹都被称为“ tomb” (我很快就会讲到) , 它们可以使用类似的哥特式命令。
|
||||
|
||||
首先, 让我们创造一个新的 tomb。你可以指定你的新 tomb 的名称和大小, 所以让我们使用“ Tomb1”这个名称并指定大小为100 MB。
|
||||
|
||||
你需要 root 权限，所以打开终端并键入(或复制) ：
|
||||
|
||||
|
||||
``` shell
|
||||
sudo tomb dig -s 100 Tomb1.tomb
|
||||
|
||||
```
|
||||
|
||||
你应该会得到类似这样的输出：
|
||||
|
||||
``` shell
|
||||
tomb . Commanded to dig tomb Tomb1.tomb
|
||||
tomb (*) Creating a new tomb in Tomb1.tomb
|
||||
tomb . Generating Tomb1.tomb of 100MiB
|
||||
100 blocks (100Mb) written.
|
||||
100+0 records in
|
||||
100+0 records out
|
||||
-rw------- 1 Tomb1 Tomb1 100M Jul 4 18:53 Tomb1.tomb
|
||||
tomb (*) Done digging Tomb1
|
||||
tomb . Your tomb is not yet ready, you need to forge a key and lock it:
|
||||
tomb . tomb forge Tomb1.tomb.key
|
||||
tomb . tomb lock Tomb1.tomb -k Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
正如输出的有帮助的说明，你现在需要创建一个密钥文件来锁定你的 tomb:
|
||||
|
||||
|
||||
``` shell
|
||||
sudo tomb forge Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
如果在此时出现提及“活动交换分区”的错误，则需要停用所有活动交换分区:
|
||||
|
||||
``` shell
|
||||
sudo swapoff -a
|
||||
|
||||
```
|
||||
|
||||
然后再运行上面的 keyfile 命令。
|
||||
|
||||
生成密钥文件可能需要几分钟时间，这具体取决于系统的速度。然而，在完成后系统会要求你输入新密码以确保密钥的安全:
|
||||
[](https://www.howtoforge.com/images/how_to_setup_and_install_tomb_on_ubuntu_1604/big/tomb1.png)
|
||||
|
||||
输入两次, 然后你的新密钥文件就会被制作出来。
|
||||
|
||||
|
||||
你现在需要用你的新密钥来锁定你的 tomb。你可以这样做:
|
||||
|
||||
``` shell
|
||||
sudo tomb lock Tomb1.tomb -k Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
你将被要求输入你的密码。 这样做, 你应该会得到如下的输出:
|
||||
|
||||
``` shell
|
||||
tomb . Commanded to lock tomb Tomb1.tomb
|
||||
|
||||
[sudo] Enter password for user Tomb1 to gain superuser privileges
|
||||
|
||||
tomb . Checking if the tomb is empty (we never step on somebody else's bones).
|
||||
tomb . Fine, this tomb seems empty.
|
||||
tomb . Key is valid.
|
||||
tomb . Locking using cipher: aes-xts-plain64:sha256
|
||||
tomb . A password is required to use key Tomb1.tomb.key
|
||||
tomb . Password OK.
|
||||
tomb (*) Locking Tomb1.tomb with Tomb1.tomb.key
|
||||
tomb . Formatting Luks mapped device.
|
||||
tomb . Formatting your Tomb with Ext3/Ext4 filesystem.
|
||||
tomb . Done locking Tomb1 using Luks dm-crypt aes-xts-plain64:sha256
|
||||
tomb (*) Your tomb is ready in Tomb1.tomb and secured with key Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
现在一切都安排好了, 你可以开始使用你的新 tomb 了。
|
||||
|
||||
这里有一个注意事项: 因为我只是在告诉你该怎么做, 所以我把我的密钥文件和 tomb 存放在同一个目录中 (在这里是 $HOME )。 你不应该这样做——把你的密钥存放在别的地方, 最好是在除了你之外没有人能找到的地方。
|
||||
|
||||
然而, 你需要记住你把它放在哪里, 因为你需要用它来打开你的 tomb。 要做到这一点, 请输入:
|
||||
|
||||
``` shell
|
||||
sudo tomb open Tomb1.tomb -k path/to/your/Tomb1.tomb.key
|
||||
|
||||
```
|
||||
|
||||
输入你的密码, 然后你就可以进去了。 tomb 会输出一些类似以下的内容:
|
||||
|
||||
``` shell
|
||||
tomb (*) Success unlocking tomb Tomb1
|
||||
tomb . Checking filesystem via /dev/loop0
|
||||
fsck from util-linux 2.27.1
|
||||
Tomb1: clean, 11/25168 files, 8831/100352 blocks
|
||||
tomb (*) Success opening Tomb1.tomb on /media/Tomb1
|
||||
|
||||
```
|
||||
|
||||
然后你应该看到安装在 finder 窗口的新 tomb。
|
||||
|
||||
你现在可以从 tomb 中保存和打开文件, 但是请注意, 你需要 root权限才能这样做。
|
||||
|
||||
在你使用完之后需要用以下方法卸载你的 tomb：
|
||||
|
||||
``` shell
|
||||
sudo tomb close
|
||||
|
||||
```
|
||||
|
||||
或者, 如果你想强制关闭所有的开放式 tomb, 你可以使用:
|
||||
|
||||
``` shell
|
||||
sudo tomb slam all
|
||||
|
||||
```
|
||||
|
||||
#### **使用带 GUI 的 Tomb**
|
||||
|
||||
如果你不喜欢使用命令行, 或者只是想要一个图形界面, 你可以使用 gtomb。 与许多图形用户界面包装器不同, gtomb 使用起来很容易。
|
||||
|
||||
让我们来看看如何使用 gtomb 建立一个新的 tomb。 首先, 从菜单中启动 gtomb。 它可能会是这 样的:
|
||||
|
||||
|
||||
[](https://www.howtoforge.com/images/how_to_setup_and_install_tomb_on_ubuntu_1604/big/tomb2.png)
|
||||
|
||||
所有的事情都是明了的, 但为了完整起见, 我将详细介绍如何建立你的第一个 tomb。
|
||||
|
||||
首先, 点击第一个选项"dig"。 点击确定, 然后选择一个位置。
|
||||
|
||||
接下来, 输入你 tomb 的大小:
|
||||
[](https://www.howtoforge.com/images/how_to_setup_and_install_tomb_on_ubuntu_1604/big/tomb3.png)
|
||||
|
||||
你现在有了一个新的 tomb, 但是你需要在使用它之前做一把钥匙。 要做到这一点, 请在主菜单中 单击"forge":
|
||||
[](https://www.howtoforge.com/images/how_to_setup_and_install_tomb_on_ubuntu_1604/big/tomb4.png)
|
||||
|
||||
tomb 会要求你输入两次密码, 那就这样做。
|
||||
|
||||
然后通过点击锁定你的 tomb, 你已经猜到了,"lock"。 要打开它, 请单击"open"并再次输入您的密码。
|
||||
|
||||
从上面的截图中你可以看到, 使用 gtomb 是非常容易的, 你不应该遇到任何问题。 大多数常见的任务都可以通过点击来完成, 对于任何更复杂的事情, 你可以使用命令行。
|
||||
|
||||
### 最后的想法
|
||||
|
||||
就是这样! 你现在应该准备好你的第一个 tomb 了并存储任何你想在 tomb 中保密和安全的信息，
|
||||
这些信息会更加安全。
|
||||
|
||||
你可以同时使用多个 tomb，并将它们中的文件绑定到你的$ HOME目录，这样你的程序就不会感到困惑。
|
||||
|
||||
我希望这本指南能帮助你开始。 使用你的 Tomb 就像使用一个标准的文件夹, 但是对于更复杂的命
|
||||
令, 你总是可以查看 [Tomb 官方指南](https://www.dyne.org/software/tomb/)。
|
||||
|
||||
* * *
|
||||
|
||||
via: [https://www.howtoforge.com/tutorial/how-to-install-and-use-tomb-file-encryption-on-ubuntu-1604/](https://www.howtoforge.com/tutorial/how-to-install-and-use-tomb-file-encryption-on-ubuntu-1604/)
|
||||
|
||||
作者: [Dan Fries](https://www.howtoforge.com/) 选题者: [@lujun9972](https://github.com/lujun9972) 译者: [Auk7F7](https://github.com/Auk7F7) 校对: [校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
Loading…
Reference in New Issue
Block a user