В OS X Lion появился менеджер томов CoreStorage. Пока его возможности достаточно
Я хочу создать на новом диске два зашифрованных логических раздела.
Диск пуст:
$ diskutil list /dev/disk4 #: TYPE NAME SIZE IDENTIFIER 0: *500.1 GB disk4
Создаю Logical Volume Group. Синтаксис:
Usage: diskutil coreStorage create lvgName MountPoint|DiskIdentifier|DeviceNode ... Create a CoreStorage logical volume group from one more more disks. The specified disks will become the initial set of PVs. All existing data on the drive will be lost. Ownership of the affected disk is required. Example: diskutil coreStorage create MyLVG disk1
Команда:
$ diskutil corestorage create lvgCS disk4 Started CoreStorage operation Unmounting disk4 Repartitioning disk4 Unmounting disk Creating the partition map Rediscovering disk4 Adding disk4s2 to Logical Volume Group Creating Core Storage Logical Volume Group Switching disk4s2 to Core Storage Waiting for Logical Volume Group to appear Discovered new Logical Volume Group "332FA822-E709-42BD-819F-38D846BBBFB2" Core Storage LVG UUID: 332FA822-E709-42BD-819F-38D846BBBFB2 Finished CoreStorage operation
Создаю зашифрованный Logical Volume. Синтаксис:
Usage: diskutil coreStorage createVolume lvgUUID type name size [-stdinpassphrase | -passphrase [passphrase]] Add a new logical volume to a CoreStorage logical volume group. Type is the file system to initialize on the new logical volume. Valid types are Journaled HFS+ or Case-sensitive Journaled HFS+ or their aliases. Size is the amount of space to allocate from the parent logical volume group. Valid sizes are floating-point numbers with a suffix of B(ytes), S(512-byte- blocks), K(ilobytes), M(egabytes), G(igabytes), T(erabytes), P(etabytes), or (%) a percentage of the current size of the logical volume group. Example: diskutil coreStorage createVolume 11111111-2222-3333-4444-555555555555 jhfs+ myLV 10g
Команда создания первого раздела размером в 60% от родительского LVG (UUID LVG взял в результатах предыдущей команды):
$ diskutil corestorage createvolume 332FA822-E709-42BD-819F-38D846BBBFB2 \ jhfs+ lvCS1 60% -stdinpassphrase Passphrase for new volume: *********** Started CoreStorage operation Waiting for Logical Volume to appear Formatting file system for Logical Volume Initialized /dev/rdisk3 as a 279 GB HFS Plus volume with a 24576k journal Mounting disk Core Storage LV UUID: 11391E12-477A-44DA-AE48-F92B74C2512B Core Storage disk: disk3 Finished CoreStorage operation
Команда создания второго раздела размером в 40%:
$ diskutil corestorage createvolume 332FA822-E709-42BD-819F-38D846BBBFB2 \ jhfs+ lvCS2 40% -stdinpassphrase Passphrase for new volume: *********** Started CoreStorage operation Waiting for Logical Volume to appear Formatting file system for Logical Volume Initialized /dev/rdisk5 as a 74 GB HFS Plus volume with a 8192k journal Mounting disk Core Storage LV UUID: B07706D0-8A64-4952-BB16-D5DEC2691687 Core Storage disk: disk5 Finished CoreStorage operation
Смотрю, что получилось:
$ diskutil corestorage list +-- Logical Volume Group 332FA822-E709-42BD-819F-38D846BBBFB2 ========================================================= Name: lvgCS Sequence: 3 Free Space: 119907090432 B (119.9 GB) | +-< Physical Volume 0C7E6C96-6890-49ED-9B70-2D66789A34CE | ---------------------------------------------------- | Index: 0 | Disk: disk4s2 | Status: Online | Size: 499763888128 B (499.8 GB) | +-> Logical Volume Family 04AE431E-3C70-4F48-8F60-885ED7121980 | ---------------------------------------------------------- | Sequence: 2 | Encryption Status: Unlocked | Encryption Type: AES-XTS | Encryption Context: Present | Conversion Status: NoConversion | Has Encrypted Extents: Yes | Conversion Direction: -none- | | | +-> Logical Volume 11391E12-477A-44DA-AE48-F92B74C2512B | --------------------------------------------------- | Disk: disk3 | Status: Online | Sequence: 2 | Size (Total): 299767734272 B (299.8 GB) | Size (Converted): -none- | Revertible: No | LV Name: lvCS1 | Volume Name: lvCS1 | Content Hint: Apple_HFS | +-> Logical Volume Family 18E88D4F-FF92-4E31-AB2C-75F175DDAB63 ---------------------------------------------------------- Sequence: 2 Encryption Status: Unlocked Encryption Type: AES-XTS Encryption Context: Present Conversion Status: NoConversion Has Encrypted Extents: Yes Conversion Direction: -none- | +-> Logical Volume B07706D0-8A64-4952-BB16-D5DEC2691687 --------------------------------------------------- Disk: disk5 Status: Online Sequence: 2 Size (Total): 79938060288 B (79.9 GB) Size (Converted): -none- Revertible: No LV Name: lvCS2 Volume Name: lvCS2 Content Hint: Apple_HFS
Размонтирую разделы через Finder, подключаю диск повторно. Разделы зашифрованы:
+-> Logical Volume Family 04AE431E-3C70-4F48-8F60-885ED7121980 | ---------------------------------------------------------- | Sequence: 2 | Encryption Status: Locked | Encryption Type: AES-XTS | Encryption Context: Present | Conversion Status: NoConversion | Has Encrypted Extents: Yes | Conversion Direction: -none- | | | +-> Logical Volume 11391E12-477A-44DA-AE48-F92B74C2512B | --------------------------------------------------- | Disk: -none- | Status: Locked | Sequence: 2 | Size (Total): 299767734272 B (299.8 GB) | Size (Converted): -none- | Revertible: No | LV Name: lvCS1 | Content Hint: Apple_HFS
Можно разблокировать разделы командой “diskutil corestorage unlockvolume”, а можно ввести пароль в приглашении:
Для смены пароля нужно сначала размонтировать раздел, а потом выполнить команду:
Usage: diskutil coreStorage changeVolumePassphrase|passwd lvUUID [-recoverykeychain file] | [-oldpassphrase old] [-newpassphrase new] | [-stdinpassphrase] Change an encrypted logical volume's password. Beyond the CoreStorage UUID, you will be prompted interactively for parameters that you do not specify. Parameters must be given in the above order. Example: diskutil coreStorage changeVolumePassphrase 11111111-2222-3333-4444-555555555555
Процесс смены:
$ diskutil corestorage changeVolumePassphrase 11391E12-477A-44DA-AE48-F92B74C2512B Old passphrase: New passphrase: Repeat new passphrase: Started CoreStorage operation Logical Volume passphrase has been changed Core Storage LV UUID: 11391E12-477A-44DA-AE48-F92B74C2512B Finished CoreStorage operation
У команды diskutil есть и скрытые команды из группы corestorage, их можно посмотреть в статье “