確認目標硬盤設(shè)備名（如/dev/sda），避免誤刪系統(tǒng)盤；2. 使用sudo dd if=/dev/zero of=/dev/sdX bs=1M status=progress全盤覆寫零值，適用於大多數(shù)場景；3. 敏感數(shù)據(jù)使用sudo shred -v -n 3 /dev/sdX進行三次隨機數(shù)據(jù)覆寫，確保無法恢復(fù)；4. 可選執(zhí)行sudo badblocks -wsv /dev/sdX做破壞性寫入測試；最後用sudo hexdump -C /dev/sdX | head驗證是否全為零，完成安全擦除。

If you're decommissioning a hard drive, selling an old laptop, or just want to make sure your data is truly gone, simply deleting files or reformatting isn't enough. On Linux, there are reliable, built-in tools to securely erase a hard drive so data can't be recovered—even with forensic tools.

Here's how to do it right:

? 1. Identify the Correct Drive

Before doing anything, double-check which drive you're targeting— wiping the wrong one could destroy your OS or data .

 lsblk

or

 sudo fdisk -l

Look for the device name like /dev/sda , /dev/nvme0n1 , etc.
? Pro tip: Unplug all unnecessary drives to avoid mistakes.

?? 2. Use dd with /dev/zero (Basic Secure Wipe)

This overwrites the entire drive with zeros—good for most cases:

 sudo dd if=/dev/zero of=/dev/sdX bs=1M status=progress

Replace sdX with your actual drive (eg, sda ).

• if=/dev/zero = input is all zeros
• of=/dev/sdX = output to your target drive
• bs=1M = faster write speed
• status=progress = shows real-time progress

? Why this works : Overwriting with zeros makes most recovery tools useless.
?? Note : This takes time—hours for large drives.

? 3. For Extra Security: Use shred

shred writes random data multiple times (default: 3 passes), making recovery nearly impossible:

 sudo shred -v -n 3 /dev/sdX

• -v = verbose (shows progress)
• -n 3 = 3 overwrite passes (you can use more, but 3 is usually sufficient)

? Use this if the drive held sensitive data like passwords, financial records, or personal documents.

? 4. Optional: Use badblocks for Destructive Write Test

This is overkill for most users but useful if you want to both test for bad sectors and wipe:

 sudo badblocks -wsv /dev/sdX

• -w = destructive write test (wipes the drive)
• -s = show progress
• -v = verbose

This does one pass of predefined patterns —not as thorough as shred , but faster and still secure for casual use.

? Final Step: Verify the Wipe

After wiping, check that the drive is actually blank:

 sudo hexdump -C /dev/sdX | head

You should see only zeros (like 00000000: 00 00 00 ... ). If you see readable text or patterns, the wipe failed.

?? Important Notes:

• Unmount all partitions first :

   sudo umount /dev/sdX*

• SSDs vs HDDs : For SSDs, use blkdiscard or the drive's built-in secure erase (via hdparm )—because wear leveling can leave data in unused blocks.
• Physical destruction is the only 100% secure method for top-secret data—but that's beyond software.

---

Basically, for 99% of users:

1. Identify the drive ?
2. Run shred -v -n 3 /dev/sdX ?
3. Verify with hexdump ?

It's not glamorous—but it's secure, simple, and uses tools already on your Linux system.

以上是如何在Linux上安全刪除硬盤驅(qū)動器的詳細內(nèi)容。更多資訊請關(guān)注PHP中文網(wǎng)其他相關(guān)文章！