"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "man/cryptsetup.8" between
cryptsetup-2.4.2.tar.xz and cryptsetup-2.4.3.tar.xz

About: cryptsetup is a utility used to conveniently setup disk encryption based on the dm-crypt kernel module. These include plain dm-crypt volumes, LUKS volumes, loop-AES and TrueCrypt compatible format.

cryptsetup.8  (cryptsetup-2.4.2.tar.xz):cryptsetup.8  (cryptsetup-2.4.3.tar.xz)
skipping to change at line 665 skipping to change at line 665
MISCELLANEOUS MISCELLANEOUS
repair <device> repair <device>
Tries to repair the device metadata if possible. Currently support ed only for LUKS device type. Tries to repair the device metadata if possible. Currently support ed only for LUKS device type.
This command is useful to fix some known benign LUKS metadata head er corruptions. Only basic cor- This command is useful to fix some known benign LUKS metadata head er corruptions. Only basic cor-
ruptions of unused keyslot are fixable. This command will only change the LUKS header, not any ruptions of unused keyslot are fixable. This command will only change the LUKS header, not any
key-slot data. You may enforce LUKS version by adding --type optio n. key-slot data. You may enforce LUKS version by adding --type optio n.
It also repairs (upgrades) LUKS2 reencryption metadata by adding m
etadata digest that protects it
against malicious changes.
If LUKS2 reencryption was interrupted in the middle of writting
reencryption segment the repair
command can be used to perform reencryption recovery so that reenc
ryption can continue later.
WARNING: Always create a binary backup of the original header befo re calling this command. WARNING: Always create a binary backup of the original header befo re calling this command.
benchmark <options> benchmark <options>
Benchmarks ciphers and KDF (key derivation function). Without par ameters, it tries to measure Benchmarks ciphers and KDF (key derivation function). Without par ameters, it tries to measure
few common configurations. few common configurations.
To benchmark other ciphers or modes, you need to specify --c ipher and --key-size options or To benchmark other ciphers or modes, you need to specify --c ipher and --key-size options or
--hash for KDF test. --hash for KDF test.
skipping to change at line 1270 skipping to change at line 1276
EXAMPLE EXAMPLE
Example 1: Create LUKS 2 container on block device /dev/sdX. Example 1: Create LUKS 2 container on block device /dev/sdX.
sudo cryptsetup --type luks2 luksFormat /dev/sdX sudo cryptsetup --type luks2 luksFormat /dev/sdX
Example 2: Add an additional passphrase to key slot 5. Example 2: Add an additional passphrase to key slot 5.
sudo cryptsetup luksAddKey --key-slot 5 /dev/sdX sudo cryptsetup luksAddKey --key-slot 5 /dev/sdX
Example 3: Create LUKS header backup and save it to file. Example 3: Create LUKS header backup and save it to file.
sudo cryptsetup luksHeaderBackup /dev/sdX --header-backup-file /va r/tmp/NameOfBackupFile sudo cryptsetup luksHeaderBackup /dev/sdX --header-backup-file /va r/tmp/NameOfBackupFile
Example 4: Open LUKS contaner on /dev/sdX and map it to sdX_crypt. Example 4: Open LUKS container on /dev/sdX and map it to sdX_crypt.
sudo cryptsetup open /dev/sdX sdX_crypt sudo cryptsetup open /dev/sdX sdX_crypt
WARNING: The command in example 5 will erase all key slots. WARNING: The command in example 5 will erase all key slots.
Your cannot use your luks container afterwards anymore unless you have a backup to restore. Your cannot use your luks container afterwards anymore unless you have a backup to restore.
Example 5: Erase all key slots on /dev/sdX. Example 5: Erase all key slots on /dev/sdX.
sudo cryptsetup erase /dev/sdX sudo cryptsetup erase /dev/sdX
Example 6: Restore LUKS header from backup file. Example 6: Restore LUKS header from backup file.
sudo cryptsetup luksHeaderRestore /dev/sdX --header-backup-file /v ar/tmp/NameOfBackupFile sudo cryptsetup luksHeaderRestore /dev/sdX --header-backup-file /v ar/tmp/NameOfBackupFile
 End of changes. 2 change blocks. 
1 lines changed or deleted 10 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)