2025-03-14 21:59:59 -06:00
|
|
|
# cryptsetup
|
|
|
|
|
|
|
|
|
|
> Manage plain `dm-crypt` and LUKS (Linux Unified Key Setup) encrypted volumes.
|
|
|
|
|
> Some subcommands such as `luksFormat` have their own usage documentation.
|
|
|
|
|
> More information: <https://manned.org/cryptsetup>.
|
|
|
|
|
|
|
|
|
|
- Initialize a LUKS volume with a passphrase (overwrites all data on the partition):
|
|
|
|
|
|
|
|
|
|
`cryptsetup luksFormat {{/dev/sdXY}}`
|
|
|
|
|
|
|
|
|
|
- Open a LUKS volume and create a decrypted mapping at `/dev/mapper/mapping_name`:
|
|
|
|
|
|
|
|
|
|
`cryptsetup open {{/dev/sdXY}} {{mapping_name}}`
|
|
|
|
|
|
|
|
|
|
- Display information about a mapping:
|
|
|
|
|
|
|
|
|
|
`cryptsetup status {{mapping_name}}`
|
|
|
|
|
|
|
|
|
|
- Remove an existing mapping:
|
|
|
|
|
|
|
|
|
|
`cryptsetup close {{mapping_name}}`
|
|
|
|
|
|
|
|
|
|
- Change a LUKS volume's passphrase:
|
|
|
|
|
|
|
|
|
|
`cryptsetup luksChangeKey {{/dev/sdXY}}`
|
2026-02-18 06:55:01 -07:00
|
|
|
|
|
|
|
|
- Display LUKS header information and key slot metadata of an encrypted device:
|
|
|
|
|
|
|
|
|
|
`cryptsetup luksDump {{/dev/sdXY}}`
|
