From bcd087dc9481a4ecc4047fa467076a07b49729ec Mon Sep 17 00:00:00 2001 From: ducoterra Date: Fri, 6 Feb 2026 20:22:47 -0500 Subject: [PATCH] never ever ever ever allow force overwrite luks driver --- active/software_luks/luks.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/active/software_luks/luks.md b/active/software_luks/luks.md index f7e6ccc..02aaa57 100644 --- a/active/software_luks/luks.md +++ b/active/software_luks/luks.md @@ -13,15 +13,17 @@ dnf install cryptsetup # Create an encryption key mkdir /etc/luks-keys chmod 700 /etc/luks-keys +mkdir /etc/luks-backups +chmod 700 /etc/luks-backups dd if=/dev/urandom bs=128 count=1 of=/etc/luks-keys/data0.key # Create an encrypted partition # -q means don't ask for confirmation # -v means verbose -cryptsetup -q -v luksFormat /dev/nvme6n1p1 /etc/luks-keys/data0.key +cryptsetup -v luksFormat /dev/nvme6n1p1 /etc/luks-keys/data0.key # Unlock -cryptsetup -q -v luksOpen --key-file /etc/luks-keys/data0.key /dev/nvme6n1p1 luks-$(cryptsetup luksUUID /dev/nvme6n1p1) +cryptsetup -v luksOpen --key-file /etc/luks-keys/data0.key /dev/nvme6n1p1 luks-$(cryptsetup luksUUID /dev/nvme6n1p1) # List keys cryptsetup luksDump /dev/nvme6n1p1