services/homelab
1
1
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity

never ever ever ever allow force overwrite luks driver

Browse Source
This commit is contained in:
Reese Wells
2026-02-06 20:22:47 -05:00
parent 59bdafed6a
commit bcd087dc94
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
active/software_luks/luks.md
View File

@@ -13,15 +13,17 @@ dnf install cryptsetup
# Create an encryption key # Create an encryption key
mkdir /etc/luks-keys mkdir /etc/luks-keys
chmod 700 /etc/luks-keys chmod 700 /etc/luks-keys
mkdir /etc/luks-backups
chmod 700 /etc/luks-backups
dd if=/dev/urandom bs=128 count=1 of=/etc/luks-keys/data0.key dd if=/dev/urandom bs=128 count=1 of=/etc/luks-keys/data0.key
# Create an encrypted partition # Create an encrypted partition
# -q means don't ask for confirmation # -q means don't ask for confirmation
# -v means verbose # -v means verbose
cryptsetup -q -v luksFormat /dev/nvme6n1p1 /etc/luks-keys/data0.key cryptsetup -v luksFormat /dev/nvme6n1p1 /etc/luks-keys/data0.key
# Unlock # Unlock
cryptsetup -q -v luksOpen --key-file /etc/luks-keys/data0.key /dev/nvme6n1p1 luks-$(cryptsetup luksUUID /dev/nvme6n1p1) cryptsetup -v luksOpen --key-file /etc/luks-keys/data0.key /dev/nvme6n1p1 luks-$(cryptsetup luksUUID /dev/nvme6n1p1)
# List keys # List keys
cryptsetup luksDump /dev/nvme6n1p1 cryptsetup luksDump /dev/nvme6n1p1