clevis-luks-pass1
Extracts the passphrase used for binding a particular slot in a luks device
Usage
clevis luks
pass
-d
DEV
-s
SLT
Overview
The clevis luks pass command extracts the passphrase used for binding a particular slot in a LUKS device. For example:
clevis luks pass -d /dev/sda1 -s 1
Options
• -d DEV : The LUKS device on which to extract a passphrase from
• -s SLT : The slot to use for extracting the passphrase
Examples
clevis luks pass -d /dev/sda1 -s 1 <passphrase here>
Note that the output of clevis luks pass might be non-printable, in which case it would be better to redirect its output to a file and use it as a key file together with cryptsetup. For instance:
clevis luks pass -d /dev/sda1 -s 1 > slot1-passphrase
And the file slot1-passphrase will contain the passphrase associated with slot #1 in /dev/sda1.
Releases
4 releases since Debian 11 (Bullseye); the text changed 3 times.