CRYPTSETUP-LUKSOPEN(8) (NAME) cryptsetup-luksOpen - LUKS (SYNOPSIS) cryptsetup luksOpen [<>] <> <> cryptsetup open --type luks [<>] <> <> (DESCRIPTION) LUKS <> <> . cryptsetup luksOpen cryptsetup open --type luks . LUKS2 (PIN) . ( ) --key-file . LUKS2 (PIN) : --token-only --token-type --token-id . /dev/mapper/<> . <> : [--allow-discards, --batch-mode, --debug, --debug-json, --disable-external-tokens, --disable-keyring, --disable-locks, --external-tokens-path, --header, --help, --key-description, --key-file, --keyfile-offset, --keyfile-size, --key-size, --key-slot, --link-vk-to-keyring, --perf-high_priority, --perf-no_read_workqueue, --perf-no_write_workqueue, --perf-same_cpu_crypt, --perf-submit_from_crypt_cpus, --persistent, --readonly, --refresh, --serialize-memory-hard-pbkdf, --test-passphrase, --timeout, --token-id, --token-only, --token-type, --tries, --type, --unbound, --usage, --verify-passphrase, --version, --volume-key-file, --volume-key-keyring]. (OPTIONS) --allow-discards (discard/TRIM) . LUKS2 (data integrity) . : . . . . . . --batch-mode, -q . ! --verify-passphrase . --debug --debug-json . # . --debug-json LUKS2 JSON . --disable-external-tokens LUKS2 . --disable-keyring (kernel keyring) dm-crypt . LUKS2 . --disable-locks . LUKS2 . : cryptsetup ( /run ). --external-tokens-path <_> cryptsetup ( ) . ( '/' ). --header < LUKS> () LUKS . : . --header . . --help, -? . --key-description <> (key description) . --key-file, -d <> . "-" (stdin) . . NOTES ON PASSPHRASE PROCESSING cryptsetup(8) . --keyfile-offset <> <> . --keyfile-size, -l <> <> . --help . . (trailing newlines) . --keyfile-offset . --key-size, -s <> . . (cipher) . /proc/crypto . /proc/crypto . LUKS2 (reencryption) . --key-size --volume-key-file ( ). --key-slot, -S <0-N> (keyslot) . . LUKS . LUKS1 . LUKS2 LUKS2 . --link-vk-to-keyring <_>::<_> (keyring) . ( --test-passphrase ). <_> . "%:" "%keyring:" . . "@" . "::" . <_> <_> . "%<_>:" . user . . KEY IDENTIFIERS keyctl(1) . --perf-high_priority dm-crypt (writer thread) . (throughput) dm-crypt . dm-crypt dm-crypt . . . --perf-no_read_workqueue, --perf-no_write_workqueue dm-crypt (synchronous). dm-crypt dm-crypt . . . --perf-same_cpu_crypt (CPU) / (I/O) . . dm-crypt dm-crypt . . . --perf-submit_from_crypt_cpus (thread) . bio . bio . dm-crypt dm-crypt . . . --persistent LUKS2 open refresh ( crypttab ). --persistent ( --persistent --allow-discards ). --allow-discards --perf-same_cpu_crypt --perf-submit_from_crypt_cpus --perf-no_read_workqueue --perf-no_write_workqueue --integrity-no-journal . --readonly, -r . . --refresh (refresh) . cryptsetup-refresh(8) . --serialize-memory-hard-pbkdf PBKDF ( Argon2). (OOM killer) . ! --test-passphrase . . --timeout, -t <_> () . . --key-file . . ( ) . --token-id <> (PIN) . ( PIN ) . --token-only . . LUKS2 (PIN) . --token-type <> . --token-id . LUKS2 . --tries, -T <> . . --type <_> ( luks luks1 luks2). BASIC ACTIONS cryptsetup(8) . --unbound --test-passphrase (unbound) LUKS2 . --key-slot . --usage . --verify-passphrase, -y . (stdin) . --version, -V . --volume-key-file <>, --master-key-file <> ( ) . luks . (reencryption) . --volume-key-file --key-size . --volume-key-keyring <_> (keyring). luks . LUKS (digest) . (reencryption) . <_> keyctl . %<_>:<_> . KEY IDENTIFIERS keyctl(1) . %<_>: user ( ) . (EXAMPLES) LUKS secret_backup : # cryptsetup luksOpen /dev/sda2 secret_backup /dev/mapper/secret_backup : # mount /dev/mapper/secret_backup /mnt/backup : # cryptsetup luksOpen --key-file /root/secret.key /dev/sdb1 mydata (TRIM) SSD: # cryptsetup luksOpen --allow-discards /dev/nvme0n1p3 cryptroot LUKS ( ): # cryptsetup luksOpen --header /media/usb/header.img /dev/sdc1 private : # cryptsetup luksOpen --test-passphrase /dev/sda2 (REPORTING BUGS) cryptsetup . --debug . (SEE ALSO) cryptsetup (FAQ) cryptsetup(8), cryptsetup-open(8), cryptsetup-close(8), cryptsetup-luksAddKey(8), cryptsetup-luksClose(8), integritysetup(8) veritysetup(8) (CRYPTSETUP) cryptsetup . cryptsetup 2.8.8 CRYPTSETUP-LUKSOPEN(8)