diff options
| author | Ondrej Kozina <okozina@redhat.com> | 2022-01-11 17:18:40 +0100 |
|---|---|---|
| committer | Milan Broz <gmazyland@gmail.com> | 2022-01-12 18:38:22 +0100 |
| commit | 00feca3ce0443873fdae05737d8aa03f6fa93f53 (patch) | |
| tree | cf83e043479cf2272ef793a60d2a2bc005e1df0d /man | |
| parent | ea479371870db577f264a471ddc0e1670c9899df (diff) | |
| download | cryptsetup-00feca3ce0443873fdae05737d8aa03f6fa93f53.tar.gz | |
Allow reencryption metadata repair from cryptsetup.
Diffstat (limited to 'man')
| -rw-r--r-- | man/cryptsetup.8 | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/man/cryptsetup.8 b/man/cryptsetup.8 index 961477ff..96b75761 100644 --- a/man/cryptsetup.8 +++ b/man/cryptsetup.8 @@ -834,6 +834,13 @@ are fixable. This command will only change the LUKS header, not any key-slot data. You may enforce LUKS version by adding \-\-type option. +It also repairs (upgrades) LUKS2 reencryption metadata by adding +metadata digest that protects it against malicious changes. + +If LUKS2 reencryption was interrupted in the middle of writting +reencryption segment the repair command can be used to perform +reencryption recovery so that reencryption can continue later. + \fBWARNING:\fR Always create a binary backup of the original header before calling this command. .PP |