From 764ae2a489f0b1e27de6f463d5aa70c0a368a202 Mon Sep 17 00:00:00 2001 From: Ondrej Kozina Date: Mon, 30 Oct 2017 17:34:55 +0100 Subject: [PATCH] man: update cryptsetup-reencrypt for LUKS2 format --- man/cryptsetup-reencrypt.8 | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/man/cryptsetup-reencrypt.8 b/man/cryptsetup-reencrypt.8 index e08c44b5..d4ddb1f3 100644 --- a/man/cryptsetup-reencrypt.8 +++ b/man/cryptsetup-reencrypt.8 @@ -14,7 +14,9 @@ unclocked by passphrase), \fBcipher\fR, \fBcipher mode\fR. Cryptsetup-reencrypt reencrypts data on LUKS device in-place. During reencryption process the LUKS device is marked unavailable. -\fBNOTE:\fR LUKS2 format is not yet supported. +\fBNOTE:\fR LUKS2 format support is limited. Currently the tool uses default +values for new LUKS2 headers. Only those parameters shared with LUKS1 format +may be changed (\-\-hash and \-\-iter\-time only). \fIWARNING\fR: The cryptsetup-reencrypt program is not resistant to hardware or kernel failures during reencryption (you can lose you data in this case). @@ -195,6 +197,13 @@ Suppresses all warnings and reencryption progress output. .B "\-\-progress-frequency " Print separate line every with reencryption progress. .TP +.B "\-\-type " +Use only while encrypting not yet encrypted device (see \-\-new). + +Specify LUKS version when performing in-place encryption. If the parameter +is ommited default value (LUKS1) is used. Type may be one of: \fBluks\fR (default), +\fBluks1\fR or \fBluks2\fR. +.TP .B "\-\-version" Show the program version. .SH RETURN CODES