diff --git a/configure.ac b/configure.ac index 7c2467fb..da22368b 100644 --- a/configure.ac +++ b/configure.ac @@ -1,5 +1,5 @@ AC_PREREQ([2.67]) -AC_INIT([cryptsetup],[2.5.0-git]) +AC_INIT([cryptsetup],[2.5.0-rc0]) dnl library version from ..[-] LIBCRYPTSETUP_VERSION=$(echo $PACKAGE_VERSION | cut -f1 -d-) diff --git a/po/cryptsetup.pot b/po/cryptsetup.pot index 40baa25b..b9ece354 100644 --- a/po/cryptsetup.pot +++ b/po/cryptsetup.pot @@ -5,9 +5,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: cryptsetup 2.4.2-rc0\n" +"Project-Id-Version: cryptsetup 2.5.0-rc0\n" "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n" -"POT-Creation-Date: 2021-11-16 16:52+0100\n" +"POT-Creation-Date: 2022-06-17 19:43+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -16,91 +16,91 @@ msgstr "" "Content-Type: text/plain; charset=CHARSET\n" "Content-Transfer-Encoding: 8bit\n" -#: lib/libdevmapper.c:396 +#: lib/libdevmapper.c:417 msgid "Cannot initialize device-mapper, running as non-root user." msgstr "" -#: lib/libdevmapper.c:399 +#: lib/libdevmapper.c:420 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?" msgstr "" -#: lib/libdevmapper.c:1170 +#: lib/libdevmapper.c:1171 msgid "Requested deferred flag is not supported." msgstr "" -#: lib/libdevmapper.c:1239 +#: lib/libdevmapper.c:1240 #, c-format msgid "DM-UUID for device %s was truncated." msgstr "" -#: lib/libdevmapper.c:1567 +#: lib/libdevmapper.c:1570 msgid "Unknown dm target type." msgstr "" -#: lib/libdevmapper.c:1688 lib/libdevmapper.c:1693 lib/libdevmapper.c:1757 -#: lib/libdevmapper.c:1760 +#: lib/libdevmapper.c:1694 lib/libdevmapper.c:1699 lib/libdevmapper.c:1763 +#: lib/libdevmapper.c:1766 msgid "Requested dm-crypt performance options are not supported." msgstr "" -#: lib/libdevmapper.c:1700 lib/libdevmapper.c:1704 +#: lib/libdevmapper.c:1706 lib/libdevmapper.c:1710 msgid "Requested dm-verity data corruption handling options are not supported." msgstr "" -#: lib/libdevmapper.c:1708 +#: lib/libdevmapper.c:1714 msgid "Requested dm-verity FEC options are not supported." msgstr "" -#: lib/libdevmapper.c:1712 +#: lib/libdevmapper.c:1718 msgid "Requested data integrity options are not supported." msgstr "" -#: lib/libdevmapper.c:1714 +#: lib/libdevmapper.c:1720 msgid "Requested sector_size option is not supported." msgstr "" -#: lib/libdevmapper.c:1719 lib/libdevmapper.c:1723 +#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1729 msgid "Requested automatic recalculation of integrity tags is not supported." msgstr "" -#: lib/libdevmapper.c:1727 lib/libdevmapper.c:1763 lib/libdevmapper.c:1766 -#: lib/luks2/luks2_json_metadata.c:2204 +#: lib/libdevmapper.c:1733 lib/libdevmapper.c:1769 lib/libdevmapper.c:1772 +#: lib/luks2/luks2_json_metadata.c:2493 msgid "Discard/TRIM is not supported." msgstr "" -#: lib/libdevmapper.c:1731 +#: lib/libdevmapper.c:1737 msgid "Requested dm-integrity bitmap mode is not supported." msgstr "" -#: lib/libdevmapper.c:2705 +#: lib/libdevmapper.c:2763 #, c-format msgid "Failed to query dm-%s segment." msgstr "" -#: lib/random.c:75 +#: lib/random.c:74 msgid "" "System is out of entropy while generating volume key.\n" "Please move mouse or type some text in another window to gather some random " "events.\n" msgstr "" -#: lib/random.c:79 +#: lib/random.c:78 #, c-format msgid "Generating key (%d%% done).\n" msgstr "" -#: lib/random.c:165 +#: lib/random.c:164 msgid "Running in FIPS mode." msgstr "" -#: lib/random.c:171 +#: lib/random.c:170 msgid "Fatal error during RNG initialisation." msgstr "" -#: lib/random.c:208 +#: lib/random.c:207 msgid "Unknown RNG quality requested." msgstr "" -#: lib/random.c:213 +#: lib/random.c:212 msgid "Error reading from RNG." msgstr "" @@ -112,7 +112,7 @@ msgstr "" msgid "Cannot initialize crypto backend." msgstr "" -#: lib/setup.c:263 lib/setup.c:2079 lib/verity/verity.c:119 +#: lib/setup.c:263 lib/setup.c:2080 lib/verity/verity.c:122 #, c-format msgid "Hash algorithm %s not supported." msgstr "" @@ -126,7 +126,7 @@ msgstr "" msgid "Cannot determine device type. Incompatible activation of device?" msgstr "" -#: lib/setup.c:338 lib/setup.c:3142 +#: lib/setup.c:338 lib/setup.c:3221 msgid "This operation is supported only for LUKS device." msgstr "" @@ -134,7 +134,7 @@ msgstr "" msgid "This operation is supported only for LUKS2 device." msgstr "" -#: lib/setup.c:420 lib/luks2/luks2_reencrypt.c:2440 +#: lib/setup.c:420 lib/luks2/luks2_reencrypt.c:2979 msgid "All key slots full." msgstr "" @@ -148,7 +148,7 @@ msgstr "" msgid "Key slot %d is full, please select another one." msgstr "" -#: lib/setup.c:522 lib/setup.c:2900 +#: lib/setup.c:522 lib/setup.c:2946 msgid "Device size is not aligned to device logical block size." msgstr "" @@ -157,7 +157,8 @@ msgstr "" msgid "Header detected but device %s is too small." msgstr "" -#: lib/setup.c:661 lib/setup.c:2845 +#: lib/setup.c:661 lib/setup.c:2851 lib/setup.c:4335 +#: lib/luks2/luks2_reencrypt.c:3749 lib/luks2/luks2_reencrypt.c:4151 msgid "This operation is not supported for this device type." msgstr "" @@ -165,400 +166,420 @@ msgstr "" msgid "Illegal operation with reencryption in-progress." msgstr "" -#: lib/setup.c:834 lib/luks1/keymanage.c:527 +#: lib/setup.c:833 lib/luks1/keymanage.c:248 lib/luks1/keymanage.c:524 +#: lib/luks2/luks2_json_metadata.c:1231 src/cryptsetup.c:1449 +#: src/cryptsetup.c:1581 src/cryptsetup.c:1636 src/cryptsetup.c:1756 +#: src/cryptsetup.c:1861 src/cryptsetup.c:2142 src/cryptsetup.c:2380 +#: src/cryptsetup.c:2440 src/utils_reencrypt_luks1.c:1188 +#: tokens/ssh/cryptsetup-ssh.c:77 +#, c-format +msgid "Device %s is not a valid LUKS device." +msgstr "" + +#: lib/setup.c:836 lib/luks1/keymanage.c:527 #, c-format msgid "Unsupported LUKS version %d." msgstr "" -#: lib/setup.c:1430 lib/setup.c:2610 lib/setup.c:2683 lib/setup.c:2695 -#: lib/setup.c:2853 lib/setup.c:4643 +#: lib/setup.c:1431 lib/setup.c:2602 lib/setup.c:2682 lib/setup.c:2694 +#: lib/setup.c:2859 lib/setup.c:4807 #, c-format msgid "Device %s is not active." msgstr "" -#: lib/setup.c:1447 +#: lib/setup.c:1448 #, c-format msgid "Underlying device for crypt device %s disappeared." msgstr "" -#: lib/setup.c:1527 +#: lib/setup.c:1528 msgid "Invalid plain crypt parameters." msgstr "" -#: lib/setup.c:1532 lib/setup.c:1982 +#: lib/setup.c:1533 lib/setup.c:1983 msgid "Invalid key size." msgstr "" -#: lib/setup.c:1537 lib/setup.c:1987 lib/setup.c:2190 +#: lib/setup.c:1538 lib/setup.c:1988 lib/setup.c:2191 msgid "UUID is not supported for this crypt type." msgstr "" -#: lib/setup.c:1542 lib/setup.c:1992 +#: lib/setup.c:1543 lib/setup.c:1993 msgid "Detached metadata device is not supported for this crypt type." msgstr "" -#: lib/setup.c:1552 lib/setup.c:1754 lib/luks2/luks2_reencrypt.c:2401 -#: src/cryptsetup.c:1358 src/cryptsetup.c:3723 +#: lib/setup.c:1553 lib/setup.c:1765 lib/luks2/luks2_reencrypt.c:2935 +#: src/cryptsetup.c:1250 src/cryptsetup.c:3072 msgid "Unsupported encryption sector size." msgstr "" -#: lib/setup.c:1560 lib/setup.c:1895 lib/setup.c:2894 +#: lib/setup.c:1561 lib/setup.c:1896 lib/setup.c:2940 msgid "Device size is not aligned to requested sector size." msgstr "" -#: lib/setup.c:1612 lib/setup.c:1732 +#: lib/setup.c:1613 lib/setup.c:1733 msgid "Can't format LUKS without device." msgstr "" -#: lib/setup.c:1618 lib/setup.c:1738 +#: lib/setup.c:1619 lib/setup.c:1739 msgid "Requested data alignment is not compatible with data offset." msgstr "" -#: lib/setup.c:1686 lib/setup.c:1882 +#: lib/setup.c:1687 lib/setup.c:1883 msgid "WARNING: Data offset is outside of currently available data device.\n" msgstr "" -#: lib/setup.c:1696 lib/setup.c:1912 lib/setup.c:1933 lib/setup.c:2202 +#: lib/setup.c:1697 lib/setup.c:1913 lib/setup.c:1934 lib/setup.c:2203 #, c-format msgid "Cannot wipe header on device %s." msgstr "" -#: lib/setup.c:1763 +#: lib/setup.c:1774 msgid "" "WARNING: The device activation will fail, dm-crypt is missing support for " "requested encryption sector size.\n" msgstr "" -#: lib/setup.c:1786 +#: lib/setup.c:1797 msgid "Volume key is too small for encryption with integrity extensions." msgstr "" -#: lib/setup.c:1856 +#: lib/setup.c:1857 #, c-format msgid "Cipher %s-%s (key size %zd bits) is not available." msgstr "" -#: lib/setup.c:1885 +#: lib/setup.c:1886 #, c-format msgid "WARNING: LUKS2 metadata size changed to % bytes.\n" msgstr "" -#: lib/setup.c:1889 +#: lib/setup.c:1890 #, c-format msgid "WARNING: LUKS2 keyslots area size changed to % bytes.\n" msgstr "" -#: lib/setup.c:1915 lib/utils_device.c:909 lib/luks1/keyencryption.c:255 -#: lib/luks2/luks2_reencrypt.c:2451 lib/luks2/luks2_reencrypt.c:3488 +#: lib/setup.c:1916 lib/utils_device.c:909 lib/luks1/keyencryption.c:255 +#: lib/luks2/luks2_reencrypt.c:3003 lib/luks2/luks2_reencrypt.c:4246 #, c-format msgid "Device %s is too small." msgstr "" -#: lib/setup.c:1926 lib/setup.c:1952 +#: lib/setup.c:1927 lib/setup.c:1953 #, c-format msgid "Cannot format device %s in use." msgstr "" -#: lib/setup.c:1929 lib/setup.c:1955 +#: lib/setup.c:1930 lib/setup.c:1956 #, c-format msgid "Cannot format device %s, permission denied." msgstr "" -#: lib/setup.c:1941 lib/setup.c:2262 +#: lib/setup.c:1942 lib/setup.c:2263 #, c-format msgid "Cannot format integrity for device %s." msgstr "" -#: lib/setup.c:1959 +#: lib/setup.c:1960 #, c-format msgid "Cannot format device %s." msgstr "" -#: lib/setup.c:1977 +#: lib/setup.c:1978 msgid "Can't format LOOPAES without device." msgstr "" -#: lib/setup.c:2022 +#: lib/setup.c:2023 msgid "Can't format VERITY without device." msgstr "" -#: lib/setup.c:2033 lib/verity/verity.c:102 +#: lib/setup.c:2034 lib/verity/verity.c:101 #, c-format msgid "Unsupported VERITY hash type %d." msgstr "" -#: lib/setup.c:2039 lib/verity/verity.c:110 +#: lib/setup.c:2040 lib/verity/verity.c:109 msgid "Unsupported VERITY block size." msgstr "" -#: lib/setup.c:2044 lib/verity/verity.c:74 +#: lib/setup.c:2045 lib/verity/verity.c:74 msgid "Unsupported VERITY hash offset." msgstr "" -#: lib/setup.c:2049 +#: lib/setup.c:2050 msgid "Unsupported VERITY FEC offset." msgstr "" -#: lib/setup.c:2073 +#: lib/setup.c:2074 msgid "Data area overlaps with hash area." msgstr "" -#: lib/setup.c:2098 +#: lib/setup.c:2099 msgid "Hash area overlaps with FEC area." msgstr "" -#: lib/setup.c:2105 +#: lib/setup.c:2106 msgid "Data area overlaps with FEC area." msgstr "" -#: lib/setup.c:2241 +#: lib/setup.c:2242 #, c-format msgid "" "WARNING: Requested tag size %d bytes differs from %s size output (%d " "bytes).\n" msgstr "" -#: lib/setup.c:2320 +#: lib/setup.c:2321 #, c-format msgid "Unknown crypt device type %s requested." msgstr "" -#: lib/setup.c:2616 lib/setup.c:2688 lib/setup.c:2701 +#: lib/setup.c:2608 lib/setup.c:2687 lib/setup.c:2700 #, c-format msgid "Unsupported parameters on device %s." msgstr "" -#: lib/setup.c:2622 lib/setup.c:2708 lib/luks2/luks2_reencrypt.c:2503 -#: lib/luks2/luks2_reencrypt.c:2847 +#: lib/setup.c:2614 lib/setup.c:2707 lib/luks2/luks2_reencrypt.c:2834 +#: lib/luks2/luks2_reencrypt.c:3068 lib/luks2/luks2_reencrypt.c:3453 #, c-format msgid "Mismatching parameters on device %s." msgstr "" -#: lib/setup.c:2728 +#: lib/setup.c:2731 msgid "Crypt devices mismatch." msgstr "" -#: lib/setup.c:2765 lib/setup.c:2770 lib/luks2/luks2_reencrypt.c:2143 -#: lib/luks2/luks2_reencrypt.c:3255 +#: lib/setup.c:2768 lib/setup.c:2773 lib/luks2/luks2_reencrypt.c:2318 +#: lib/luks2/luks2_reencrypt.c:2852 lib/luks2/luks2_reencrypt.c:3999 #, c-format msgid "Failed to reload device %s." msgstr "" -#: lib/setup.c:2776 lib/setup.c:2782 lib/luks2/luks2_reencrypt.c:2114 -#: lib/luks2/luks2_reencrypt.c:2121 +#: lib/setup.c:2779 lib/setup.c:2785 lib/luks2/luks2_reencrypt.c:2289 +#: lib/luks2/luks2_reencrypt.c:2296 lib/luks2/luks2_reencrypt.c:2861 #, c-format msgid "Failed to suspend device %s." msgstr "" -#: lib/setup.c:2788 lib/luks2/luks2_reencrypt.c:2128 -#: lib/luks2/luks2_reencrypt.c:3190 lib/luks2/luks2_reencrypt.c:3259 +#: lib/setup.c:2791 lib/luks2/luks2_reencrypt.c:2303 +#: lib/luks2/luks2_reencrypt.c:2882 lib/luks2/luks2_reencrypt.c:3912 +#: lib/luks2/luks2_reencrypt.c:4003 #, c-format msgid "Failed to resume device %s." msgstr "" -#: lib/setup.c:2803 +#: lib/setup.c:2806 #, c-format msgid "Fatal error while reloading device %s (on top of device %s)." msgstr "" -#: lib/setup.c:2806 lib/setup.c:2808 +#: lib/setup.c:2809 lib/setup.c:2811 #, c-format msgid "Failed to switch device %s to dm-error." msgstr "" -#: lib/setup.c:2885 +#: lib/setup.c:2891 msgid "Cannot resize loop device." msgstr "" -#: lib/setup.c:2958 +#: lib/setup.c:2931 +msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n" +msgstr "" + +#: lib/setup.c:2989 +msgid "Resize failed, the kernel doesn't support it." +msgstr "" + +#: lib/setup.c:3021 msgid "Do you really want to change UUID of device?" msgstr "" -#: lib/setup.c:3034 +#: lib/setup.c:3113 msgid "Header backup file does not contain compatible LUKS header." msgstr "" -#: lib/setup.c:3150 +#: lib/setup.c:3229 #, c-format msgid "Volume %s is not active." msgstr "" -#: lib/setup.c:3161 +#: lib/setup.c:3240 #, c-format msgid "Volume %s is already suspended." msgstr "" -#: lib/setup.c:3174 +#: lib/setup.c:3253 #, c-format msgid "Suspend is not supported for device %s." msgstr "" -#: lib/setup.c:3176 +#: lib/setup.c:3255 #, c-format msgid "Error during suspending device %s." msgstr "" -#: lib/setup.c:3212 +#: lib/setup.c:3290 #, c-format msgid "Resume is not supported for device %s." msgstr "" -#: lib/setup.c:3214 +#: lib/setup.c:3292 #, c-format msgid "Error during resuming device %s." msgstr "" -#: lib/setup.c:3248 lib/setup.c:3296 lib/setup.c:3366 +#: lib/setup.c:3326 lib/setup.c:3374 lib/setup.c:3444 lib/setup.c:3489 +#: src/cryptsetup.c:2207 #, c-format msgid "Volume %s is not suspended." msgstr "" -#: lib/setup.c:3381 lib/setup.c:3750 lib/setup.c:4423 lib/setup.c:4436 -#: lib/setup.c:4444 lib/setup.c:4457 lib/setup.c:4826 lib/setup.c:6008 +#: lib/setup.c:3459 lib/setup.c:3862 lib/setup.c:4584 lib/setup.c:4597 +#: lib/setup.c:4605 lib/setup.c:4618 lib/setup.c:6142 src/cryptsetup.c:1790 msgid "Volume key does not match the volume." msgstr "" -#: lib/setup.c:3428 lib/setup.c:3633 +#: lib/setup.c:3540 lib/setup.c:3745 msgid "Cannot add key slot, all slots disabled and no volume key provided." msgstr "" -#: lib/setup.c:3585 +#: lib/setup.c:3697 msgid "Failed to swap new key slot." msgstr "" -#: lib/setup.c:3771 +#: lib/setup.c:3883 #, c-format msgid "Key slot %d is invalid." msgstr "" -#: lib/setup.c:3777 src/cryptsetup.c:1701 src/cryptsetup.c:2041 -#: src/cryptsetup.c:2632 src/cryptsetup.c:2689 +#: lib/setup.c:3889 src/cryptsetup.c:1594 src/cryptsetup.c:1936 +#: src/cryptsetup.c:2540 src/cryptsetup.c:2597 #, c-format msgid "Keyslot %d is not active." msgstr "" -#: lib/setup.c:3796 +#: lib/setup.c:3908 msgid "Device header overlaps with data area." msgstr "" -#: lib/setup.c:4089 +#: lib/setup.c:4213 msgid "Reencryption in-progress. Cannot activate device." msgstr "" -#: lib/setup.c:4091 lib/luks2/luks2_json_metadata.c:2287 -#: lib/luks2/luks2_reencrypt.c:2946 +#: lib/setup.c:4215 lib/luks2/luks2_json_metadata.c:2576 +#: lib/luks2/luks2_reencrypt.c:3559 msgid "Failed to get reencryption lock." msgstr "" -#: lib/setup.c:4104 lib/luks2/luks2_reencrypt.c:2965 +#: lib/setup.c:4228 lib/luks2/luks2_reencrypt.c:3578 msgid "LUKS2 reencryption recovery failed." msgstr "" -#: lib/setup.c:4235 lib/setup.c:4500 +#: lib/setup.c:4396 lib/setup.c:4661 msgid "Device type is not properly initialized." msgstr "" -#: lib/setup.c:4283 +#: lib/setup.c:4444 #, c-format msgid "Device %s already exists." msgstr "" -#: lib/setup.c:4290 +#: lib/setup.c:4451 #, c-format msgid "Cannot use device %s, name is invalid or still in use." msgstr "" -#: lib/setup.c:4410 +#: lib/setup.c:4571 msgid "Incorrect volume key specified for plain device." msgstr "" -#: lib/setup.c:4526 +#: lib/setup.c:4687 msgid "Incorrect root hash specified for verity device." msgstr "" -#: lib/setup.c:4533 +#: lib/setup.c:4697 msgid "Root hash signature required." msgstr "" -#: lib/setup.c:4542 +#: lib/setup.c:4706 msgid "Kernel keyring missing: required for passing signature to kernel." msgstr "" -#: lib/setup.c:4559 lib/setup.c:6084 +#: lib/setup.c:4723 lib/setup.c:6218 msgid "Failed to load key in kernel keyring." msgstr "" -#: lib/setup.c:4615 +#: lib/setup.c:4779 #, c-format msgid "Could not cancel deferred remove from device %s." msgstr "" -#: lib/setup.c:4622 lib/setup.c:4638 lib/luks2/luks2_json_metadata.c:2340 -#: src/cryptsetup.c:2785 +#: lib/setup.c:4786 lib/setup.c:4802 lib/luks2/luks2_json_metadata.c:2629 +#: src/utils_reencrypt.c:116 #, c-format msgid "Device %s is still in use." msgstr "" -#: lib/setup.c:4647 +#: lib/setup.c:4811 #, c-format msgid "Invalid device %s." msgstr "" -#: lib/setup.c:4763 +#: lib/setup.c:4927 msgid "Volume key buffer too small." msgstr "" -#: lib/setup.c:4771 +#: lib/setup.c:4935 msgid "Cannot retrieve volume key for plain device." msgstr "" -#: lib/setup.c:4788 +#: lib/setup.c:4952 msgid "Cannot retrieve root hash for verity device." msgstr "" -#: lib/setup.c:4792 +#: lib/setup.c:4956 #, c-format msgid "This operation is not supported for %s crypt device." msgstr "" -#: lib/setup.c:4998 lib/setup.c:5009 +#: lib/setup.c:5130 lib/setup.c:5141 msgid "Dump operation is not supported for this device type." msgstr "" -#: lib/setup.c:5337 +#: lib/setup.c:5471 #, c-format msgid "Data offset is not multiple of %u bytes." msgstr "" -#: lib/setup.c:5622 +#: lib/setup.c:5756 #, c-format msgid "Cannot convert device %s which is still in use." msgstr "" -#: lib/setup.c:5941 +#: lib/setup.c:6075 #, c-format msgid "Failed to assign keyslot %u as the new volume key." msgstr "" -#: lib/setup.c:6014 +#: lib/setup.c:6148 msgid "Failed to initialize default LUKS2 keyslot parameters." msgstr "" -#: lib/setup.c:6020 +#: lib/setup.c:6154 #, c-format msgid "Failed to assign keyslot %d to digest." msgstr "" -#: lib/setup.c:6151 +#: lib/setup.c:6285 msgid "Kernel keyring is not supported by the kernel." msgstr "" -#: lib/setup.c:6161 lib/luks2/luks2_reencrypt.c:3062 +#: lib/setup.c:6295 lib/luks2/luks2_reencrypt.c:3774 #, c-format msgid "Failed to read passphrase from keyring (error %d)." msgstr "" -#: lib/setup.c:6185 +#: lib/setup.c:6319 msgid "Failed to acquire global memory-hard access serialization lock." msgstr "" @@ -586,8 +607,8 @@ msgstr "" msgid "Cannot seek to requested keyfile offset." msgstr "" -#: lib/utils.c:212 lib/utils.c:227 src/utils_password.c:219 -#: src/utils_password.c:231 +#: lib/utils.c:212 lib/utils.c:227 src/utils_password.c:226 +#: src/utils_password.c:238 msgid "Out of memory while reading passphrase." msgstr "" @@ -745,12 +766,12 @@ msgid "" "Locking aborted. The locking path %s/%s is unusable (%s is not a directory)." msgstr "" -#: lib/utils_wipe.c:184 src/cryptsetup_reencrypt.c:922 -#: src/cryptsetup_reencrypt.c:1010 +#: lib/utils_wipe.c:154 lib/utils_wipe.c:225 src/utils_reencrypt_luks1.c:734 +#: src/utils_reencrypt_luks1.c:832 msgid "Cannot seek to device offset." msgstr "" -#: lib/utils_wipe.c:208 +#: lib/utils_wipe.c:247 #, c-format msgid "Device wipe error, offset %." msgstr "" @@ -772,7 +793,7 @@ msgstr "" #: lib/luks1/keyencryption.c:97 lib/luks1/keymanage.c:364 #: lib/luks1/keymanage.c:674 lib/luks1/keymanage.c:1125 -#: lib/luks2/luks2_json_metadata.c:1276 lib/luks2/luks2_keyslot.c:740 +#: lib/luks2/luks2_json_metadata.c:1385 lib/luks2/luks2_keyslot.c:714 #, c-format msgid "Cannot write to device %s, permission denied." msgstr "" @@ -786,17 +807,17 @@ msgid "Failed to access temporary keystore device." msgstr "" #: lib/luks1/keyencryption.c:200 lib/luks2/luks2_keyslot_luks2.c:60 -#: lib/luks2/luks2_keyslot_luks2.c:78 lib/luks2/luks2_keyslot_reenc.c:134 +#: lib/luks2/luks2_keyslot_luks2.c:78 lib/luks2/luks2_keyslot_reenc.c:192 msgid "IO error while encrypting keyslot." msgstr "" #: lib/luks1/keyencryption.c:246 lib/luks1/keymanage.c:367 -#: lib/luks1/keymanage.c:627 lib/luks1/keymanage.c:677 lib/tcrypt/tcrypt.c:677 -#: lib/verity/verity.c:80 lib/verity/verity.c:193 lib/verity/verity_hash.c:320 +#: lib/luks1/keymanage.c:627 lib/luks1/keymanage.c:677 lib/tcrypt/tcrypt.c:680 +#: lib/verity/verity.c:80 lib/verity/verity.c:196 lib/verity/verity_hash.c:320 #: lib/verity/verity_hash.c:329 lib/verity/verity_hash.c:349 -#: lib/verity/verity_fec.c:251 lib/verity/verity_fec.c:263 -#: lib/verity/verity_fec.c:268 lib/luks2/luks2_json_metadata.c:1279 -#: src/cryptsetup_reencrypt.c:177 src/cryptsetup_reencrypt.c:189 +#: lib/verity/verity_fec.c:260 lib/verity/verity_fec.c:272 +#: lib/verity/verity_fec.c:277 lib/luks2/luks2_json_metadata.c:1388 +#: src/utils_reencrypt_luks1.c:121 src/utils_reencrypt_luks1.c:133 #, c-format msgid "Cannot open device %s." msgstr "" @@ -817,43 +838,32 @@ msgstr "" msgid "LUKS keyslot %u is invalid." msgstr "" -#: lib/luks1/keymanage.c:248 lib/luks1/keymanage.c:524 -#: lib/luks2/luks2_json_metadata.c:1107 src/cryptsetup.c:1557 -#: src/cryptsetup.c:1688 src/cryptsetup.c:1743 src/cryptsetup.c:1798 -#: src/cryptsetup.c:1863 src/cryptsetup.c:1966 src/cryptsetup.c:2030 -#: src/cryptsetup.c:2259 src/cryptsetup.c:2472 src/cryptsetup.c:2532 -#: src/cryptsetup.c:2597 src/cryptsetup.c:2741 src/cryptsetup.c:3423 -#: src/cryptsetup.c:3432 src/cryptsetup_reencrypt.c:1373 -#, c-format -msgid "Device %s is not a valid LUKS device." -msgstr "" - -#: lib/luks1/keymanage.c:266 lib/luks2/luks2_json_metadata.c:1124 +#: lib/luks1/keymanage.c:266 lib/luks2/luks2_json_metadata.c:1248 #, c-format msgid "Requested header backup file %s already exists." msgstr "" -#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1126 +#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1250 #, c-format msgid "Cannot create header backup file %s." msgstr "" -#: lib/luks1/keymanage.c:275 lib/luks2/luks2_json_metadata.c:1133 +#: lib/luks1/keymanage.c:275 lib/luks2/luks2_json_metadata.c:1257 #, c-format msgid "Cannot write header backup file %s." msgstr "" -#: lib/luks1/keymanage.c:306 lib/luks2/luks2_json_metadata.c:1185 +#: lib/luks1/keymanage.c:306 lib/luks2/luks2_json_metadata.c:1294 msgid "Backup file does not contain valid LUKS header." msgstr "" #: lib/luks1/keymanage.c:319 lib/luks1/keymanage.c:590 -#: lib/luks2/luks2_json_metadata.c:1206 +#: lib/luks2/luks2_json_metadata.c:1315 #, c-format msgid "Cannot open header backup file %s." msgstr "" -#: lib/luks1/keymanage.c:327 lib/luks2/luks2_json_metadata.c:1214 +#: lib/luks1/keymanage.c:327 lib/luks2/luks2_json_metadata.c:1323 #, c-format msgid "Cannot read header backup file %s." msgstr "" @@ -879,7 +889,7 @@ msgid "" "keyslots." msgstr "" -#: lib/luks1/keymanage.c:348 lib/luks2/luks2_json_metadata.c:1248 +#: lib/luks1/keymanage.c:348 lib/luks2/luks2_json_metadata.c:1357 msgid "" "\n" "WARNING: real device header has different UUID than backup!" @@ -951,7 +961,7 @@ msgstr "" msgid "LUKS hash %s is invalid." msgstr "" -#: lib/luks1/keymanage.c:571 src/cryptsetup.c:1243 +#: lib/luks1/keymanage.c:571 src/cryptsetup.c:1144 msgid "No known problems detected for LUKS header." msgstr "" @@ -971,8 +981,8 @@ msgid "" msgstr "" #: lib/luks1/keymanage.c:794 lib/luks1/keymanage.c:863 -#: lib/luks2/luks2_json_format.c:287 lib/luks2/luks2_json_metadata.c:1015 -#: src/cryptsetup.c:2904 +#: lib/luks2/luks2_json_format.c:287 lib/luks2/luks2_json_metadata.c:1139 +#: src/utils_reencrypt.c:471 msgid "Wrong LUKS UUID format provided." msgstr "" @@ -1005,7 +1015,7 @@ msgstr "" msgid "Key slot %d is invalid, please select keyslot between 0 and %d." msgstr "" -#: lib/luks1/keymanage.c:1129 lib/luks2/luks2_keyslot.c:744 +#: lib/luks1/keymanage.c:1129 lib/luks2/luks2_keyslot.c:718 #, c-format msgid "Cannot wipe device %s." msgstr "" @@ -1036,213 +1046,225 @@ msgstr "" msgid "Maximum TCRYPT passphrase length (%zu) exceeded." msgstr "" -#: lib/tcrypt/tcrypt.c:602 +#: lib/tcrypt/tcrypt.c:601 #, c-format msgid "PBKDF2 hash algorithm %s not available, skipping." msgstr "" -#: lib/tcrypt/tcrypt.c:618 src/cryptsetup.c:1110 +#: lib/tcrypt/tcrypt.c:620 src/cryptsetup.c:1019 msgid "Required kernel crypto interface not available." msgstr "" -#: lib/tcrypt/tcrypt.c:620 src/cryptsetup.c:1112 +#: lib/tcrypt/tcrypt.c:622 src/cryptsetup.c:1021 msgid "Ensure you have algif_skcipher kernel module loaded." msgstr "" -#: lib/tcrypt/tcrypt.c:760 +#: lib/tcrypt/tcrypt.c:763 #, c-format msgid "Activation is not supported for %d sector size." msgstr "" -#: lib/tcrypt/tcrypt.c:766 +#: lib/tcrypt/tcrypt.c:769 msgid "Kernel does not support activation for this TCRYPT legacy mode." msgstr "" -#: lib/tcrypt/tcrypt.c:797 +#: lib/tcrypt/tcrypt.c:800 #, c-format msgid "Activating TCRYPT system encryption for partition %s." msgstr "" -#: lib/tcrypt/tcrypt.c:875 +#: lib/tcrypt/tcrypt.c:883 msgid "Kernel does not support TCRYPT compatible mapping." msgstr "" -#: lib/tcrypt/tcrypt.c:1088 +#: lib/tcrypt/tcrypt.c:1096 msgid "This function is not supported without TCRYPT header load." msgstr "" -#: lib/bitlk/bitlk.c:350 +#: lib/bitlk/bitlk.c:275 #, c-format msgid "" "Unexpected metadata entry type '%u' found when parsing supported Volume " "Master Key." msgstr "" -#: lib/bitlk/bitlk.c:397 +#: lib/bitlk/bitlk.c:328 msgid "Invalid string found when parsing Volume Master Key." msgstr "" -#: lib/bitlk/bitlk.c:402 +#: lib/bitlk/bitlk.c:332 #, c-format msgid "" "Unexpected string ('%s') found when parsing supported Volume Master Key." msgstr "" -#: lib/bitlk/bitlk.c:419 +#: lib/bitlk/bitlk.c:349 #, c-format msgid "" "Unexpected metadata entry value '%u' found when parsing supported Volume " "Master Key." msgstr "" -#: lib/bitlk/bitlk.c:502 -#, c-format -msgid "Failed to read BITLK signature from %s." -msgstr "" - -#: lib/bitlk/bitlk.c:514 -msgid "Invalid or unknown signature for BITLK device." -msgstr "" - -#: lib/bitlk/bitlk.c:520 +#: lib/bitlk/bitlk.c:451 msgid "BITLK version 1 is currently not supported." msgstr "" -#: lib/bitlk/bitlk.c:526 +#: lib/bitlk/bitlk.c:457 msgid "Invalid or unknown boot signature for BITLK device." msgstr "" -#: lib/bitlk/bitlk.c:538 +#: lib/bitlk/bitlk.c:469 #, c-format msgid "Unsupported sector size %." msgstr "" -#: lib/bitlk/bitlk.c:546 +#: lib/bitlk/bitlk.c:477 #, c-format msgid "Failed to read BITLK header from %s." msgstr "" -#: lib/bitlk/bitlk.c:571 +#: lib/bitlk/bitlk.c:502 #, c-format msgid "Failed to read BITLK FVE metadata from %s." msgstr "" -#: lib/bitlk/bitlk.c:622 +#: lib/bitlk/bitlk.c:554 msgid "Unknown or unsupported encryption type." msgstr "" -#: lib/bitlk/bitlk.c:655 +#: lib/bitlk/bitlk.c:587 #, c-format msgid "Failed to read BITLK metadata entries from %s." msgstr "" -#: lib/bitlk/bitlk.c:897 +#: lib/bitlk/bitlk.c:681 +msgid "Failed to convert BITLK volume description" +msgstr "" + +#: lib/bitlk/bitlk.c:841 #, c-format msgid "Unexpected metadata entry type '%u' found when parsing external key." msgstr "" -#: lib/bitlk/bitlk.c:912 +#: lib/bitlk/bitlk.c:860 +#, c-format +msgid "BEK file GUID '%s' does not match GUID of the volume." +msgstr "" + +#: lib/bitlk/bitlk.c:864 #, c-format msgid "Unexpected metadata entry value '%u' found when parsing external key." msgstr "" -#: lib/bitlk/bitlk.c:950 +#: lib/bitlk/bitlk.c:903 #, c-format msgid "Unsupported BEK metadata version %" msgstr "" -#: lib/bitlk/bitlk.c:955 +#: lib/bitlk/bitlk.c:908 #, c-format msgid "Unexpected BEK metadata size % does not match BEK file length" msgstr "" -#: lib/bitlk/bitlk.c:980 +#: lib/bitlk/bitlk.c:933 msgid "Unexpected metadata entry found when parsing startup key." msgstr "" -#: lib/bitlk/bitlk.c:1071 +#: lib/bitlk/bitlk.c:1029 msgid "This operation is not supported." msgstr "" -#: lib/bitlk/bitlk.c:1079 +#: lib/bitlk/bitlk.c:1037 msgid "Unexpected key data size." msgstr "" -#: lib/bitlk/bitlk.c:1205 +#: lib/bitlk/bitlk.c:1163 msgid "This BITLK device is in an unsupported state and cannot be activated." msgstr "" -#: lib/bitlk/bitlk.c:1210 +#: lib/bitlk/bitlk.c:1168 #, c-format msgid "BITLK devices with type '%s' cannot be activated." msgstr "" -#: lib/bitlk/bitlk.c:1217 +#: lib/bitlk/bitlk.c:1175 msgid "Activation of partially decrypted BITLK device is not supported." msgstr "" -#: lib/bitlk/bitlk.c:1380 +#: lib/bitlk/bitlk.c:1216 +#, c-format +msgid "" +"WARNING: BitLocker volume size % does not match the underlying " +"device size %" +msgstr "" + +#: lib/bitlk/bitlk.c:1343 msgid "" "Cannot activate device, kernel dm-crypt is missing support for BITLK IV." msgstr "" -#: lib/bitlk/bitlk.c:1384 +#: lib/bitlk/bitlk.c:1347 msgid "" "Cannot activate device, kernel dm-crypt is missing support for BITLK " "Elephant diffuser." msgstr "" -#: lib/verity/verity.c:68 lib/verity/verity.c:179 +#: lib/bitlk/bitlk.c:1351 +msgid "" +"Cannot activate device, kernel dm-crypt is missing support for large sector " +"size." +msgstr "" + +#: lib/bitlk/bitlk.c:1355 +msgid "Cannot activate device, kernel dm-zero module is missing." +msgstr "" + +#: lib/verity/verity.c:68 lib/verity/verity.c:182 #, c-format msgid "Verity device %s does not use on-disk header." msgstr "" -#: lib/verity/verity.c:90 -#, c-format -msgid "Device %s is not a valid VERITY device." -msgstr "" - -#: lib/verity/verity.c:97 +#: lib/verity/verity.c:96 #, c-format msgid "Unsupported VERITY version %d." msgstr "" -#: lib/verity/verity.c:128 +#: lib/verity/verity.c:131 msgid "VERITY header corrupted." msgstr "" -#: lib/verity/verity.c:173 +#: lib/verity/verity.c:176 #, c-format msgid "Wrong VERITY UUID format provided on device %s." msgstr "" -#: lib/verity/verity.c:217 +#: lib/verity/verity.c:220 #, c-format msgid "Error during update of verity header on device %s." msgstr "" -#: lib/verity/verity.c:275 +#: lib/verity/verity.c:278 msgid "Root hash signature verification is not supported." msgstr "" -#: lib/verity/verity.c:287 +#: lib/verity/verity.c:290 msgid "Errors cannot be repaired with FEC device." msgstr "" -#: lib/verity/verity.c:289 +#: lib/verity/verity.c:292 #, c-format msgid "Found %u repairable errors with FEC device." msgstr "" -#: lib/verity/verity.c:332 +#: lib/verity/verity.c:335 msgid "Kernel does not support dm-verity mapping." msgstr "" -#: lib/verity/verity.c:336 +#: lib/verity/verity.c:339 msgid "Kernel does not support dm-verity signature option." msgstr "" -#: lib/verity/verity.c:347 +#: lib/verity/verity.c:350 msgid "Verity device detected corruption after activation." msgstr "" @@ -1316,39 +1338,44 @@ msgstr "" msgid "Failed to write parity for RS block %." msgstr "" -#: lib/verity/verity_fec.c:228 +#: lib/verity/verity_fec.c:208 msgid "Block sizes must match for FEC." msgstr "" -#: lib/verity/verity_fec.c:234 +#: lib/verity/verity_fec.c:214 msgid "Invalid number of parity bytes." msgstr "" -#: lib/verity/verity_fec.c:239 +#: lib/verity/verity_fec.c:248 msgid "Invalid FEC segment length." msgstr "" -#: lib/verity/verity_fec.c:303 +#: lib/verity/verity_fec.c:316 #, c-format msgid "Failed to determine size for device %s." msgstr "" -#: lib/integrity/integrity.c:272 lib/integrity/integrity.c:355 +#: lib/integrity/integrity.c:57 +#, c-format +msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s." +msgstr "" + +#: lib/integrity/integrity.c:277 lib/integrity/integrity.c:379 msgid "Kernel does not support dm-integrity mapping." msgstr "" -#: lib/integrity/integrity.c:278 +#: lib/integrity/integrity.c:283 msgid "Kernel does not support dm-integrity fixed metadata alignment." msgstr "" -#: lib/integrity/integrity.c:287 +#: lib/integrity/integrity.c:292 msgid "" "Kernel refuses to activate insecure recalculate option (see legacy " "activation options to override)." msgstr "" -#: lib/luks2/luks2_disk_metadata.c:393 lib/luks2/luks2_json_metadata.c:973 -#: lib/luks2/luks2_json_metadata.c:1268 +#: lib/luks2/luks2_disk_metadata.c:393 lib/luks2/luks2_json_metadata.c:1097 +#: lib/luks2/luks2_json_metadata.c:1377 #, c-format msgid "Failed to acquire write lock on device %s." msgstr "" @@ -1375,113 +1402,113 @@ msgid "" "keyslot count is very limited.\n" msgstr "" -#: lib/luks2/luks2_json_metadata.c:960 lib/luks2/luks2_json_metadata.c:1098 -#: lib/luks2/luks2_json_metadata.c:1174 lib/luks2/luks2_keyslot_luks2.c:92 +#: lib/luks2/luks2_json_metadata.c:1084 lib/luks2/luks2_json_metadata.c:1222 +#: lib/luks2/luks2_json_metadata.c:1283 lib/luks2/luks2_keyslot_luks2.c:92 #: lib/luks2/luks2_keyslot_luks2.c:114 #, c-format msgid "Failed to acquire read lock on device %s." msgstr "" -#: lib/luks2/luks2_json_metadata.c:1191 +#: lib/luks2/luks2_json_metadata.c:1300 #, c-format msgid "Forbidden LUKS2 requirements detected in backup %s." msgstr "" -#: lib/luks2/luks2_json_metadata.c:1232 +#: lib/luks2/luks2_json_metadata.c:1341 msgid "Data offset differ on device and backup, restore failed." msgstr "" -#: lib/luks2/luks2_json_metadata.c:1238 +#: lib/luks2/luks2_json_metadata.c:1347 msgid "" "Binary header with keyslot areas size differ on device and backup, restore " "failed." msgstr "" -#: lib/luks2/luks2_json_metadata.c:1245 +#: lib/luks2/luks2_json_metadata.c:1354 #, c-format msgid "Device %s %s%s%s%s" msgstr "" -#: lib/luks2/luks2_json_metadata.c:1246 +#: lib/luks2/luks2_json_metadata.c:1355 msgid "" "does not contain LUKS2 header. Replacing header can destroy data on that " "device." msgstr "" -#: lib/luks2/luks2_json_metadata.c:1247 +#: lib/luks2/luks2_json_metadata.c:1356 msgid "" "already contains LUKS2 header. Replacing header will destroy existing " "keyslots." msgstr "" -#: lib/luks2/luks2_json_metadata.c:1249 +#: lib/luks2/luks2_json_metadata.c:1358 msgid "" "\n" "WARNING: unknown LUKS2 requirements detected in real device header!\n" "Replacing header with backup may corrupt the data on that device!" msgstr "" -#: lib/luks2/luks2_json_metadata.c:1251 +#: lib/luks2/luks2_json_metadata.c:1360 msgid "" "\n" "WARNING: Unfinished offline reencryption detected on the device!\n" "Replacing header with backup may corrupt data." msgstr "" -#: lib/luks2/luks2_json_metadata.c:1349 +#: lib/luks2/luks2_json_metadata.c:1458 #, c-format msgid "Ignored unknown flag %s." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2054 lib/luks2/luks2_reencrypt.c:1843 +#: lib/luks2/luks2_json_metadata.c:2343 lib/luks2/luks2_reencrypt.c:2018 #, c-format msgid "Missing key for dm-crypt segment %u" msgstr "" -#: lib/luks2/luks2_json_metadata.c:2066 lib/luks2/luks2_reencrypt.c:1857 +#: lib/luks2/luks2_json_metadata.c:2355 lib/luks2/luks2_reencrypt.c:2032 msgid "Failed to set dm-crypt segment." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2072 lib/luks2/luks2_reencrypt.c:1863 +#: lib/luks2/luks2_json_metadata.c:2361 lib/luks2/luks2_reencrypt.c:2038 msgid "Failed to set dm-linear segment." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2199 +#: lib/luks2/luks2_json_metadata.c:2488 msgid "Unsupported device integrity configuration." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2285 +#: lib/luks2/luks2_json_metadata.c:2574 msgid "Reencryption in-progress. Cannot deactivate device." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2296 lib/luks2/luks2_reencrypt.c:3300 +#: lib/luks2/luks2_json_metadata.c:2585 lib/luks2/luks2_reencrypt.c:4049 #, c-format msgid "Failed to replace suspended device %s with dm-error target." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2376 +#: lib/luks2/luks2_json_metadata.c:2665 msgid "Failed to read LUKS2 requirements." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2383 +#: lib/luks2/luks2_json_metadata.c:2672 msgid "Unmet LUKS2 requirements detected." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2391 +#: lib/luks2/luks2_json_metadata.c:2680 msgid "" "Operation incompatible with device marked for legacy reencryption. Aborting." msgstr "" -#: lib/luks2/luks2_json_metadata.c:2393 +#: lib/luks2/luks2_json_metadata.c:2682 msgid "" "Operation incompatible with device marked for LUKS2 reencryption. Aborting." msgstr "" -#: lib/luks2/luks2_keyslot.c:554 lib/luks2/luks2_keyslot.c:591 +#: lib/luks2/luks2_keyslot.c:563 lib/luks2/luks2_keyslot.c:600 msgid "Not enough available memory to open a keyslot." msgstr "" -#: lib/luks2/luks2_keyslot.c:556 lib/luks2/luks2_keyslot.c:593 +#: lib/luks2/luks2_keyslot.c:565 lib/luks2/luks2_keyslot.c:602 msgid "Keyslot open failed." msgstr "" @@ -1490,974 +1517,1044 @@ msgstr "" msgid "Cannot use %s-%s cipher for keyslot encryption." msgstr "" -#: lib/luks2/luks2_keyslot_luks2.c:485 +#: lib/luks2/luks2_keyslot_luks2.c:496 msgid "No space for new keyslot." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:482 +#: lib/luks2/luks2_keyslot_reenc.c:443 lib/luks2/luks2_reencrypt.c:2614 +#, c-format +msgid "Hash algorithm %s is not available." +msgstr "" + +#: lib/luks2/luks2_keyslot_reenc.c:593 +msgid "Invalid reencryption resilience mode change requested." +msgstr "" + +#: lib/luks2/luks2_keyslot_reenc.c:710 +#, c-format +msgid "" +"Can not update resilience type. New type only provides % bytes, " +"required space is: % bytes." +msgstr "" + +#: lib/luks2/luks2_keyslot_reenc.c:720 +msgid "Failed to refresh reencryption verification digest." +msgstr "" + +#: lib/luks2/luks2_luks1_convert.c:514 #, c-format msgid "Cannot check status of device with uuid: %s." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:508 +#: lib/luks2/luks2_luks1_convert.c:540 msgid "Unable to convert header with LUKSMETA additional metadata." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:548 +#: lib/luks2/luks2_luks1_convert.c:571 +#, c-format +msgid "Unable to use cipher specification %s-%s for LUKS2." +msgstr "" + +#: lib/luks2/luks2_luks1_convert.c:586 msgid "Unable to move keyslot area. Not enough space." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:599 +#: lib/luks2/luks2_luks1_convert.c:637 msgid "Unable to move keyslot area. LUKS2 keyslots area too small." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:605 lib/luks2/luks2_luks1_convert.c:889 +#: lib/luks2/luks2_luks1_convert.c:643 lib/luks2/luks2_luks1_convert.c:935 msgid "Unable to move keyslot area." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:697 +#: lib/luks2/luks2_luks1_convert.c:735 msgid "" "Cannot convert to LUKS1 format - default segment encryption sector size is " "not 512 bytes." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:705 +#: lib/luks2/luks2_luks1_convert.c:743 msgid "" "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:717 +#: lib/luks2/luks2_luks1_convert.c:755 #, c-format msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:725 +#: lib/luks2/luks2_luks1_convert.c:763 #, c-format msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:739 +#: lib/luks2/luks2_luks1_convert.c:777 #, c-format msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:744 +#: lib/luks2/luks2_luks1_convert.c:782 #, c-format msgid "" "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still " "active." msgstr "" -#: lib/luks2/luks2_luks1_convert.c:749 +#: lib/luks2/luks2_luks1_convert.c:787 #, c-format msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible." msgstr "" -#: lib/luks2/luks2_reencrypt.c:993 +#: lib/luks2/luks2_reencrypt.c:1110 #, c-format msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)." msgstr "" -#: lib/luks2/luks2_reencrypt.c:998 +#: lib/luks2/luks2_reencrypt.c:1115 #, c-format msgid "Device size must be multiple of calculated zone alignment (%zu bytes)." msgstr "" -#: lib/luks2/luks2_reencrypt.c:1042 -#, c-format -msgid "Unsupported resilience mode %s" -msgstr "" - -#: lib/luks2/luks2_reencrypt.c:1259 lib/luks2/luks2_reencrypt.c:1414 -#: lib/luks2/luks2_reencrypt.c:1497 lib/luks2/luks2_reencrypt.c:1531 -#: lib/luks2/luks2_reencrypt.c:3140 +#: lib/luks2/luks2_reencrypt.c:1322 lib/luks2/luks2_reencrypt.c:1508 +#: lib/luks2/luks2_reencrypt.c:1591 lib/luks2/luks2_reencrypt.c:1633 +#: lib/luks2/luks2_reencrypt.c:3844 msgid "Failed to initialize old segment storage wrapper." msgstr "" -#: lib/luks2/luks2_reencrypt.c:1273 lib/luks2/luks2_reencrypt.c:1392 +#: lib/luks2/luks2_reencrypt.c:1336 lib/luks2/luks2_reencrypt.c:1486 msgid "Failed to initialize new segment storage wrapper." msgstr "" -#: lib/luks2/luks2_reencrypt.c:1441 +#: lib/luks2/luks2_reencrypt.c:1463 lib/luks2/luks2_reencrypt.c:3856 +msgid "Failed to initialize hotzone protection." +msgstr "" + +#: lib/luks2/luks2_reencrypt.c:1535 msgid "Failed to read checksums for current hotzone." msgstr "" -#: lib/luks2/luks2_reencrypt.c:1448 lib/luks2/luks2_reencrypt.c:3148 +#: lib/luks2/luks2_reencrypt.c:1542 lib/luks2/luks2_reencrypt.c:3870 #, c-format msgid "Failed to read hotzone area starting at %." msgstr "" -#: lib/luks2/luks2_reencrypt.c:1467 +#: lib/luks2/luks2_reencrypt.c:1561 #, c-format msgid "Failed to decrypt sector %zu." msgstr "" -#: lib/luks2/luks2_reencrypt.c:1473 +#: lib/luks2/luks2_reencrypt.c:1567 #, c-format msgid "Failed to recover sector %zu." msgstr "" -#: lib/luks2/luks2_reencrypt.c:1956 +#: lib/luks2/luks2_reencrypt.c:2131 #, c-format msgid "" "Source and target device sizes don't match. Source %, target: " "%." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2054 +#: lib/luks2/luks2_reencrypt.c:2229 #, c-format msgid "Failed to activate hotzone device %s." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2071 +#: lib/luks2/luks2_reencrypt.c:2246 #, c-format msgid "Failed to activate overlay device %s with actual origin table." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2078 +#: lib/luks2/luks2_reencrypt.c:2253 #, c-format msgid "Failed to load new mapping for device %s." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2149 +#: lib/luks2/luks2_reencrypt.c:2324 msgid "Failed to refresh reencryption devices stack." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2309 +#: lib/luks2/luks2_reencrypt.c:2496 msgid "Failed to set new keyslots area size." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2413 +#: lib/luks2/luks2_reencrypt.c:2632 #, c-format msgid "" -"Data shift is not aligned to requested encryption sector size (% " -"bytes)." +"Data shift value is not aligned to encryption sector size (% bytes)." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2434 +#: lib/luks2/luks2_reencrypt.c:2663 +#, c-format +msgid "Unsupported resilience mode %s" +msgstr "" + +#: lib/luks2/luks2_reencrypt.c:2736 +msgid "Moved segment size can not be greater than data shift value." +msgstr "" + +#: lib/luks2/luks2_reencrypt.c:2796 #, c-format msgid "" -"Data device is not aligned to requested encryption sector size (% " -"bytes)." +"Moved segment too large. Requested size %, available space for: " +"%." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2455 +#: lib/luks2/luks2_reencrypt.c:2880 +msgid "Failed to clear table." +msgstr "" + +#: lib/luks2/luks2_reencrypt.c:2966 +msgid "Reduced data size is larger than real device size." +msgstr "" + +#: lib/luks2/luks2_reencrypt.c:2973 +#, c-format +msgid "Data device is not aligned to encryption sector size (% bytes)." +msgstr "" + +#: lib/luks2/luks2_reencrypt.c:3007 #, c-format msgid "" "Data shift (% sectors) is less than future data offset (% " "sectors)." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2461 lib/luks2/luks2_reencrypt.c:2889 -#: lib/luks2/luks2_reencrypt.c:2910 +#: lib/luks2/luks2_reencrypt.c:3014 lib/luks2/luks2_reencrypt.c:3502 +#: lib/luks2/luks2_reencrypt.c:3523 #, c-format msgid "Failed to open %s in exclusive mode (already mapped or mounted)." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2629 +#: lib/luks2/luks2_reencrypt.c:3203 msgid "Device not marked for LUKS2 reencryption." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2635 lib/luks2/luks2_reencrypt.c:3415 +#: lib/luks2/luks2_reencrypt.c:3220 lib/luks2/luks2_reencrypt.c:4173 msgid "Failed to load LUKS2 reencryption context." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2715 +#: lib/luks2/luks2_reencrypt.c:3300 msgid "Failed to get reencryption state." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2719 +#: lib/luks2/luks2_reencrypt.c:3304 lib/luks2/luks2_reencrypt.c:3618 msgid "Device is not in reencryption." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2726 +#: lib/luks2/luks2_reencrypt.c:3311 lib/luks2/luks2_reencrypt.c:3625 msgid "Reencryption process is already running." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2728 +#: lib/luks2/luks2_reencrypt.c:3313 lib/luks2/luks2_reencrypt.c:3627 msgid "Failed to acquire reencryption lock." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2746 +#: lib/luks2/luks2_reencrypt.c:3331 msgid "Cannot proceed with reencryption. Run reencryption recovery first." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2860 +#: lib/luks2/luks2_reencrypt.c:3466 msgid "Active device size and requested reencryption size don't match." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2874 +#: lib/luks2/luks2_reencrypt.c:3480 msgid "Illegal device size requested in reencryption parameters." msgstr "" -#: lib/luks2/luks2_reencrypt.c:2944 +#: lib/luks2/luks2_reencrypt.c:3557 msgid "Reencryption in-progress. Cannot perform recovery." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3016 +#: lib/luks2/luks2_reencrypt.c:3724 msgid "LUKS2 reencryption already initialized in metadata." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3023 +#: lib/luks2/luks2_reencrypt.c:3731 msgid "Failed to initialize LUKS2 reencryption in metadata." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3114 +#: lib/luks2/luks2_reencrypt.c:3826 msgid "Failed to set device segments for next reencryption hotzone." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3156 +#: lib/luks2/luks2_reencrypt.c:3878 msgid "Failed to write reencryption resilience metadata." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3163 +#: lib/luks2/luks2_reencrypt.c:3885 msgid "Decryption failed." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3168 +#: lib/luks2/luks2_reencrypt.c:3890 #, c-format msgid "Failed to write hotzone area starting at %." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3173 +#: lib/luks2/luks2_reencrypt.c:3895 msgid "Failed to sync data." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3181 +#: lib/luks2/luks2_reencrypt.c:3903 msgid "Failed to update metadata after current reencryption hotzone completed." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3248 +#: lib/luks2/luks2_reencrypt.c:3992 msgid "Failed to write LUKS2 metadata." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3271 -msgid "Failed to wipe backup segment data." +#: lib/luks2/luks2_reencrypt.c:4015 +msgid "Failed to wipe unused data device area." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3284 -msgid "Failed to disable reencryption requirement flag." +#: lib/luks2/luks2_reencrypt.c:4021 +#, c-format +msgid "Failed to remove unused (unbound) keyslot %d." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3292 +#: lib/luks2/luks2_reencrypt.c:4031 +msgid "Failed to remove reencryption keyslot." +msgstr "" + +#: lib/luks2/luks2_reencrypt.c:4041 #, c-format msgid "" "Fatal error while reencrypting chunk starting at %, % " "sectors long." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3296 +#: lib/luks2/luks2_reencrypt.c:4045 msgid "Online reencryption failed." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3301 +#: lib/luks2/luks2_reencrypt.c:4050 msgid "Do not resume the device unless replaced with error target manually." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3353 +#: lib/luks2/luks2_reencrypt.c:4104 msgid "Cannot proceed with reencryption. Unexpected reencryption status." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3359 +#: lib/luks2/luks2_reencrypt.c:4110 msgid "Missing or invalid reencrypt context." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3366 +#: lib/luks2/luks2_reencrypt.c:4117 msgid "Failed to initialize reencryption device stack." msgstr "" -#: lib/luks2/luks2_reencrypt.c:3385 lib/luks2/luks2_reencrypt.c:3428 +#: lib/luks2/luks2_reencrypt.c:4139 lib/luks2/luks2_reencrypt.c:4186 msgid "Failed to update reencryption context." msgstr "" -#: src/cryptsetup.c:108 -msgid "Can't do passphrase verification on non-tty inputs." +#: lib/luks2/luks2_reencrypt_digest.c:396 +msgid "Reencryption metadata is invalid." msgstr "" -#: src/cryptsetup.c:171 +#: src/cryptsetup.c:85 msgid "Keyslot encryption parameters can be set only for LUKS2 device." msgstr "" -#: src/cryptsetup.c:198 +#: src/cryptsetup.c:108 #, c-format msgid "Enter token PIN:" msgstr "" -#: src/cryptsetup.c:200 +#: src/cryptsetup.c:110 #, c-format msgid "Enter token %d PIN:" msgstr "" -#: src/cryptsetup.c:245 src/cryptsetup.c:1057 src/cryptsetup.c:1401 -#: src/cryptsetup.c:3288 src/cryptsetup_reencrypt.c:700 -#: src/cryptsetup_reencrypt.c:770 +#: src/cryptsetup.c:159 src/cryptsetup.c:966 src/cryptsetup.c:1293 +#: src/utils_reencrypt.c:1040 src/utils_reencrypt_luks1.c:517 +#: src/utils_reencrypt_luks1.c:580 msgid "No known cipher specification pattern detected." msgstr "" -#: src/cryptsetup.c:253 +#: src/cryptsetup.c:167 msgid "" "WARNING: The --hash parameter is being ignored in plain mode with keyfile " "specified.\n" msgstr "" -#: src/cryptsetup.c:261 +#: src/cryptsetup.c:175 msgid "" "WARNING: The --keyfile-size option is being ignored, the read size is the " "same as the encryption key size.\n" msgstr "" -#: src/cryptsetup.c:301 +#: src/cryptsetup.c:215 #, c-format msgid "" "Detected device signature(s) on %s. Proceeding further may damage existing " "data." msgstr "" -#: src/cryptsetup.c:307 src/cryptsetup.c:1197 src/cryptsetup.c:1253 -#: src/cryptsetup.c:1378 src/cryptsetup.c:1451 src/cryptsetup.c:2099 -#: src/cryptsetup.c:2805 src/cryptsetup.c:2927 src/integritysetup.c:176 +#: src/cryptsetup.c:221 src/cryptsetup.c:1040 src/cryptsetup.c:1088 +#: src/cryptsetup.c:1154 src/cryptsetup.c:1270 src/cryptsetup.c:1343 +#: src/cryptsetup.c:1994 src/integritysetup.c:187 src/utils_reencrypt.c:138 +#: src/utils_reencrypt.c:271 msgid "Operation aborted.\n" msgstr "" -#: src/cryptsetup.c:375 +#: src/cryptsetup.c:294 msgid "Option --key-file is required." msgstr "" -#: src/cryptsetup.c:426 +#: src/cryptsetup.c:345 msgid "Enter VeraCrypt PIM: " msgstr "" -#: src/cryptsetup.c:435 +#: src/cryptsetup.c:354 msgid "Invalid PIM value: parse error." msgstr "" -#: src/cryptsetup.c:438 +#: src/cryptsetup.c:357 msgid "Invalid PIM value: 0." msgstr "" -#: src/cryptsetup.c:441 +#: src/cryptsetup.c:360 msgid "Invalid PIM value: outside of range." msgstr "" -#: src/cryptsetup.c:464 +#: src/cryptsetup.c:383 msgid "No device header detected with this passphrase." msgstr "" -#: src/cryptsetup.c:537 +#: src/cryptsetup.c:456 src/cryptsetup.c:632 #, c-format msgid "Device %s is not a valid BITLK device." msgstr "" -#: src/cryptsetup.c:545 +#: src/cryptsetup.c:464 msgid "" "Cannot determine volume key size for BITLK, please use --key-size option." msgstr "" -#: src/cryptsetup.c:588 +#: src/cryptsetup.c:506 msgid "" "Header dump with volume key is sensitive information\n" "which allows access to encrypted partition without passphrase.\n" "This dump should be always stored encrypted on safe place." msgstr "" -#: src/cryptsetup.c:661 src/cryptsetup.c:2125 +#: src/cryptsetup.c:573 src/cryptsetup.c:2019 msgid "" "The header dump with volume key is sensitive information\n" "that allows access to encrypted partition without a passphrase.\n" "This dump should be stored encrypted in a safe place." msgstr "" -#: src/cryptsetup.c:756 src/veritysetup.c:318 src/integritysetup.c:313 +#: src/cryptsetup.c:664 src/veritysetup.c:321 src/integritysetup.c:400 #, c-format msgid "Device %s is still active and scheduled for deferred removal.\n" msgstr "" -#: src/cryptsetup.c:790 +#: src/cryptsetup.c:698 msgid "" "Resize of active device requires volume key in keyring but --disable-keyring " "option is set." msgstr "" -#: src/cryptsetup.c:936 +#: src/cryptsetup.c:845 msgid "Benchmark interrupted." msgstr "" -#: src/cryptsetup.c:957 +#: src/cryptsetup.c:866 #, c-format msgid "PBKDF2-%-9s N/A\n" msgstr "" -#: src/cryptsetup.c:959 +#: src/cryptsetup.c:868 #, c-format msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n" msgstr "" -#: src/cryptsetup.c:973 +#: src/cryptsetup.c:882 #, c-format msgid "%-10s N/A\n" msgstr "" -#: src/cryptsetup.c:975 +#: src/cryptsetup.c:884 #, c-format msgid "" "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit " "key (requested %u ms time)\n" msgstr "" -#: src/cryptsetup.c:999 +#: src/cryptsetup.c:908 msgid "Result of benchmark is not reliable." msgstr "" -#: src/cryptsetup.c:1049 +#: src/cryptsetup.c:958 msgid "# Tests are approximate using memory only (no storage IO).\n" msgstr "" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1069 +#: src/cryptsetup.c:978 #, c-format msgid "#%*s Algorithm | Key | Encryption | Decryption\n" msgstr "" -#: src/cryptsetup.c:1073 +#: src/cryptsetup.c:982 #, c-format msgid "Cipher %s (with %i bits key) is not available." msgstr "" #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. -#: src/cryptsetup.c:1092 +#: src/cryptsetup.c:1001 msgid "# Algorithm | Key | Encryption | Decryption\n" msgstr "" -#: src/cryptsetup.c:1103 +#: src/cryptsetup.c:1012 msgid "N/A" msgstr "" -#: src/cryptsetup.c:1190 +#: src/cryptsetup.c:1037 msgid "" -"Seems device does not require reencryption recovery.\n" -"Do you want to proceed anyway?" +"Unprotected LUKS2 reencryption metadata detected. Please verify the " +"reencryption operation is desirable (see luksDump output)\n" +"and continue (upgrade metadata) only if you acknowledge the operation as " +"genuine." msgstr "" -#: src/cryptsetup.c:1196 +#: src/cryptsetup.c:1043 +msgid "Enter passphrase to protect and upgrade reencryption metadata: " +msgstr "" + +#: src/cryptsetup.c:1087 msgid "Really proceed with LUKS2 reencryption recovery?" msgstr "" -#: src/cryptsetup.c:1204 +#: src/cryptsetup.c:1096 +msgid "Enter passphrase to verify reencryption metadata digest: " +msgstr "" + +#: src/cryptsetup.c:1098 msgid "Enter passphrase for reencryption recovery: " msgstr "" -#: src/cryptsetup.c:1252 +#: src/cryptsetup.c:1153 msgid "Really try to repair LUKS device header?" msgstr "" -#: src/cryptsetup.c:1277 src/integritysetup.c:90 +#: src/cryptsetup.c:1177 src/integritysetup.c:89 src/integritysetup.c:238 +msgid "" +"\n" +"Wipe interrupted." +msgstr "" + +#: src/cryptsetup.c:1182 src/integritysetup.c:94 src/integritysetup.c:275 msgid "" "Wiping device to initialize integrity checksum.\n" "You can interrupt this by pressing CTRL+c (rest of not wiped device will " "contain invalid checksum).\n" msgstr "" -#: src/cryptsetup.c:1299 src/integritysetup.c:112 +#: src/cryptsetup.c:1204 src/integritysetup.c:116 #, c-format msgid "Cannot deactivate temporary device %s." msgstr "" -#: src/cryptsetup.c:1363 +#: src/cryptsetup.c:1255 msgid "Integrity option can be used only for LUKS2 format." msgstr "" -#: src/cryptsetup.c:1368 src/cryptsetup.c:1428 +#: src/cryptsetup.c:1260 src/cryptsetup.c:1320 msgid "Unsupported LUKS2 metadata size options." msgstr "" -#: src/cryptsetup.c:1377 +#: src/cryptsetup.c:1269 msgid "Header file does not exist, do you want to create it?" msgstr "" -#: src/cryptsetup.c:1385 +#: src/cryptsetup.c:1277 #, c-format msgid "Cannot create header file %s." msgstr "" -#: src/cryptsetup.c:1408 src/integritysetup.c:138 src/integritysetup.c:146 -#: src/integritysetup.c:155 src/integritysetup.c:230 src/integritysetup.c:238 -#: src/integritysetup.c:248 +#: src/cryptsetup.c:1300 src/integritysetup.c:144 src/integritysetup.c:152 +#: src/integritysetup.c:161 src/integritysetup.c:315 src/integritysetup.c:323 +#: src/integritysetup.c:333 msgid "No known integrity specification pattern detected." msgstr "" -#: src/cryptsetup.c:1421 +#: src/cryptsetup.c:1313 #, c-format msgid "Cannot use %s as on-disk header." msgstr "" -#: src/cryptsetup.c:1445 src/integritysetup.c:170 +#: src/cryptsetup.c:1337 src/integritysetup.c:181 #, c-format msgid "This will overwrite data on %s irrevocably." msgstr "" -#: src/cryptsetup.c:1478 src/cryptsetup.c:1814 src/cryptsetup.c:1879 -#: src/cryptsetup.c:1981 src/cryptsetup.c:2047 src/cryptsetup_reencrypt.c:530 +#: src/cryptsetup.c:1370 src/cryptsetup.c:1707 src/cryptsetup.c:1772 +#: src/cryptsetup.c:1876 src/cryptsetup.c:1942 src/utils_reencrypt_luks1.c:443 msgid "Failed to set pbkdf parameters." msgstr "" -#: src/cryptsetup.c:1563 +#: src/cryptsetup.c:1455 msgid "Reduced data offset is allowed only for detached LUKS header." msgstr "" -#: src/cryptsetup.c:1574 src/cryptsetup.c:1885 +#: src/cryptsetup.c:1466 src/cryptsetup.c:1778 msgid "" "Cannot determine volume key size for LUKS without keyslots, please use --key-" "size option." msgstr "" -#: src/cryptsetup.c:1619 +#: src/cryptsetup.c:1512 msgid "Device activated but cannot make flags persistent." msgstr "" -#: src/cryptsetup.c:1698 src/cryptsetup.c:1766 +#: src/cryptsetup.c:1591 src/cryptsetup.c:1659 #, c-format msgid "Keyslot %d is selected for deletion." msgstr "" -#: src/cryptsetup.c:1710 src/cryptsetup.c:1770 +#: src/cryptsetup.c:1603 src/cryptsetup.c:1663 msgid "" "This is the last keyslot. Device will become unusable after purging this key." msgstr "" -#: src/cryptsetup.c:1711 +#: src/cryptsetup.c:1604 msgid "Enter any remaining passphrase: " msgstr "" -#: src/cryptsetup.c:1712 src/cryptsetup.c:1772 +#: src/cryptsetup.c:1605 src/cryptsetup.c:1665 msgid "Operation aborted, the keyslot was NOT wiped.\n" msgstr "" -#: src/cryptsetup.c:1748 +#: src/cryptsetup.c:1641 msgid "Enter passphrase to be deleted: " msgstr "" -#: src/cryptsetup.c:1828 src/cryptsetup.c:1900 src/cryptsetup.c:1934 +#: src/cryptsetup.c:1691 src/cryptsetup.c:1925 src/cryptsetup.c:2505 +#: src/cryptsetup.c:2649 +#, c-format +msgid "Device %s is not a valid LUKS2 device." +msgstr "" + +#: src/cryptsetup.c:1721 src/cryptsetup.c:1795 src/cryptsetup.c:1829 msgid "Enter new passphrase for key slot: " msgstr "" -#: src/cryptsetup.c:1917 src/cryptsetup_reencrypt.c:1328 +#: src/cryptsetup.c:1812 src/utils_reencrypt_luks1.c:1149 #, c-format msgid "Enter any existing passphrase: " msgstr "" -#: src/cryptsetup.c:1985 +#: src/cryptsetup.c:1880 msgid "Enter passphrase to be changed: " msgstr "" -#: src/cryptsetup.c:2001 src/cryptsetup_reencrypt.c:1314 +#: src/cryptsetup.c:1896 src/utils_reencrypt_luks1.c:1135 msgid "Enter new passphrase: " msgstr "" -#: src/cryptsetup.c:2051 +#: src/cryptsetup.c:1946 msgid "Enter passphrase for keyslot to be converted: " msgstr "" -#: src/cryptsetup.c:2075 +#: src/cryptsetup.c:1970 msgid "Only one device argument for isLuks operation is supported." msgstr "" -#: src/cryptsetup.c:2190 +#: src/cryptsetup.c:2078 #, c-format msgid "Keyslot %d does not contain unbound key." msgstr "" -#: src/cryptsetup.c:2195 +#: src/cryptsetup.c:2083 msgid "" "The header dump with unbound key is sensitive information.\n" "This dump should be stored encrypted in a safe place." msgstr "" -#: src/cryptsetup.c:2286 src/cryptsetup.c:2314 +#: src/cryptsetup.c:2169 src/cryptsetup.c:2198 #, c-format msgid "%s is not active %s device name." msgstr "" -#: src/cryptsetup.c:2309 +#: src/cryptsetup.c:2193 #, c-format msgid "%s is not active LUKS device name or header is missing." msgstr "" -#: src/cryptsetup.c:2347 src/cryptsetup.c:2366 +#: src/cryptsetup.c:2255 src/cryptsetup.c:2274 msgid "Option --header-backup-file is required." msgstr "" -#: src/cryptsetup.c:2397 +#: src/cryptsetup.c:2305 #, c-format msgid "%s is not cryptsetup managed device." msgstr "" -#: src/cryptsetup.c:2408 +#: src/cryptsetup.c:2316 #, c-format msgid "Refresh is not supported for device type %s" msgstr "" -#: src/cryptsetup.c:2454 +#: src/cryptsetup.c:2362 #, c-format msgid "Unrecognized metadata device type %s." msgstr "" -#: src/cryptsetup.c:2456 +#: src/cryptsetup.c:2364 msgid "Command requires device and mapped name as arguments." msgstr "" -#: src/cryptsetup.c:2477 +#: src/cryptsetup.c:2385 #, c-format msgid "" "This operation will erase all keyslots on device %s.\n" "Device will become unusable after this operation." msgstr "" -#: src/cryptsetup.c:2484 +#: src/cryptsetup.c:2392 msgid "Operation aborted, keyslots were NOT wiped.\n" msgstr "" -#: src/cryptsetup.c:2523 +#: src/cryptsetup.c:2431 msgid "Invalid LUKS type, only luks1 and luks2 are supported." msgstr "" -#: src/cryptsetup.c:2539 +#: src/cryptsetup.c:2447 #, c-format msgid "Device is already %s type." msgstr "" -#: src/cryptsetup.c:2546 +#: src/cryptsetup.c:2454 #, c-format msgid "This operation will convert %s to %s format.\n" msgstr "" -#: src/cryptsetup.c:2549 +#: src/cryptsetup.c:2457 msgid "Operation aborted, device was NOT converted.\n" msgstr "" -#: src/cryptsetup.c:2589 +#: src/cryptsetup.c:2497 msgid "Option --priority, --label or --subsystem is missing." msgstr "" -#: src/cryptsetup.c:2623 src/cryptsetup.c:2660 src/cryptsetup.c:2680 +#: src/cryptsetup.c:2531 src/cryptsetup.c:2568 src/cryptsetup.c:2588 #, c-format msgid "Token %d is invalid." msgstr "" -#: src/cryptsetup.c:2626 src/cryptsetup.c:2683 +#: src/cryptsetup.c:2534 src/cryptsetup.c:2591 #, c-format msgid "Token %d in use." msgstr "" -#: src/cryptsetup.c:2638 +#: src/cryptsetup.c:2546 #, c-format msgid "Failed to add luks2-keyring token %d." msgstr "" -#: src/cryptsetup.c:2646 src/cryptsetup.c:2709 +#: src/cryptsetup.c:2554 src/cryptsetup.c:2617 #, c-format msgid "Failed to assign token %d to keyslot %d." msgstr "" -#: src/cryptsetup.c:2663 +#: src/cryptsetup.c:2571 #, c-format msgid "Token %d is not in use." msgstr "" -#: src/cryptsetup.c:2700 +#: src/cryptsetup.c:2608 msgid "Failed to import token from file." msgstr "" -#: src/cryptsetup.c:2725 +#: src/cryptsetup.c:2633 #, c-format msgid "Failed to get token %d for export." msgstr "" +#: src/cryptsetup.c:2682 +msgid "" +"Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only " +"for TCRYPT device." +msgstr "" + +#: src/cryptsetup.c:2685 +msgid "" +"Option --veracrypt or --disable-veracrypt is supported only for TCRYPT " +"device type." +msgstr "" + +#: src/cryptsetup.c:2688 +msgid "" +"Option --veracrypt-pim is supported only for VeraCrypt compatible devices." +msgstr "" + +#: src/cryptsetup.c:2692 +msgid "" +"Option --veracrypt-query-pim is supported only for VeraCrypt compatible " +"devices." +msgstr "" + +#: src/cryptsetup.c:2694 +msgid "" +"The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." +msgstr "" + +#: src/cryptsetup.c:2703 +msgid "Option --persistent is not allowed with --test-passphrase." +msgstr "" + +#: src/cryptsetup.c:2706 +msgid "Options --refresh and --test-passphrase are mutually exclusive." +msgstr "" + +#: src/cryptsetup.c:2709 +msgid "Option --shared is allowed only for open of plain device." +msgstr "" + +#: src/cryptsetup.c:2712 +msgid "Option --skip is supported only for open of plain and loopaes devices." +msgstr "" + +#: src/cryptsetup.c:2715 +msgid "" +"Option --offset with open action is only supported for plain and loopaes " +"devices." +msgstr "" + +#: src/cryptsetup.c:2718 +msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." +msgstr "" + +#: src/cryptsetup.c:2722 +msgid "" +"Sector size option with open action is supported only for plain devices." +msgstr "" + +#: src/cryptsetup.c:2726 +msgid "" +"Large IV sectors option is supported only for opening plain type device with " +"sector size larger than 512 bytes." +msgstr "" + +#: src/cryptsetup.c:2730 +msgid "" +"Option --test-passphrase is allowed only for open of LUKS, TCRYPT and BITLK " +"devices." +msgstr "" + +#: src/cryptsetup.c:2733 src/cryptsetup.c:2756 +msgid "Options --device-size and --size cannot be combined." +msgstr "" + +#: src/cryptsetup.c:2736 +msgid "Option --unbound is allowed only for open of luks device." +msgstr "" + +#: src/cryptsetup.c:2739 +msgid "Option --unbound cannot be used without --test-passphrase." +msgstr "" + +#: src/cryptsetup.c:2748 src/veritysetup.c:664 src/integritysetup.c:755 +msgid "" +"Options --cancel-deferred and --deferred cannot be used at the same time." +msgstr "" + +#: src/cryptsetup.c:2764 +msgid "Options --reduce-device-size and --data-size cannot be combined." +msgstr "" + +#: src/cryptsetup.c:2767 +msgid "Option --active-name can be set only for LUKS2 device." +msgstr "" + +#: src/cryptsetup.c:2770 +msgid "Options --active-name and --force-offline-reencrypt cannot be combined." +msgstr "" + +#: src/cryptsetup.c:2778 src/cryptsetup.c:2808 +msgid "Keyslot specification is required." +msgstr "" + +#: src/cryptsetup.c:2786 +msgid "Options --align-payload and --offset cannot be combined." +msgstr "" + #: src/cryptsetup.c:2789 -#, c-format -msgid "Auto-detected active dm device '%s' for data device %s.\n" -msgstr "" - -#: src/cryptsetup.c:2793 -#, c-format -msgid "Device %s is not a block device.\n" -msgstr "" - -#: src/cryptsetup.c:2795 -#, c-format -msgid "Failed to auto-detect device %s holders." -msgstr "" - -#: src/cryptsetup.c:2799 -#, c-format msgid "" -"Unable to decide if device %s is activated or not.\n" -"Are you sure you want to proceed with reencryption in offline mode?\n" -"It may lead to data corruption if the device is actually activated.\n" -"To run reencryption in online mode, use --active-name parameter instead.\n" +"Option --integrity-no-wipe can be used only for format action with integrity " +"extension." msgstr "" -#: src/cryptsetup.c:2881 -msgid "Encryption is supported only for LUKS2 format." +#: src/cryptsetup.c:2792 +msgid "Only one of --use-[u]random options is allowed." msgstr "" -#: src/cryptsetup.c:2886 -msgid "" -"Encryption without detached header (--header) is not possible without data " -"device size reduction (--reduce-device-size)." +#: src/cryptsetup.c:2800 +msgid "Key size is required with --unbound option." msgstr "" -#: src/cryptsetup.c:2891 -msgid "" -"Requested data offset must be less than or equal to half of --reduce-device-" -"size parameter." +#: src/cryptsetup.c:2819 +msgid "Invalid token action." msgstr "" -#: src/cryptsetup.c:2900 -#, c-format -msgid "" -"Adjusting --reduce-device-size value to twice the --offset % " -"(sectors).\n" +#: src/cryptsetup.c:2822 +msgid "--key-description parameter is mandatory for token add action." msgstr "" -#: src/cryptsetup.c:2923 -#, c-format -msgid "" -"Detected LUKS device on %s. Do you want to encrypt that LUKS device again?" +#: src/cryptsetup.c:2826 +msgid "Action requires specific token. Use --token-id parameter." msgstr "" -#: src/cryptsetup.c:2941 -#, c-format -msgid "Temporary header file %s already exists. Aborting." -msgstr "" - -#: src/cryptsetup.c:2943 src/cryptsetup.c:2950 -#, c-format -msgid "Cannot create temporary header file %s." -msgstr "" - -#: src/cryptsetup.c:2975 -msgid "LUKS2 metadata size is larger than data shift value." -msgstr "" - -#: src/cryptsetup.c:3007 -#, c-format -msgid "Failed to place new header at head of device %s." -msgstr "" - -#: src/cryptsetup.c:3018 -#, c-format -msgid "%s/%s is now active and ready for online encryption.\n" -msgstr "" - -#: src/cryptsetup.c:3055 -msgid "" -"LUKS2 decryption is supported with detached header device only (with data " -"offset set to 0)." -msgstr "" - -#: src/cryptsetup.c:3189 src/cryptsetup.c:3195 -msgid "Not enough free keyslots for reencryption." -msgstr "" - -#: src/cryptsetup.c:3215 src/cryptsetup_reencrypt.c:1279 -msgid "" -"Key file can be used only with --key-slot or with exactly one key slot " -"active." -msgstr "" - -#: src/cryptsetup.c:3224 src/cryptsetup_reencrypt.c:1326 -#: src/cryptsetup_reencrypt.c:1337 -#, c-format -msgid "Enter passphrase for key slot %d: " -msgstr "" - -#: src/cryptsetup.c:3233 -#, c-format -msgid "Enter passphrase for key slot %u: " -msgstr "" - -#: src/cryptsetup.c:3278 -#, c-format -msgid "Switching data encryption cipher to %s.\n" -msgstr "" - -#: src/cryptsetup.c:3415 -msgid "Command requires device as argument." -msgstr "" - -#: src/cryptsetup.c:3437 -msgid "" -"Only LUKS2 format is currently supported. Please use cryptsetup-reencrypt " -"tool for LUKS1." -msgstr "" - -#: src/cryptsetup.c:3449 -msgid "" -"Legacy offline reencryption already in-progress. Use cryptsetup-reencrypt " -"utility." -msgstr "" - -#: src/cryptsetup.c:3459 src/cryptsetup_reencrypt.c:155 -msgid "Reencryption of device with integrity profile is not supported." -msgstr "" - -#: src/cryptsetup.c:3467 -msgid "LUKS2 reencryption already initialized. Aborting operation." -msgstr "" - -#: src/cryptsetup.c:3471 -msgid "LUKS2 device is not in reencryption." -msgstr "" - -#: src/cryptsetup.c:3498 +#: src/cryptsetup.c:2840 msgid " [--type ] []" msgstr "" -#: src/cryptsetup.c:3498 src/veritysetup.c:480 src/integritysetup.c:446 +#: src/cryptsetup.c:2840 src/veritysetup.c:487 src/integritysetup.c:535 msgid "open device as " msgstr "" -#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501 -#: src/veritysetup.c:481 src/veritysetup.c:482 src/integritysetup.c:447 -#: src/integritysetup.c:448 +#: src/cryptsetup.c:2841 src/cryptsetup.c:2842 src/cryptsetup.c:2843 +#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:536 +#: src/integritysetup.c:537 src/integritysetup.c:539 msgid "" msgstr "" -#: src/cryptsetup.c:3499 src/veritysetup.c:481 src/integritysetup.c:447 +#: src/cryptsetup.c:2841 src/veritysetup.c:488 src/integritysetup.c:536 msgid "close device (remove mapping)" msgstr "" -#: src/cryptsetup.c:3500 +#: src/cryptsetup.c:2842 src/integritysetup.c:539 msgid "resize active device" msgstr "" -#: src/cryptsetup.c:3501 +#: src/cryptsetup.c:2843 msgid "show device status" msgstr "" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:2844 msgid "[--cipher ]" msgstr "" -#: src/cryptsetup.c:3502 +#: src/cryptsetup.c:2844 msgid "benchmark cipher" msgstr "" -#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505 -#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3514 -#: src/cryptsetup.c:3515 src/cryptsetup.c:3516 src/cryptsetup.c:3517 -#: src/cryptsetup.c:3518 src/cryptsetup.c:3519 src/cryptsetup.c:3520 -#: src/cryptsetup.c:3521 src/cryptsetup.c:3522 +#: src/cryptsetup.c:2845 src/cryptsetup.c:2846 src/cryptsetup.c:2847 +#: src/cryptsetup.c:2848 src/cryptsetup.c:2849 src/cryptsetup.c:2856 +#: src/cryptsetup.c:2857 src/cryptsetup.c:2858 src/cryptsetup.c:2859 +#: src/cryptsetup.c:2860 src/cryptsetup.c:2861 src/cryptsetup.c:2862 +#: src/cryptsetup.c:2863 src/cryptsetup.c:2864 msgid "" msgstr "" -#: src/cryptsetup.c:3503 +#: src/cryptsetup.c:2845 msgid "try to repair on-disk metadata" msgstr "" -#: src/cryptsetup.c:3504 +#: src/cryptsetup.c:2846 msgid "reencrypt LUKS2 device" msgstr "" -#: src/cryptsetup.c:3505 +#: src/cryptsetup.c:2847 msgid "erase all keyslots (remove encryption key)" msgstr "" -#: src/cryptsetup.c:3506 +#: src/cryptsetup.c:2848 msgid "convert LUKS from/to LUKS2 format" msgstr "" -#: src/cryptsetup.c:3507 +#: src/cryptsetup.c:2849 msgid "set permanent configuration options for LUKS2" msgstr "" -#: src/cryptsetup.c:3508 src/cryptsetup.c:3509 +#: src/cryptsetup.c:2850 src/cryptsetup.c:2851 msgid " []" msgstr "" -#: src/cryptsetup.c:3508 +#: src/cryptsetup.c:2850 msgid "formats a LUKS device" msgstr "" -#: src/cryptsetup.c:3509 +#: src/cryptsetup.c:2851 msgid "add key to LUKS device" msgstr "" -#: src/cryptsetup.c:3510 src/cryptsetup.c:3511 src/cryptsetup.c:3512 +#: src/cryptsetup.c:2852 src/cryptsetup.c:2853 src/cryptsetup.c:2854 msgid " []" msgstr "" -#: src/cryptsetup.c:3510 +#: src/cryptsetup.c:2852 msgid "removes supplied key or key file from LUKS device" msgstr "" -#: src/cryptsetup.c:3511 +#: src/cryptsetup.c:2853 msgid "changes supplied key or key file of LUKS device" msgstr "" -#: src/cryptsetup.c:3512 +#: src/cryptsetup.c:2854 msgid "converts a key to new pbkdf parameters" msgstr "" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:2855 msgid " " msgstr "" -#: src/cryptsetup.c:3513 +#: src/cryptsetup.c:2855 msgid "wipes key with number from LUKS device" msgstr "" -#: src/cryptsetup.c:3514 +#: src/cryptsetup.c:2856 msgid "print UUID of LUKS device" msgstr "" -#: src/cryptsetup.c:3515 +#: src/cryptsetup.c:2857 msgid "tests for LUKS partition header" msgstr "" -#: src/cryptsetup.c:3516 +#: src/cryptsetup.c:2858 msgid "dump LUKS partition information" msgstr "" -#: src/cryptsetup.c:3517 +#: src/cryptsetup.c:2859 msgid "dump TCRYPT device information" msgstr "" -#: src/cryptsetup.c:3518 +#: src/cryptsetup.c:2860 msgid "dump BITLK device information" msgstr "" -#: src/cryptsetup.c:3519 +#: src/cryptsetup.c:2861 msgid "Suspend LUKS device and wipe key (all IOs are frozen)" msgstr "" -#: src/cryptsetup.c:3520 +#: src/cryptsetup.c:2862 msgid "Resume suspended LUKS device" msgstr "" -#: src/cryptsetup.c:3521 +#: src/cryptsetup.c:2863 msgid "Backup LUKS device header and keyslots" msgstr "" -#: src/cryptsetup.c:3522 +#: src/cryptsetup.c:2864 msgid "Restore LUKS device header and keyslots" msgstr "" -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:2865 msgid " " msgstr "" -#: src/cryptsetup.c:3523 +#: src/cryptsetup.c:2865 msgid "Manipulate LUKS2 tokens" msgstr "" -#: src/cryptsetup.c:3543 src/veritysetup.c:498 src/integritysetup.c:464 +#: src/cryptsetup.c:2884 src/veritysetup.c:505 src/integritysetup.c:554 msgid "" "\n" " is one of:\n" msgstr "" -#: src/cryptsetup.c:3549 +#: src/cryptsetup.c:2890 msgid "" "\n" "You can also use old syntax aliases:\n" @@ -2466,7 +2563,7 @@ msgid "" "bitlkClose\n" msgstr "" -#: src/cryptsetup.c:3553 +#: src/cryptsetup.c:2894 #, c-format msgid "" "\n" @@ -2476,34 +2573,34 @@ msgid "" " optional key file for the new key for luksAddKey action\n" msgstr "" -#: src/cryptsetup.c:3560 +#: src/cryptsetup.c:2901 #, c-format msgid "" "\n" "Default compiled-in metadata format is %s (for luksFormat action).\n" msgstr "" -#: src/cryptsetup.c:3565 src/cryptsetup.c:3568 +#: src/cryptsetup.c:2906 src/cryptsetup.c:2909 #, c-format msgid "" "\n" "LUKS2 external token plugin support is %s.\n" msgstr "" -#: src/cryptsetup.c:3565 +#: src/cryptsetup.c:2906 msgid "compiled-in" msgstr "" -#: src/cryptsetup.c:3566 +#: src/cryptsetup.c:2907 #, c-format msgid "LUKS2 external token plugin path: %s.\n" msgstr "" -#: src/cryptsetup.c:3568 +#: src/cryptsetup.c:2909 msgid "disabled" msgstr "" -#: src/cryptsetup.c:3572 +#: src/cryptsetup.c:2913 #, c-format msgid "" "\n" @@ -2515,7 +2612,7 @@ msgid "" "\tIteration time: %d, Memory required: %dkB, Parallel threads: %d\n" msgstr "" -#: src/cryptsetup.c:3583 +#: src/cryptsetup.c:2924 #, c-format msgid "" "\n" @@ -2525,227 +2622,99 @@ msgid "" "\tLUKS: %s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n" msgstr "" -#: src/cryptsetup.c:3592 +#: src/cryptsetup.c:2933 msgid "" "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n" msgstr "" -#: src/cryptsetup.c:3610 src/veritysetup.c:637 src/integritysetup.c:620 +#: src/cryptsetup.c:2951 src/veritysetup.c:644 src/integritysetup.c:711 #, c-format msgid "%s: requires %s as arguments" msgstr "" -#: src/cryptsetup.c:3648 src/cryptsetup_reencrypt.c:1379 -#: src/cryptsetup_reencrypt.c:1704 +#: src/cryptsetup.c:2997 src/utils_reencrypt_luks1.c:1194 msgid "Key slot is invalid." msgstr "" -#: src/cryptsetup.c:3675 +#: src/cryptsetup.c:3024 msgid "Device size must be multiple of 512 bytes sector." msgstr "" -#: src/cryptsetup.c:3680 +#: src/cryptsetup.c:3029 msgid "Invalid max reencryption hotzone size specification." msgstr "" -#: src/cryptsetup.c:3694 src/cryptsetup.c:3706 src/cryptsetup_reencrypt.c:1623 +#: src/cryptsetup.c:3043 src/cryptsetup.c:3055 msgid "Key size must be a multiple of 8 bits" msgstr "" -#: src/cryptsetup.c:3711 +#: src/cryptsetup.c:3060 msgid "Maximum device reduce size is 1 GiB." msgstr "" -#: src/cryptsetup.c:3714 src/cryptsetup_reencrypt.c:1631 +#: src/cryptsetup.c:3063 msgid "Reduce size must be multiple of 512 bytes sector." msgstr "" -#: src/cryptsetup.c:3731 +#: src/cryptsetup.c:3080 msgid "Option --priority can be only ignore/normal/prefer." msgstr "" -#: src/cryptsetup.c:3741 src/veritysetup.c:561 src/integritysetup.c:543 -#: src/cryptsetup_reencrypt.c:1641 +#: src/cryptsetup.c:3099 src/veritysetup.c:568 src/integritysetup.c:634 msgid "Show this help message" msgstr "" -#: src/cryptsetup.c:3742 src/veritysetup.c:562 src/integritysetup.c:544 -#: src/cryptsetup_reencrypt.c:1642 +#: src/cryptsetup.c:3100 src/veritysetup.c:569 src/integritysetup.c:635 msgid "Display brief usage" msgstr "" -#: src/cryptsetup.c:3743 src/veritysetup.c:563 src/integritysetup.c:545 -#: src/cryptsetup_reencrypt.c:1643 +#: src/cryptsetup.c:3101 src/veritysetup.c:570 src/integritysetup.c:636 msgid "Print package version" msgstr "" -#: src/cryptsetup.c:3754 src/veritysetup.c:574 src/integritysetup.c:556 -#: src/cryptsetup_reencrypt.c:1654 +#: src/cryptsetup.c:3112 src/veritysetup.c:581 src/integritysetup.c:647 msgid "Help options:" msgstr "" -#: src/cryptsetup.c:3771 src/veritysetup.c:592 src/integritysetup.c:573 +#: src/cryptsetup.c:3132 src/veritysetup.c:599 src/integritysetup.c:664 msgid "[OPTION...] " msgstr "" -#: src/cryptsetup.c:3780 src/veritysetup.c:601 src/integritysetup.c:584 +#: src/cryptsetup.c:3141 src/veritysetup.c:608 src/integritysetup.c:675 msgid "Argument missing." msgstr "" -#: src/cryptsetup.c:3850 src/veritysetup.c:632 src/integritysetup.c:615 +#: src/cryptsetup.c:3211 src/veritysetup.c:639 src/integritysetup.c:706 msgid "Unknown action." msgstr "" -#: src/cryptsetup.c:3861 -msgid "Options --refresh and --test-passphrase are mutually exclusive." -msgstr "" - -#: src/cryptsetup.c:3866 src/veritysetup.c:656 src/integritysetup.c:663 -msgid "" -"Options --cancel-deferred and --deferred cannot be used at the same time." -msgstr "" - -#: src/cryptsetup.c:3872 -msgid "Option --shared is allowed only for open of plain device." -msgstr "" - -#: src/cryptsetup.c:3877 -msgid "Option --persistent is not allowed with --test-passphrase." -msgstr "" - -#: src/cryptsetup.c:3882 -msgid "" -"Option --integrity-no-wipe can be used only for format action with integrity " -"extension." -msgstr "" - -#: src/cryptsetup.c:3889 -msgid "" -"Option --test-passphrase is allowed only for open of LUKS, TCRYPT and BITLK " -"devices." -msgstr "" - -#: src/cryptsetup.c:3901 +#: src/cryptsetup.c:3229 msgid "Option --key-file takes precedence over specified key file argument." msgstr "" -#: src/cryptsetup.c:3907 +#: src/cryptsetup.c:3235 msgid "Only one --key-file argument is allowed." msgstr "" -#: src/cryptsetup.c:3911 src/cryptsetup_reencrypt.c:1689 -#: src/cryptsetup_reencrypt.c:1708 -msgid "Only one of --use-[u]random options is allowed." -msgstr "" - -#: src/cryptsetup.c:3915 -msgid "Options --align-payload and --offset cannot be combined." -msgstr "" - -#: src/cryptsetup.c:3921 -msgid "Option --skip is supported only for open of plain and loopaes devices." -msgstr "" - -#: src/cryptsetup.c:3927 -msgid "" -"Option --offset with open action is only supported for plain and loopaes " -"devices." -msgstr "" - -#: src/cryptsetup.c:3933 -msgid "" -"Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only " -"for TCRYPT device." -msgstr "" - -#: src/cryptsetup.c:3938 -msgid "Option --tcrypt-hidden cannot be combined with --allow-discards." -msgstr "" - -#: src/cryptsetup.c:3943 -msgid "" -"Option --veracrypt or --disable-veracrypt is supported only for TCRYPT " -"device type." -msgstr "" - -#: src/cryptsetup.c:3948 -msgid "" -"Option --veracrypt-pim is supported only for VeraCrypt compatible devices." -msgstr "" - -#: src/cryptsetup.c:3954 -msgid "" -"Option --veracrypt-query-pim is supported only for VeraCrypt compatible " -"devices." -msgstr "" - -#: src/cryptsetup.c:3958 -msgid "" -"The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive." -msgstr "" - -#: src/cryptsetup.c:3966 src/cryptsetup.c:4002 -msgid "Keyslot specification is required." -msgstr "" - -#: src/cryptsetup.c:3971 src/cryptsetup_reencrypt.c:1694 +#: src/cryptsetup.c:3240 msgid "" "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/" "argon2id." msgstr "" -#: src/cryptsetup.c:3976 src/cryptsetup_reencrypt.c:1699 +#: src/cryptsetup.c:3245 msgid "PBKDF forced iterations cannot be combined with iteration time option." msgstr "" -#: src/cryptsetup.c:3983 -msgid "" -"Sector size option with open action is supported only for plain devices." -msgstr "" - -#: src/cryptsetup.c:3990 -msgid "" -"Large IV sectors option is supported only for opening plain type device with " -"sector size larger than 512 bytes." -msgstr "" - -#: src/cryptsetup.c:3996 -msgid "Key size is required with --unbound option." -msgstr "" - -#: src/cryptsetup.c:4012 -msgid "LUKS2 decryption requires option --header." -msgstr "" - -#: src/cryptsetup.c:4016 -msgid "Options --reduce-device-size and --data-size cannot be combined." -msgstr "" - -#: src/cryptsetup.c:4020 -msgid "Options --device-size and --size cannot be combined." -msgstr "" - -#: src/cryptsetup.c:4024 +#: src/cryptsetup.c:3256 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together." msgstr "" -#: src/cryptsetup.c:4028 +#: src/cryptsetup.c:3264 msgid "No action taken. Invoked with --test-args option.\n" msgstr "" -#: src/cryptsetup.c:4040 -msgid "Invalid token action." -msgstr "" - -#: src/cryptsetup.c:4045 -msgid "--key-description parameter is mandatory for token add action." -msgstr "" - -#: src/cryptsetup.c:4051 -msgid "Action requires specific token. Use --token-id parameter." -msgstr "" - -#: src/cryptsetup.c:4062 +#: src/cryptsetup.c:3277 msgid "Cannot disable metadata locking." msgstr "" @@ -2773,67 +2742,72 @@ msgstr "" msgid "Cannot write to root hash file %s." msgstr "" -#: src/veritysetup.c:210 src/veritysetup.c:227 +#: src/veritysetup.c:196 src/veritysetup.c:472 +#, c-format +msgid "Device %s is not a valid VERITY device." +msgstr "" + +#: src/veritysetup.c:213 src/veritysetup.c:230 #, c-format msgid "Cannot read root hash file %s." msgstr "" -#: src/veritysetup.c:215 +#: src/veritysetup.c:218 #, c-format msgid "Invalid root hash file %s." msgstr "" -#: src/veritysetup.c:236 +#: src/veritysetup.c:239 msgid "Invalid root hash string specified." msgstr "" -#: src/veritysetup.c:244 +#: src/veritysetup.c:247 #, c-format msgid "Invalid signature file %s." msgstr "" -#: src/veritysetup.c:251 +#: src/veritysetup.c:254 #, c-format msgid "Cannot read signature file %s." msgstr "" -#: src/veritysetup.c:274 src/veritysetup.c:288 +#: src/veritysetup.c:277 src/veritysetup.c:291 msgid "Command requires or --root-hash-file option as argument." msgstr "" -#: src/veritysetup.c:478 +#: src/veritysetup.c:485 msgid " " msgstr "" -#: src/veritysetup.c:478 src/integritysetup.c:445 +#: src/veritysetup.c:485 src/integritysetup.c:534 msgid "format device" msgstr "" -#: src/veritysetup.c:479 +#: src/veritysetup.c:486 msgid " []" msgstr "" -#: src/veritysetup.c:479 +#: src/veritysetup.c:486 msgid "verify device" msgstr "" -#: src/veritysetup.c:480 +#: src/veritysetup.c:487 msgid " []" msgstr "" -#: src/veritysetup.c:482 src/integritysetup.c:448 +#: src/veritysetup.c:489 src/integritysetup.c:537 msgid "show active device status" msgstr "" -#: src/veritysetup.c:483 +#: src/veritysetup.c:490 msgid "" msgstr "" -#: src/veritysetup.c:483 src/integritysetup.c:449 +#: src/veritysetup.c:490 src/integritysetup.c:538 msgid "show on-disk information" msgstr "" -#: src/veritysetup.c:502 +#: src/veritysetup.c:509 #, c-format msgid "" "\n" @@ -2843,7 +2817,7 @@ msgid "" " hash of the root node on \n" msgstr "" -#: src/veritysetup.c:509 +#: src/veritysetup.c:516 #, c-format msgid "" "\n" @@ -2852,32 +2826,51 @@ msgid "" "Hash format: %u\n" msgstr "" -#: src/veritysetup.c:646 +#: src/veritysetup.c:654 msgid "" "Option --ignore-corruption and --restart-on-corruption cannot be used " "together." msgstr "" -#: src/veritysetup.c:651 +#: src/veritysetup.c:659 msgid "" "Option --panic-on-corruption and --restart-on-corruption cannot be used " "together." msgstr "" -#: src/integritysetup.c:201 +#: src/integritysetup.c:177 +#, c-format +msgid "" +"This will overwrite data on %s and %s irrevocably.\n" +"To preserve data device use --no-wipe option (and then activate with --" +"integrity-recalculate)." +msgstr "" + +#: src/integritysetup.c:212 #, c-format msgid "Formatted with tag size %u, internal integrity %s.\n" msgstr "" -#: src/integritysetup.c:445 src/integritysetup.c:449 +#: src/integritysetup.c:289 +msgid "" +"Setting recalculate flag is not supported, you may consider using --wipe " +"instead." +msgstr "" + +#: src/integritysetup.c:364 src/integritysetup.c:521 +#, c-format +msgid "Device %s is not a valid INTEGRITY device." +msgstr "" + +#: src/integritysetup.c:534 src/integritysetup.c:538 msgid "" msgstr "" -#: src/integritysetup.c:446 +#: src/integritysetup.c:535 msgid " " msgstr "" -#: src/integritysetup.c:468 +#: src/integritysetup.c:558 #, c-format msgid "" "\n" @@ -2885,7 +2878,7 @@ msgid "" " is the device containing data with integrity tags\n" msgstr "" -#: src/integritysetup.c:473 +#: src/integritysetup.c:563 #, c-format msgid "" "\n" @@ -2894,253 +2887,49 @@ msgid "" "\tMaximum keyfile size: %dkB\n" msgstr "" -#: src/integritysetup.c:530 +#: src/integritysetup.c:620 #, c-format msgid "Invalid --%s size. Maximum is %u bytes." msgstr "" -#: src/integritysetup.c:628 +#: src/integritysetup.c:720 msgid "Both key file and key size options must be specified." msgstr "" -#: src/integritysetup.c:632 +#: src/integritysetup.c:724 msgid "Both journal integrity key file and key size options must be specified." msgstr "" -#: src/integritysetup.c:635 +#: src/integritysetup.c:727 msgid "" "Journal integrity algorithm must be specified if journal integrity key is " "used." msgstr "" -#: src/integritysetup.c:639 +#: src/integritysetup.c:731 msgid "" "Both journal encryption key file and key size options must be specified." msgstr "" -#: src/integritysetup.c:642 +#: src/integritysetup.c:734 msgid "" "Journal encryption algorithm must be specified if journal encryption key is " "used." msgstr "" -#: src/integritysetup.c:646 +#: src/integritysetup.c:738 msgid "Recovery and bitmap mode options are mutually exclusive." msgstr "" -#: src/integritysetup.c:653 +#: src/integritysetup.c:745 msgid "Journal options cannot be used in bitmap mode." msgstr "" -#: src/integritysetup.c:658 +#: src/integritysetup.c:750 msgid "Bitmap options can be used only in bitmap mode." msgstr "" -#: src/cryptsetup_reencrypt.c:149 -msgid "Reencryption already in-progress." -msgstr "" - -#: src/cryptsetup_reencrypt.c:185 -#, c-format -msgid "Cannot exclusively open %s, device in use." -msgstr "" - -#: src/cryptsetup_reencrypt.c:199 src/cryptsetup_reencrypt.c:1120 -msgid "Allocation of aligned memory failed." -msgstr "" - -#: src/cryptsetup_reencrypt.c:206 -#, c-format -msgid "Cannot read device %s." -msgstr "" - -#: src/cryptsetup_reencrypt.c:217 -#, c-format -msgid "Marking LUKS1 device %s unusable." -msgstr "" - -#: src/cryptsetup_reencrypt.c:221 -#, c-format -msgid "Setting LUKS2 offline reencrypt flag on device %s." -msgstr "" - -#: src/cryptsetup_reencrypt.c:238 -#, c-format -msgid "Cannot write device %s." -msgstr "" - -#: src/cryptsetup_reencrypt.c:286 -msgid "Cannot write reencryption log file." -msgstr "" - -#: src/cryptsetup_reencrypt.c:342 -msgid "Cannot read reencryption log file." -msgstr "" - -#: src/cryptsetup_reencrypt.c:353 -msgid "Wrong log format." -msgstr "" - -#: src/cryptsetup_reencrypt.c:380 -#, c-format -msgid "Log file %s exists, resuming reencryption.\n" -msgstr "" - -#: src/cryptsetup_reencrypt.c:429 -msgid "Activating temporary device using old LUKS header." -msgstr "" - -#: src/cryptsetup_reencrypt.c:439 -msgid "Activating temporary device using new LUKS header." -msgstr "" - -#: src/cryptsetup_reencrypt.c:449 -msgid "Activation of temporary devices failed." -msgstr "" - -#: src/cryptsetup_reencrypt.c:536 -msgid "Failed to set data offset." -msgstr "" - -#: src/cryptsetup_reencrypt.c:542 -msgid "Failed to set metadata size." -msgstr "" - -#: src/cryptsetup_reencrypt.c:550 -#, c-format -msgid "New LUKS header for device %s created." -msgstr "" - -#: src/cryptsetup_reencrypt.c:610 -#, c-format -msgid "" -"This version of cryptsetup-reencrypt can't handle new internal token type %s." -msgstr "" - -#: src/cryptsetup_reencrypt.c:632 -msgid "Failed to read activation flags from backup header." -msgstr "" - -#: src/cryptsetup_reencrypt.c:636 -msgid "Failed to write activation flags to new header." -msgstr "" - -#: src/cryptsetup_reencrypt.c:640 src/cryptsetup_reencrypt.c:644 -msgid "Failed to read requirements from backup header." -msgstr "" - -#: src/cryptsetup_reencrypt.c:682 -#, c-format -msgid "%s header backup of device %s created." -msgstr "" - -#: src/cryptsetup_reencrypt.c:745 -msgid "Creation of LUKS backup headers failed." -msgstr "" - -#: src/cryptsetup_reencrypt.c:878 -#, c-format -msgid "Cannot restore %s header on device %s." -msgstr "" - -#: src/cryptsetup_reencrypt.c:880 -#, c-format -msgid "%s header on device %s restored." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1092 src/cryptsetup_reencrypt.c:1098 -msgid "Cannot open temporary LUKS device." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1103 src/cryptsetup_reencrypt.c:1108 -msgid "Cannot get device size." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1143 -msgid "IO error during reencryption." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1174 -msgid "Provided UUID is invalid." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1408 -msgid "Cannot open reencryption log file." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1414 -msgid "" -"No decryption in progress, provided UUID can be used only to resume " -"suspended decryption process." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1489 -#, c-format -msgid "Changed pbkdf parameters in keyslot %i." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1614 -msgid "" -"Only values between 1 MiB and 64 MiB allowed for reencryption block size." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1628 -msgid "Maximum device reduce size is 64 MiB." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1669 -msgid "[OPTION...] " -msgstr "" - -#: src/cryptsetup_reencrypt.c:1677 -#, c-format -msgid "Reencryption will change: %s%s%s%s%s%s." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1678 -msgid "volume key" -msgstr "" - -#: src/cryptsetup_reencrypt.c:1680 -msgid "set hash to " -msgstr "" - -#: src/cryptsetup_reencrypt.c:1681 -msgid ", set cipher to " -msgstr "" - -#: src/cryptsetup_reencrypt.c:1685 -msgid "Argument required." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1712 -msgid "" -"Option --new must be used together with --reduce-device-size or --header." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1716 -msgid "" -"Option --keep-key can be used only with --hash, --iter-time or --pbkdf-force-" -"iterations." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1720 -msgid "Option --new cannot be used together with --decrypt." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1726 -msgid "Option --decrypt is incompatible with specified parameters." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1730 -msgid "Option --uuid is allowed only together with --decrypt." -msgstr "" - -#: src/cryptsetup_reencrypt.c:1734 -msgid "Invalid luks type. Use one of these: 'luks', 'luks1' or 'luks2'." -msgstr "" - -#: src/utils_tools.c:119 +#: src/utils_tools.c:118 msgid "" "\n" "WARNING!\n" @@ -3148,7 +2937,7 @@ msgid "" msgstr "" #. TRANSLATORS: User must type "YES" (in capital letters), do not translate this word. -#: src/utils_tools.c:121 +#: src/utils_tools.c:120 #, c-format msgid "" "%s\n" @@ -3156,144 +2945,174 @@ msgid "" "Are you sure? (Type 'yes' in capital letters): " msgstr "" -#: src/utils_tools.c:127 +#: src/utils_tools.c:126 msgid "Error reading response from terminal." msgstr "" -#: src/utils_tools.c:159 +#: src/utils_tools.c:158 msgid "Command successful." msgstr "" -#: src/utils_tools.c:167 +#: src/utils_tools.c:166 msgid "wrong or missing parameters" msgstr "" -#: src/utils_tools.c:169 +#: src/utils_tools.c:168 msgid "no permission or bad passphrase" msgstr "" -#: src/utils_tools.c:171 +#: src/utils_tools.c:170 msgid "out of memory" msgstr "" -#: src/utils_tools.c:173 +#: src/utils_tools.c:172 msgid "wrong device or file specified" msgstr "" -#: src/utils_tools.c:175 +#: src/utils_tools.c:174 msgid "device already exists or device is busy" msgstr "" -#: src/utils_tools.c:177 +#: src/utils_tools.c:176 msgid "unknown error" msgstr "" -#: src/utils_tools.c:179 +#: src/utils_tools.c:178 #, c-format msgid "Command failed with code %i (%s)." msgstr "" -#: src/utils_tools.c:257 +#: src/utils_tools.c:256 #, c-format msgid "Key slot %i created." msgstr "" -#: src/utils_tools.c:259 +#: src/utils_tools.c:258 #, c-format msgid "Key slot %i unlocked." msgstr "" -#: src/utils_tools.c:261 +#: src/utils_tools.c:260 #, c-format msgid "Key slot %i removed." msgstr "" -#: src/utils_tools.c:270 +#: src/utils_tools.c:269 #, c-format msgid "Token %i created." msgstr "" -#: src/utils_tools.c:272 +#: src/utils_tools.c:271 #, c-format msgid "Token %i removed." msgstr "" -#: src/utils_tools.c:282 +#: src/utils_tools.c:281 msgid "No token could be unlocked with this PIN." msgstr "" -#: src/utils_tools.c:284 +#: src/utils_tools.c:283 #, c-format msgid "Token %i requires PIN." msgstr "" -#: src/utils_tools.c:286 +#: src/utils_tools.c:285 #, c-format msgid "Token (type %s) requires PIN." msgstr "" -#: src/utils_tools.c:289 +#: src/utils_tools.c:288 #, c-format msgid "Token %i cannot unlock assigned keyslot(s) (wrong keyslot passphrase)." msgstr "" -#: src/utils_tools.c:291 +#: src/utils_tools.c:290 #, c-format msgid "" "Token (type %s) cannot unlock assigned keyslot(s) (wrong keyslot passphrase)." msgstr "" -#: src/utils_tools.c:294 +#: src/utils_tools.c:293 #, c-format msgid "Token %i requires additional missing resource." msgstr "" -#: src/utils_tools.c:296 +#: src/utils_tools.c:295 #, c-format msgid "Token (type %s) requires additional missing resource." msgstr "" -#: src/utils_tools.c:299 +#: src/utils_tools.c:298 #, c-format msgid "No usable token (type %s) is available." msgstr "" -#: src/utils_tools.c:301 +#: src/utils_tools.c:300 msgid "No usable token is available." msgstr "" -#: src/utils_tools.c:463 -msgid "" -"\n" -"Wipe interrupted." -msgstr "" - -#: src/utils_tools.c:492 -msgid "" -"\n" -"Reencryption interrupted." -msgstr "" - -#: src/utils_tools.c:511 +#: src/utils_tools.c:393 #, c-format msgid "Cannot read keyfile %s." msgstr "" -#: src/utils_tools.c:516 +#: src/utils_tools.c:398 #, c-format msgid "Cannot read %d bytes from keyfile %s." msgstr "" -#: src/utils_tools.c:541 +#: src/utils_tools.c:423 #, c-format msgid "Cannot open keyfile %s for write." msgstr "" -#: src/utils_tools.c:548 +#: src/utils_tools.c:430 #, c-format msgid "Cannot write to keyfile %s." msgstr "" +#: src/utils_progress.c:74 +#, c-format +msgid "%02m%02s" +msgstr "" + +#: src/utils_progress.c:76 +#, c-format +msgid "%02h%02m%02s" +msgstr "" + +#: src/utils_progress.c:78 +#, c-format +msgid "%02 days" +msgstr "" + +#: src/utils_progress.c:105 src/utils_progress.c:138 +#, c-format +msgid "%4 %s written" +msgstr "" + +#: src/utils_progress.c:109 src/utils_progress.c:142 +#, c-format +msgid "speed %5.1f %s/s" +msgstr "" + +#. TRANSLATORS: 'time', 'written' and 'speed' string are supposed +#. to get translated as well. 'eol' is always new-line or empty. +#. See above. +#. +#: src/utils_progress.c:118 +#, c-format +msgid "Progress: %5.1f%%, ETA %s, %s, %s%s" +msgstr "" + +#. TRANSLATORS: 'time', 'written' and 'speed' string are supposed +#. to get translated as well. See above +#. +#: src/utils_progress.c:150 +#, c-format +msgid "Finished, time %s, %s, %s\n" +msgstr "" + #: src/utils_password.c:41 src/utils_password.c:74 #, c-format msgid "Cannot check password quality: %s" @@ -3311,118 +3130,486 @@ msgstr "" msgid "Password quality check failed: Bad passphrase (%s)" msgstr "" -#: src/utils_password.c:224 src/utils_password.c:238 +#: src/utils_password.c:231 src/utils_password.c:245 msgid "Error reading passphrase from terminal." msgstr "" -#: src/utils_password.c:236 +#: src/utils_password.c:243 msgid "Verify passphrase: " msgstr "" -#: src/utils_password.c:243 +#: src/utils_password.c:250 msgid "Passphrases do not match." msgstr "" -#: src/utils_password.c:280 +#: src/utils_password.c:288 msgid "Cannot use offset with terminal input." msgstr "" -#: src/utils_password.c:283 +#: src/utils_password.c:292 #, c-format msgid "Enter passphrase: " msgstr "" -#: src/utils_password.c:286 +#: src/utils_password.c:295 #, c-format msgid "Enter passphrase for %s: " msgstr "" -#: src/utils_password.c:317 +#: src/utils_password.c:329 msgid "No key available with this passphrase." msgstr "" -#: src/utils_password.c:319 +#: src/utils_password.c:331 msgid "No usable keyslot is available." msgstr "" -#: src/utils_luks2.c:47 +#: src/utils_luks.c:67 +msgid "Can't do passphrase verification on non-tty inputs." +msgstr "" + +#: src/utils_luks.c:182 #, c-format msgid "Failed to open file %s in read-only mode." msgstr "" -#: src/utils_luks2.c:60 +#: src/utils_luks.c:195 msgid "Provide valid LUKS2 token JSON:\n" msgstr "" -#: src/utils_luks2.c:67 +#: src/utils_luks.c:202 msgid "Failed to read JSON file." msgstr "" -#: src/utils_luks2.c:72 +#: src/utils_luks.c:207 msgid "" "\n" "Read interrupted." msgstr "" -#: src/utils_luks2.c:113 +#: src/utils_luks.c:248 #, c-format msgid "Failed to open file %s in write mode." msgstr "" -#: src/utils_luks2.c:122 +#: src/utils_luks.c:257 msgid "" "\n" "Write interrupted." msgstr "" -#: src/utils_luks2.c:126 +#: src/utils_luks.c:261 msgid "Failed to write JSON file." msgstr "" -#: src/utils_blockdev.c:192 +#: src/utils_reencrypt.c:120 +#, c-format +msgid "Auto-detected active dm device '%s' for data device %s.\n" +msgstr "" + +#: src/utils_reencrypt.c:124 +#, c-format +msgid "Failed to auto-detect device %s holders." +msgstr "" + +#: src/utils_reencrypt.c:130 +#, c-format +msgid "Device %s is not a block device.\n" +msgstr "" + +#: src/utils_reencrypt.c:132 +#, c-format +msgid "" +"Unable to decide if device %s is activated or not.\n" +"Are you sure you want to proceed with reencryption in offline mode?\n" +"It may lead to data corruption if the device is actually activated.\n" +"To run reencryption in online mode, use --active-name parameter instead.\n" +msgstr "" + +#: src/utils_reencrypt.c:171 +msgid "Device is not in LUKS2 encryption. Conflicting option --encrypt." +msgstr "" + +#: src/utils_reencrypt.c:176 +msgid "Device is not in LUKS2 decryption. Conflicting option --decrypt." +msgstr "" + +#: src/utils_reencrypt.c:183 +msgid "" +"Device is in reencryption using datashift resilience. Requested --resilience " +"option cannot be applied." +msgstr "" + +#: src/utils_reencrypt.c:189 src/utils_reencrypt.c:195 +#: src/utils_reencrypt.c:201 src/utils_reencrypt.c:673 +msgid "" +"Requested --resilience option cannot be applied to current reencryption " +"operation." +msgstr "" + +#: src/utils_reencrypt.c:254 +msgid "Device requires reencryption recovery. Run repair first." +msgstr "" + +#: src/utils_reencrypt.c:264 +#, c-format +msgid "" +"Device %s is already in LUKS2 reencryption. Do you wish to resume previously " +"initialised operation?" +msgstr "" + +#: src/utils_reencrypt.c:310 +msgid "Legacy LUKS2 reencryption is no longer supported." +msgstr "" + +#: src/utils_reencrypt.c:375 +msgid "Reencryption of device with integrity profile is not supported." +msgstr "" + +#: src/utils_reencrypt.c:406 +#, c-format +msgid "" +"Requested --sector-size % is incompatible with %s superblock\n" +"(block size: % bytes) detected on device %s." +msgstr "" + +#: src/utils_reencrypt.c:451 +msgid "" +"Encryption without detached header (--header) is not possible without data " +"device size reduction (--reduce-device-size)." +msgstr "" + +#: src/utils_reencrypt.c:457 +msgid "" +"Requested data offset must be less than or equal to half of --reduce-device-" +"size parameter." +msgstr "" + +#: src/utils_reencrypt.c:467 +#, c-format +msgid "" +"Adjusting --reduce-device-size value to twice the --offset % " +"(sectors).\n" +msgstr "" + +#: src/utils_reencrypt.c:497 +#, c-format +msgid "Temporary header file %s already exists. Aborting." +msgstr "" + +#: src/utils_reencrypt.c:499 src/utils_reencrypt.c:506 +#, c-format +msgid "Cannot create temporary header file %s." +msgstr "" + +#: src/utils_reencrypt.c:531 +msgid "LUKS2 metadata size is larger than data shift value." +msgstr "" + +#: src/utils_reencrypt.c:568 +#, c-format +msgid "Failed to place new header at head of device %s." +msgstr "" + +#: src/utils_reencrypt.c:578 +#, c-format +msgid "%s/%s is now active and ready for online encryption.\n" +msgstr "" + +#: src/utils_reencrypt.c:610 +#, c-format +msgid "Active device %s is not LUKS2." +msgstr "" + +#: src/utils_reencrypt.c:638 +msgid "Restoring original LUKS2 header." +msgstr "" + +#: src/utils_reencrypt.c:646 +msgid "Original LUKS2 header restore failed." +msgstr "" + +#: src/utils_reencrypt.c:714 +msgid "Failed to add read/wrire permissions to exported header file." +msgstr "" + +#: src/utils_reencrypt.c:767 +#, c-format +msgid "Reencryption initialization failed. Header backup is available in %s." +msgstr "" + +#: src/utils_reencrypt.c:795 +msgid "" +"LUKS2 decryption is supported with detached header device only (with data " +"offset set to 0)." +msgstr "" + +#: src/utils_reencrypt.c:926 src/utils_reencrypt.c:935 +msgid "Not enough free keyslots for reencryption." +msgstr "" + +#: src/utils_reencrypt.c:956 src/utils_reencrypt_luks1.c:1100 +msgid "" +"Key file can be used only with --key-slot or with exactly one key slot " +"active." +msgstr "" + +#: src/utils_reencrypt.c:965 src/utils_reencrypt_luks1.c:1147 +#: src/utils_reencrypt_luks1.c:1158 +#, c-format +msgid "Enter passphrase for key slot %d: " +msgstr "" + +#: src/utils_reencrypt.c:977 +#, c-format +msgid "Enter passphrase for key slot %u: " +msgstr "" + +#: src/utils_reencrypt.c:1029 +#, c-format +msgid "Switching data encryption cipher to %s.\n" +msgstr "" + +#: src/utils_reencrypt.c:1083 +msgid "No data segment parameters changed. Reencryption aborted." +msgstr "" + +#: src/utils_reencrypt.c:1179 +msgid "" +"Encryption sector size increase on offline device is not supported.\n" +"Activate the device first or use --force-offline-reencrypt option " +"(dangerous!)." +msgstr "" + +#: src/utils_reencrypt.c:1219 src/utils_reencrypt_luks1.c:726 +#: src/utils_reencrypt_luks1.c:798 +msgid "" +"\n" +"Reencryption interrupted." +msgstr "" + +#: src/utils_reencrypt.c:1224 +msgid "Resuming LUKS reencryption in forced offline mode.\n" +msgstr "" + +#: src/utils_reencrypt.c:1241 +#, c-format +msgid "Device %s contains broken LUKS metadata. Aborting operation." +msgstr "" + +#: src/utils_reencrypt.c:1257 src/utils_reencrypt.c:1279 +#, c-format +msgid "Device %s is already LUKS device. Aborting operation." +msgstr "" + +#: src/utils_reencrypt.c:1285 +#, c-format +msgid "Device %s is already in LUKS reencryption. Aborting operation." +msgstr "" + +#: src/utils_reencrypt.c:1347 +msgid "LUKS2 decryption requires --header option." +msgstr "" + +#: src/utils_reencrypt.c:1392 +msgid "Command requires device as argument." +msgstr "" + +#: src/utils_reencrypt.c:1405 +#, c-format +msgid "Conflicting versions. Device %s is LUKS1." +msgstr "" + +#: src/utils_reencrypt.c:1411 +#, c-format +msgid "Conflicting versions. Device %s is in LUKS1 reencryption." +msgstr "" + +#: src/utils_reencrypt.c:1417 +#, c-format +msgid "Conflicting versions. Device %s is LUKS2." +msgstr "" + +#: src/utils_reencrypt.c:1423 +#, c-format +msgid "Conflicting versions. Device %s is in LUKS2 reencryption." +msgstr "" + +#: src/utils_reencrypt.c:1429 +msgid "LUKS2 reencryption already initialized. Aborting operation." +msgstr "" + +#: src/utils_reencrypt.c:1436 +msgid "Device reencryption not in progress." +msgstr "" + +#: src/utils_reencrypt_luks1.c:129 src/utils_blockdev.c:287 +#, c-format +msgid "Cannot exclusively open %s, device in use." +msgstr "" + +#: src/utils_reencrypt_luks1.c:143 src/utils_reencrypt_luks1.c:945 +msgid "Allocation of aligned memory failed." +msgstr "" + +#: src/utils_reencrypt_luks1.c:150 +#, c-format +msgid "Cannot read device %s." +msgstr "" + +#: src/utils_reencrypt_luks1.c:161 +#, c-format +msgid "Marking LUKS1 device %s unusable." +msgstr "" + +#: src/utils_reencrypt_luks1.c:177 +#, c-format +msgid "Cannot write device %s." +msgstr "" + +#: src/utils_reencrypt_luks1.c:226 +msgid "Cannot write reencryption log file." +msgstr "" + +#: src/utils_reencrypt_luks1.c:282 +msgid "Cannot read reencryption log file." +msgstr "" + +#: src/utils_reencrypt_luks1.c:293 +msgid "Wrong log format." +msgstr "" + +#: src/utils_reencrypt_luks1.c:320 +#, c-format +msgid "Log file %s exists, resuming reencryption.\n" +msgstr "" + +#: src/utils_reencrypt_luks1.c:369 +msgid "Activating temporary device using old LUKS header." +msgstr "" + +#: src/utils_reencrypt_luks1.c:379 +msgid "Activating temporary device using new LUKS header." +msgstr "" + +#: src/utils_reencrypt_luks1.c:389 +msgid "Activation of temporary devices failed." +msgstr "" + +#: src/utils_reencrypt_luks1.c:449 +msgid "Failed to set data offset." +msgstr "" + +#: src/utils_reencrypt_luks1.c:455 +msgid "Failed to set metadata size." +msgstr "" + +#: src/utils_reencrypt_luks1.c:463 +#, c-format +msgid "New LUKS header for device %s created." +msgstr "" + +#: src/utils_reencrypt_luks1.c:500 +#, c-format +msgid "%s header backup of device %s created." +msgstr "" + +#: src/utils_reencrypt_luks1.c:556 +msgid "Creation of LUKS backup headers failed." +msgstr "" + +#: src/utils_reencrypt_luks1.c:685 +#, c-format +msgid "Cannot restore %s header on device %s." +msgstr "" + +#: src/utils_reencrypt_luks1.c:687 +#, c-format +msgid "%s header on device %s restored." +msgstr "" + +#: src/utils_reencrypt_luks1.c:917 src/utils_reencrypt_luks1.c:923 +msgid "Cannot open temporary LUKS device." +msgstr "" + +#: src/utils_reencrypt_luks1.c:928 src/utils_reencrypt_luks1.c:933 +msgid "Cannot get device size." +msgstr "" + +#: src/utils_reencrypt_luks1.c:968 +msgid "IO error during reencryption." +msgstr "" + +#: src/utils_reencrypt_luks1.c:998 +msgid "Provided UUID is invalid." +msgstr "" + +#: src/utils_reencrypt_luks1.c:1220 +msgid "Cannot open reencryption log file." +msgstr "" + +#: src/utils_reencrypt_luks1.c:1226 +msgid "" +"No decryption in progress, provided UUID can be used only to resume " +"suspended decryption process." +msgstr "" + +#: src/utils_reencrypt_luks1.c:1280 +#, c-format +msgid "Reencryption will change: %s%s%s%s%s%s." +msgstr "" + +#: src/utils_reencrypt_luks1.c:1281 +msgid "volume key" +msgstr "" + +#: src/utils_reencrypt_luks1.c:1283 +msgid "set hash to " +msgstr "" + +#: src/utils_reencrypt_luks1.c:1284 +msgid ", set cipher to " +msgstr "" + +#: src/utils_blockdev.c:189 #, c-format msgid "WARNING: Device %s already contains a '%s' partition signature.\n" msgstr "" -#: src/utils_blockdev.c:200 +#: src/utils_blockdev.c:197 #, c-format msgid "WARNING: Device %s already contains a '%s' superblock signature.\n" msgstr "" -#: src/utils_blockdev.c:221 src/utils_blockdev.c:285 +#: src/utils_blockdev.c:219 src/utils_blockdev.c:294 src/utils_blockdev.c:344 msgid "Failed to initialize device signature probes." msgstr "" -#: src/utils_blockdev.c:265 +#: src/utils_blockdev.c:274 #, c-format msgid "Failed to stat device %s." msgstr "" -#: src/utils_blockdev.c:278 -#, c-format -msgid "Device %s is in use. Cannot proceed with format operation." -msgstr "" - -#: src/utils_blockdev.c:280 +#: src/utils_blockdev.c:289 #, c-format msgid "Failed to open file %s in read/write mode." msgstr "" -#: src/utils_blockdev.c:294 +#: src/utils_blockdev.c:307 #, c-format msgid "Existing '%s' partition signature on device %s will be wiped." msgstr "" -#: src/utils_blockdev.c:297 +#: src/utils_blockdev.c:310 #, c-format msgid "Existing '%s' superblock signature on device %s will be wiped." msgstr "" -#: src/utils_blockdev.c:300 +#: src/utils_blockdev.c:313 msgid "Failed to wipe device signature." msgstr "" -#: src/utils_blockdev.c:307 +#: src/utils_blockdev.c:320 #, c-format msgid "Failed to probe device %s for a signature." msgstr "" @@ -3432,16 +3619,16 @@ msgstr "" msgid "Invalid size specification in parameter --%s." msgstr "" -#: src/utils_args.c:121 +#: src/utils_args.c:125 #, c-format msgid "Option --%s is not allowed with %s action." msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:108 +#: tokens/ssh/cryptsetup-ssh.c:110 msgid "Failed to write ssh token json." msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:126 +#: tokens/ssh/cryptsetup-ssh.c:128 msgid "" "Experimental cryptsetup plugin for unlocking LUKS2 devices with token " "connected to an SSH server\vThis plugin currently allows only adding a token " @@ -3456,112 +3643,112 @@ msgid "" "user and paths) will be stored in the LUKS2 header in plaintext." msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:136 +#: tokens/ssh/cryptsetup-ssh.c:138 msgid " " msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:139 +#: tokens/ssh/cryptsetup-ssh.c:141 msgid "Options for the 'add' action:" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:140 +#: tokens/ssh/cryptsetup-ssh.c:142 msgid "IP address/URL of the remote server for this token" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:141 +#: tokens/ssh/cryptsetup-ssh.c:143 msgid "Username used for the remote server" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:142 +#: tokens/ssh/cryptsetup-ssh.c:144 msgid "Path to the key file on the remote server" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:143 +#: tokens/ssh/cryptsetup-ssh.c:145 msgid "Path to the SSH key for connecting to the remote server" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:144 +#: tokens/ssh/cryptsetup-ssh.c:146 msgid "" "Keyslot to assign the token to. If not specified, token will be assigned to " "the first keyslot matching provided passphrase." msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:146 +#: tokens/ssh/cryptsetup-ssh.c:148 msgid "Generic options:" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:147 +#: tokens/ssh/cryptsetup-ssh.c:149 msgid "Shows more detailed error messages" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:148 +#: tokens/ssh/cryptsetup-ssh.c:150 msgid "Show debug messages" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:149 +#: tokens/ssh/cryptsetup-ssh.c:151 msgid "Show debug messages including JSON metadata" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:260 +#: tokens/ssh/cryptsetup-ssh.c:262 msgid "Failed to open and import private key:\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:264 +#: tokens/ssh/cryptsetup-ssh.c:266 msgid "Failed to import private key (password protected?).\n" msgstr "" #. TRANSLATORS: SSH credentials prompt, e.g. "user@server's password: " -#: tokens/ssh/cryptsetup-ssh.c:266 +#: tokens/ssh/cryptsetup-ssh.c:268 #, c-format msgid "%s@%s's password: " msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:355 +#: tokens/ssh/cryptsetup-ssh.c:357 #, c-format msgid "Failed to parse arguments.\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:366 +#: tokens/ssh/cryptsetup-ssh.c:368 #, c-format msgid "An action must be specified\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:372 +#: tokens/ssh/cryptsetup-ssh.c:374 #, c-format msgid "Device must be specified for '%s' action.\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:377 +#: tokens/ssh/cryptsetup-ssh.c:379 #, c-format msgid "SSH server must be specified for '%s' action.\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:382 +#: tokens/ssh/cryptsetup-ssh.c:384 #, c-format msgid "SSH user must be specified for '%s' action.\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:387 +#: tokens/ssh/cryptsetup-ssh.c:389 #, c-format msgid "SSH path must be specified for '%s' action.\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:392 +#: tokens/ssh/cryptsetup-ssh.c:394 #, c-format msgid "SSH key path must be specified for '%s' action.\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:399 +#: tokens/ssh/cryptsetup-ssh.c:401 #, c-format msgid "Failed open %s using provided credentials.\n" msgstr "" -#: tokens/ssh/cryptsetup-ssh.c:415 +#: tokens/ssh/cryptsetup-ssh.c:417 #, c-format msgid "Only 'add' action is currently supported by this plugin.\n" msgstr "" -#: tokens/ssh/ssh-utils.c:46 tokens/ssh/ssh-utils.c:59 +#: tokens/ssh/ssh-utils.c:46 msgid "Cannot create sftp session: " msgstr "" @@ -3569,6 +3756,10 @@ msgstr "" msgid "Cannot init sftp session: " msgstr "" +#: tokens/ssh/ssh-utils.c:59 +msgid "Cannot open sftp session: " +msgstr "" + #: tokens/ssh/ssh-utils.c:66 msgid "Cannot stat sftp file: " msgstr ""